107 matches found
WordPress FCChat Widget 2.x Shell Upload
Description : Wordpress Plugins - FCChat Widget Arbitrary File Upload Vulnerability Version : 2.2.12.2 - 2.2.12.4 - 2.2.13.1 Link : http://wordpress.org/extend/plugins/fcchat/ Plugins : http://downloads.wordpress.org/plugin/fcchat.2.2.12.4.zip Date : 31-05-2012 Google Dork :...
CVE-2011-2197
The cross-site scripting XSS prevention feature in Ruby on Rails 2.x before 2.3.12, 3.0.x before 3.0.8, and 3.1.x before 3.1.0.rc2 does not properly handle mutation of safe buffers, which makes it easier for remote attackers to conduct XSS attacks via crafted strings to an application that uses a...
Python Multiple Vulnerabilities (Windows)
This host is installed with Python and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbpythonmultvulnwin.nasl 8160 2017-12-18 15:33:57Z cfischer $ Python Multiple Vulnerabilities Windows Authors: Madhuri D Copyright: Copyright c 2011 Greenbone Networks GmbH,...
KCFinder 2.2 Shell Upload
: Exploit Title: kcfinder 2.2 upload shell : : Date: 15/10/2010 : : Author: saudi0hacker : : Software Link: http://kcfinder.sunhater.com/ : : Version: 2.x : : Tested on: linux b0x : : Greetz to : All of my Friends :...
Ruby on Rails 'unicode strings' XSS Vulnerability (Sep 2009)
Ruby on Rails is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Awcm CMS Local File Inclusion
Exploit Title: Awcm Cms Local File Inclusion Vulnerability Author: SwEET-DeViL Published: 10-6-2010 Software Link: http://www.awcm-cms.com/ Download Software: http://sourceforge.net/projects/awcm/ Version: 2.x Tested on: Lunix Exploit : ?php print"...
AWCM CMS - Local File Inclusion
AWCM CMS - Local File Inclusion Software Link: http://www.awcm-cms.com/ Version: 2.x Tested on: Lunix Exploit : ?php print" ------------------------------------------------------------ | Awcm Cms Local File Inclusion Vulnerability | By SwEET-DeViL | x0.rootatgmail.com | example | | Exploit.php...
Shibboleth Service Provider Multiple XSS Vulnerabilities (Windows)
The host has Shibboleth Service Provider installed and is prone to multiple Cross-Site Scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbshibbolethspmultxssvulnwin.nasl 4869 2016-12-29 11:01:45Z teissa $ Shibboleth Service Provider Multiple XSS Vulnerabilities Windows Authors: Sharath ...
Shibboleth Service Provider Multiple XSS Vulnerabilities - Windows
Shibboleth Service Provider is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Insecure Saving Of Downloadable File In Mozilla Firefox (Linux)
This host is installed with Mozilla Firefox and is prone to insecure saving of downloadable file. OpenVAS Vulnerability Test $Id: secpodfirefoxinsecuresavingdownloadfile.nasl 5055 2017-01-20 14:08:39Z teissa $ Insecure Saving Of Downloadable File In Mozilla Firefox Linux Authors: Sharath S...
OpenOffice EMF File Parser Remote Command Execution Vulnerability (Windows)
The host has OpenOffice installed and is prone to Remote Command Execution Vulnerability OpenVAS Vulnerability Test $Id: secpodopenofficeemffileparservulnwin.nasl 5122 2017-01-27 12:16:00Z teissa $ OpenOffice EMF File Parser Remote Command Execution Vulnerability Windows Authors: Antu Sanadi...
OpenOffice EMF File Parser Remote Command Execution Vulnerability (Linux)
The host has OpenOffice installed and is prone to Remote Command Execution Vulnerability OpenVAS Vulnerability Test $Id: secpodopenofficeemffileparservulnlin.nasl 5122 2017-01-27 12:16:00Z teissa $ OpenOffice EMF File Parser Remote Command Execution Vulnerability Linux Authors: Antu Sanadi...
Directory traversal
Gallery before 1.5.9, and 2.x before 2.2.6, does not properly handle ZIP archives containing symbolic links, which allows remote authenticated users to conduct directory traversal attacks and read arbitrary files via vectors related to the archive upload aka zip upload functionality...
Mozilla Firefox 1.5.x < 1.5.0.9 / 2.x < 2.0.0.1 Multiple Vulnerabilities
Binary data 3868.prm...
VistaBB <= 2.x (functions_mod_user.php) Remote Include Exploit
No description provided by source. !/usr/bin/perl Method found and exploit scripted by nukedx Contacts ICQ: 10072 Web: http://www.nukedx.com MAIL/MSN: [email protected] Original advisory can be found at: http://www.nukedx.com/?viewdoc=48 VistaBB = 2.x Remote Command Execution Exploit This exploit...
Advisory: phpBB 2.x (Activity MOD Plus) File Inclusion Vulnerability.
--Security Report-- Advisory: phpBB 2.x Activity MOD Plus File Inclusion Vulnerability. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 27/05/06 07:49 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: phpBB-Amod...
[SA19049] Gemini "rtcDescription$RadEditor1" Script Insertion Vulnerability
TITLE: Gemini "rtcDescription$RadEditor1" Script Insertion Vulnerability SECUNIA ADVISORY ID: SA19049 VERIFY ADVISORY: http://secunia.com/advisories/19049/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Gemini 2.x http://secunia.com/product/8406/...
Sql injection in ibProArcade
Sql injection in ibProArcade. This bug was discoverd in all of the versions of ibproarcade 2.x. It was tested and found perfectly working under vBulettin or Invision power board. Date:2005-11-5 The injection is here: module=report&user=userid Query: 'SELECT name FROM ibfmembers WHERE id=userid'...
Gossamer Threads Links 2.x - 'User.cgi' Cross-Site Scripting
source: https://www.securityfocus.com/bid/13484/info Gossamer Threads Links is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in t...
Gossamer Threads Links 2.x - User.cgi Cross-Site Scripting
Gossamer Threads Links 2.x - User.cgi Cross-Site Scripting source: https://www.securityfocus.com/bid/13484/info Gossamer Threads Links is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may...