223 matches found
Spider Form Maker by Web-Dorado [com_formmaker],3.4 and lower
Spider Form Maker by Web-Dorado comformmaker,3.4 and lower,SQL Injection Developer statement This vulnerability was fixed in version 3.4.1 and above. The version 3.4.1 was released on 2014-09-10...
WordPress Google Map Travel 3.4 XSS / CSRF
=============================================================================== CSRF/Stored XSS Vulnerability in AB Google Map Travel AB-MAP Wordpress Plugin =============================================================================== . contents:: Table Of Content Overview ======== Title :Stor...
Multiple cross-site scripting vulnerabilities in phpMyAdmin (CNVD-2015-00059)
phpMyAdmin is an online management tool for MySQL databases. Its main functions include creating data tables online, running SQL statements, searching and querying data, and importing and exporting data. Multiple cross-site scripting vulnerabilities in phpMyAdmin version 3.4.x prior to 3.4.5 allo...
Multiple cross-site scripting vulnerabilities in phpMyAdmin (CNVD-2015-00060)
phpMyAdmin is an online management tool for MySQL databases. Its main functions include creating data tables online, running SQL statements, searching and querying data, and importing and exporting data. Multiple cross-site scripting vulnerabilities in phpMyAdmin version 3.4.x before 3.4.5 allow...
DEBIAN-CVE-2011-3591
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 3.4.x before 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via a crafted row that triggers an improperly constructed confirmation message after inline-editing and save operations, related to 1...
IP.Board 3.4.x /interface/ipsconnect/ipsconnect.php SQL注入漏洞
No description provided by source...
Joomla Spider Form Maker <= 3.4 - SQLInjection
No description provided by source. !/usr/bin/env python -- coding:utf-8 -- from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register class TestPOCPOCBase: vulID = '87285' version = '1' vulDate = '2014-09-07' author = 'anonymous' createDate =...
Campus Bulletin Board 3.4 - post3/book.asp review Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/29375/info Campus Bulletin Board is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied dat...
i-Gallery 3.4 igallery.ASP Remote Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26348/info i-Gallery is prone to a remote information-disclosure vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized remote user to view arbitrary local...
Phorum 3.4 Email Subject Line Script Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7262/info It has been reported that it is possible to inject script code into the subject of a message in Phorum. This may be done by constructing a malicious subject line or other fields before sending an email to the...
Campus Bulletin Board 3.4 - post3/view.asp id Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/29375/info Campus Bulletin Board is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied dat...
Zomplog 3.3/3.4 Detail.PHP HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15168/info Zomplog is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplie...
Python 'Hash Collision' Denial of Service Vulnerability - Windows
Python is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python"; ifdescripti...
Python 'Hash Collision' Denial of Service Vulnerability - Mac OS X
Python is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...
Wordpress 3.4 - 3.5.1 /wp-admin/users.php Malformed s Parameter Path Disclosure
...
WordPress 3.4-3.5.1 DoS in class-phpass.php
...
Linux Kernel "iscsi_add_notunderstood_response()"缓冲区溢出漏洞
CVE ID: CVE-2013-2850 Linux Kernel是一款开源的操作系统。 Linux iSCSI子系统存在一个基于堆的缓冲区溢出，允许远程攻击者利用漏洞发送特制请求获得内核执行控制。 在处理超大key时"iscsiaddnotunderstoodresponse"函数drivers/target/iscsi/iscsitargetparameters.c存在一个边界错误，允许攻击者发送超过64字节的KEY触发漏洞，可以以应用程序上下文执行任意代码。 要成功利用漏洞需要配置了iSCSI target并监听网络。 0 Linux Kernel 3.0.x Linux...
CVE-2013-1402 - DigiLIBE Management Console - Execution After Redirect (EAR) Vulnerability
Product: DigiLIBE Management Console Vendor: Digitiliti Version: 3.4 - ? Tested Version: 3.4 Vendor Notified Date: October 09, 2012 Release Date: January 18, 2013 Risk: High Authentication: None required Remote: Yes Description: Execution After Redirect vulnerabilities exist in DigiLIBE Managemen...
DigiLIBE - Execution-After-Redirect Information Disclosure
source: https://www.securityfocus.com/bid/57499/info DigiLIBE is prone to a remote information-disclosure vulnerability. Successful exploits may allow the attacker to bypass authentication and gain access to potentially sensitive information. This may aid in further attacks. DigiLIBE 3.4 is...
Project Open Cross Site Scripting
Vulnerability Title: Project Open po - "account-closed.tcl" Reflective Cross Site Scripting Author: Michail Poultsakis Date of Vendor and CERT Contact: 2011.12.08 Publication Date: 2012.02.02 Product Link: http://www.project-open.com Affected Product Version: 3.4.x Project Open po version 3.4.x...