2289 matches found
Google + reCAPTCHA Could Raise Bar in Anti-Bot, Anti-Spam Fight
Locked in a cat-and-mouse game with spammers who use bots to defeat anti-fraud mechanisms and create fake accounts, Google today announced a deal to acquire reCAPTCHA, a company that provides those squiggly words at login screens. The ReCAPTCHA deal isn’t exactly a security transaction...
Unfixed XSS vulnerability at movies.chennaivision.com
Security researcher Ehl-i Beyt, has submitted on 08/05/2009 a cross-site-scripting XSS vulnerability affecting movies.chennaivision.com, which at the time of submission ranked 75559 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It...
Chance-i DiViS DVR System Directory Traversal
Digital Security Research Group DSecRG Advisory DSECRG-09-036 original advisory: http://dsecrg.com/pages/vul/DSECRG-09-036.html Application: Chance-i DiViS DVR System web-server Versions Affected: 2.0 Vendor URL: http://www.chance-i.com/ Bug: Directory Traversal File Download Exploits: YES...
Directory traversal
Multiple directory traversal vulnerabilities in e-Vision CMS 2.0.2 and earlier, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 an adminlang cookie to admin/index.php; or the module parameter to 2...
CVE-2008-6551
CVE-2008-6551 covers multiple local file inclusion/traversal flaws in e-Vision CMS 2.0.2 and earlier, exploited when magic_quotes_gpc is disabled. An attacker can trigger directory traversal via (1) an adminlang cookie to admin/ind_ex.php or (2) various module parameters to adminpart/add*.php in ...
CVE-2008-6551
Multiple directory traversal vulnerabilities in e-Vision CMS 2.0.2 and earlier, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 an adminlang cookie to admin/index.php; or the module parameter to 2...
CVE-2008-6551: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in e-Vision CMS 2.0.2 and earlier, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 an adminlang cookie to admin/index.php; or the module parameter to 2...
e-Vision CMS Multiple Local File Include Vulnerabilities
e-Vision CMS is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to view local files and execute local scripts within the context of the webserver process...
e-Vision CMS <= 2.0.2 Multiple LFI Vulnerabilities - Active Check
e-Vision CMS is prone to multiple local file include LFI vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
U.S. needs to investigate cyberweapons
Despite what you may have seen on 24 or read in Tom Clancy’s novels, the United States is well behind much of the rest of the world in developing both defensive and offensive cybersecurity capabilities, and that’s a deficit that may end up costing us dearly in the long run, according to a longtim...
Siemens ADSL SL2-141 CSRF Exploit
No description provided by source. ?php / ================================================ || Siemens ADSL SL2-141 Router CSRF Exploit || ================================================ - Successful attacks will allow remote access to the router over the internet. - Will Bruteforce the random...
Cross-Site Scripting vulnerability in e-Vision CMS
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в системе e-Vision CMS. XSS: http://site/admin/phpinfo.php?xss=3Cscript3Ealertdocument.cookie3C/script3E Уязвимы e-Vision CMS 2.02 и предыдущие версии и потенциально следующие на PHP = 4.4.6 и PHP = 5.1.2 где имеетс...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. e-Vision CMS: crossite scripting...
e-Vision CMS <= 2.0.2 Multiple Local File Inclusion Exploit
Exploit for unknown platform in category web applications =========================================================== e-Vision CMS = 2.0.2 Multiple Local File Inclusion Exploit =========================================================== ?php errorreporting0; iniset"defaultsockettimeout",5; /...
e-Vision CMS 2.0.2 - Multiple Local File Inclusions
e-Vision CMS 2.0.2 - Multiple Local File Inclusions starting; $exploit-i...
e-Vision CMS <= 2.0.2 Multiple Local File Inclusion Exploit
No description provided by source. ?php errorreporting0; iniset"defaultsockettimeout",5; / e-Vision = 2.0.2 Multiple Local File Inclusion Exploit ------------------------------------------------------- by athos - download http://sourceforge.net...
e-Vision CMS 2.0.2 - Multiple Local File Inclusions
starting; $exploit-isvulnerable$domain; $exploit-exploiting$domain,$mymode; class Exploit fu...
e-Vision CMS <= 2.02 (SQL/Upload/IG) Multiple Remote Vulnerabilities
No description provided by source. eVision 2.0 Sql Injection/Remote File Upload/IG AUTHOR : IRCRASH R3d.W0rm Sina Yazdanmehr Discovered by : IRCRASH R3d.W0rm Sina Yazdanmehr Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr Script Download :...
e-vision CMS 2.02 - SQL Injection Arbitrary File Upload Information Gathering
e-vision CMS 2.02 - SQL Injection Arbitrary File Upload Information Gathering eVision 2.0 Sql Injection/Remote File Upload/IG AUTHOR : IRCRASH R3d.W0rm Sina Yazdanmehr Discovered by : IRCRASH R3d.W0rm Sina Yazdanmehr Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina...
e-vision CMS 2.02 - SQL Injection / Arbitrary File Upload / Information Gathering
eVision 2.0 Sql Injection/Remote File Upload/IG AUTHOR : IRCRASH R3d.W0rm Sina Yazdanmehr Discovered by : IRCRASH R3d.W0rm Sina Yazdanmehr Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr Script Download :...