6169 matches found
PHP Web Explorer 0.99b - 'edit.php?File' Traversal Local File Inclusion
source: https://www.securityfocus.com/bid/31595/info PHP Web Explorer is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to view local files and execute...
Simple Machines Forum (SMF) 1.1.6 - 'POST' Filter Security Bypass
source: https://www.securityfocus.com/bid/31594/info Simple Machines Forum SMF is prone to a security-bypass vulnerability because the application fails to sufficiently sanitize user-supplied input. Attackers can exploit this issue to bypass filter restrictions and post spam content onto the...
Simple Machines Forum (SMF) 1.1.6 - POST Filter Security Bypass
Simple Machines Forum SMF 1.1.6 - POST Filter Security Bypass source: https://www.securityfocus.com/bid/31594/info Simple Machines Forum SMF is prone to a security-bypass vulnerability because the application fails to sufficiently sanitize user-supplied input. Attackers can exploit this issue to...
VMware Product(s) Local Privilege Escalation Vulnerability
The host is installed with VMWare products that are vulnerable to local privilege escalation vulnerability. OpenVAS Vulnerability Test $Id: gbvmwareprdtsprvescvuln.nasl 4917 2017-01-02 14:43:20Z cfi $ VMware Products Local Privilege Escalation Vulnerability Authors: Chandan S Copyright: Copyright...
brilliant-sql.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Discovery Date: Sept 17, 2008 Security risk: high Exploitable from: Remote Vulnerability: SQL Injection Discovered by: Justin C. Klein Keane a.k.a. Mad Irish Description Drupal http://drupal.org is a robust content management system CMS that provides...
TYPO3 Security Bulletin
It has been discovered that the extension phpMyAdmin phpmyadmin is vulnerable to Cross-Site Scripting. Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 3.3.0 and all versions below Vulnerability Type: Cross-Site...
drupal-xss.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Date: Sept 12, 2008 Security risk: medium Exploitable from: Remote Vulnerability: Cross site scripting Description Drupal is a robust content management system CMS that provides extensibility through hundreds of third party modules. While the security...
Masir Camp E-Shop Module <= 3.0 (ordercode) SQL Injection Vuln
Exploit for unknown platform in category web applications ============================================================== Masir Camp E-Shop Module = 3.0 ordercode SQL Injection Vuln ============================================================== Title: Masir Camp E-Shop Module = 3.0 SQL Injection...
Masir Camp E-Shop Module 3.0 - ordercode SQL Injection
Masir Camp E-Shop Module 3.0 - ordercode SQL Injection www.BugReport.ir AmnPardaz Security Research Team Title: Masir Camp E-Shop Module = 3.0 SQL Injection Vendor: www.masir.net Vulnerable Version: 3.0 and prior versions Exploit: Available Impact: Medium Fix: N/A Original Advisory:...
FreeBSD Ports: nagios
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Ports: ethereal, ethereal-lite, tethereal, tethereal-lite
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
OpenOffice.org < 3.2.0 'rtl_allocateMemory()' RCE Vulnerability - Linux
OpenOffice.org is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
phpmyrealty109-sql.txt
phpMyRealty = 1.0.9 pages.php id Remote SQL Injection Vulnerability Author: !DoktOR! Date found: 27.08.08 Product: phpMyRealty Version: 1.0.7, 1.0.9 Download script: http://rapidshare.com/files/123835319/phpMyRealty.v1.0.7.PHP-rs.rar Vulnerability Class: SQL Injection Exploit 1:...
FreeSSHD Key Exchange Buffer Overflow
A vulnerable version of FreeSSHd is installed on the remote host. Description : The version installed does not validate key exchange strings send by a SSH client. This results in a buffer overflow and possible a compromise of the host if the client is sending a long key exchange string. OpenVAS...
PunBB 1.2.x - 'p' Parameter Multiple Cross-Site Scripting Vulnerabilities
PunBB 1.2.x 'p' Parameter Multiple Cross-Site Scripting Vulnerabilities. Webapps exploit for php platform source: http://www.securityfocus.com/bid/31082/info PunBB is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may...
Vanilla 1.1.4 - HTML Injection Cross-Site Scripting
Vanilla 1.1.4 - HTML Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/30748/info Vanilla is prone to multiple HTML-injection vulnerabilities and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage these...
Kayako SupportSuite 3.x - index.php?filter Cross-Site Scripting
Kayako SupportSuite 3.x - index.php?filter Cross-Site Scripting source: https://www.securityfocus.com/bid/30642/info Kayako SupportSuite is prone to multiple input-validation vulnerabilities, including an SQL-injection issue, multiple cross-site scripting issues, and an HTML-injection issue. The...
Mozilla Firefox <= 1.0.4 "Set As Wallpaper" Code Execution Exploit
No description provided by source. // Exploit by Michael Krax !DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" html head titleFirewalling - Proof-of-Concept/title script function stopload // in some cases the javascript url never stops to load // therefore we force a stop after the...
IGES CMS <= 2.0 (XSS/SQL) Multiple Remote Vulnerabilities
No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: IGES CMS =2.0 Multiple Vulnerabilities Vendor: www.iges.nl Exploit: Available Vulnerable Version: 2.0 Impact: High Fix: N/A 1. Description: IGES CMS is a complete, fully featured CMS in PHP language with S...
Noticeware Email Server 4.6 - NG LOGIN Messages Denial of Service
Noticeware Email Server 4.6 - NG LOGIN Messages Denial of Service source: https://www.securityfocus.com/bid/30605/info NoticeWare Email Server NG is prone to a denial-of-service vulnerability because it fails to handle user-supplied input. Remote attackers can exploit this issue to deny service t...