MixedCMS 1.0b (LFI/SU/AB/FD) Multiple Remote Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ----------------------------------...

Online Contact Manager 3.0 - delete.php?id Cross-Site Scripting

Online Contact Manager 3.0 - delete.php?id Cross-Site Scripting source: https://www.securityfocus.com/bid/34626/info Online Contact Manager is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues...

RedHat Stronghold Web Server 2.3 - Cross-Site Scripting

RedHat Stronghold Web Server 2.3 - Cross-Site Scripting source: https://www.securityfocus.com/bid/34606/info Red Hat Stronghold Web Server is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

Banshee 1.4.2 DAAP Extension - '/apps/web/vs_diag.cgi' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34507/info Banshee DAAP Extension is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...

AdaptBB Multiple Input Validation Vulnerabilities

AdaptBB is prone to multiple security vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include multiple SQL-injection issues, an arbitrary-file-upload issue, and an arbitrary-command-execution issue. SPDX-FileCopyrightText: 2009 Greenbone AG Some...

Horde Turba HTML Injection Vulnerability (Apr 2009)

Horde Turba is prone to an HTML injection vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Acute Control Panel SQL Injection Vulnerability and Remote File Include Vulnerability

Acute Control Panel is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and multiple remote file-include issues. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

PT-2009-1126 · Vmware +3 · Open-Vm-Tools +3

Name of the Vulnerable Software and Affected Versions: open-vm-tools version 2009.03.18-154848 Description: The issue is related to the mount.vmhgfs component of the open-vm-tools package, which incorrectly handles symbolic links before accessing a file. This can allow an attacker to access...

Tiki Wiki CMS Groupware 'tiki-orphan_pages.php' XSS Vulnerability

Tiki Wiki CMS Groupware is prone to a cross-site scripting vulnerability. This VT has been deprecated as a duplicate of the VT SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Infopop UBB.Threads Admin Credentials via SQL Injection

No description provided by source. Background: ----------- SQL injection has previously been discovered \ http://www.securityfocus.com/bid/14052/ New Details: ------------ UBBThreads is nice enough to encrypt/mask the regular users' passwords in the \ database, but stores the admin users' passwor...

CentOS Update for firefox CESA-2008:0222 centos4 i386

Check for the Version of firefox OpenVAS Vulnerability Test CentOS Update for firefox CESA-2008:0222 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

ContentKeeper Web Appliance < 125.10 Command Execution

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

ProFTPd 1.3 - mod_sql Username SQL Injection

ProFTPd 1.3 - modsql Username SQL Injection source: https://www.securityfocus.com/bid/33722/info ProFTPD is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

OpenOffice.org 1.1.2 - 1.1.5 DoS Vulnerability - Linux

OpenOffice.org is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Simple Machines Forum <= 1.1.7 XSRF/XSS/Package Upload Vuln

No description provided by source. Author: Xianur0 Vulnerable Version: All The Bug is located in the file: Sources/PackageGet.php Example: http://victm.com/index.php?action=packageget;sa=browse;absolute=http://attacker.com When the admin link between the SMF to load the file:...

Pardal CMS <= 0.2.0 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications =============================================== Pardal CMS ". "\n+ Ex. : php xpl.php localhost /PardalCMS Admin". "\n\n"; exit ; function query $user, $chr, $pos $query = "x' OR ASCIISUBSTRINGSELECT senha FROM users WHERE login =...

phpList 2.10.8 Local File Inclusion

www.BugReport.ir AmnPardaz Security Research Team Title: phpList Local File inclusion Vendor: http://www.phplist.com Bug: Local File Inclusion Vulnerable Version: 2.10.8 prior versions also may be affected Exploitation: Remote with browser Fix: N/A Original Advisory:...

phpList <= 2.10.8 Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ==================================================== phpList Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 AmnPardaz Security...

phpList 2.10.8 - Local File Inclusion

phpList 2.10.8 - Local File Inclusion www.BugReport.ir AmnPardaz Security Research Team Title: phpList Local File inclusion Vendor: http://www.phplist.com Bug: Local File Inclusion Vulnerable Version: 2.10.8 prior versions also may be affected Exploitation: Remote with browser Fix: N/A Original...

Simple Machines Forum <= 1.1.5 Password Reset Security Bypass Vulnerability

Simple Machines Forum 1.1.5 Password Reset Security Bypass Vulnerability. CVE-2008-6971. Webapps exploit for php platform source: http://www.securityfocus.com/bid/33219/info Simple Machines Forum is prone to a security-bypass vulnerability because it fails to adequately restrict access to the...