3954 matches found
BlackCat CMS 'logs.php' Arbitrary File Download Vulnerability
BlackCat CMS is a content management system based on PHP5 and HTML5. BlackCat CMS suffers from an input validation vulnerability that allows remote attackers to submit a special request to download arbitrary files...
php: regressions in 5.4+
It was found that certain PHP functions did not properly handle file names containing a NULL character. A remote attacker could possibly use this flaw to make a PHP script access unexpected files and bypass intended file system access restrictions...
Symphony CMS Cross-Site Scripting Vulnerability (CNVD-2015-03920)
Symphony CMS is a content management system CMS developed in PHP and MySQL. The system supports search engine optimization, module extensions and more. A cross-site scripting vulnerability exists in Symphony CMS version 2.6.2, which stems from the system/authors URI failing to adequately filter t...
ApPHP Hotel Site 3.x.x SQL Injection Vulnerability
ApPHP Hotel Site version 3.x.x suffers from a remote SQL injection vulnerability. Note that this finding houses site-specific data. ApPHP Hotel site SQLi Vulnerability ApPHP Hotel Site is an Hotel application programs using PHP Language. title : ApPHP Hotel Site v.3.x.x. godork : ".php?pid=" "ApP...
ZTE ZXV10 W300 v3.1.0c_DR0 - UI Session Delete Vulnerability
Exploit for hardware platform in category web applications Document Title: =============== ZTE ZXV10 W300 v3.1.0cDR0 - UI Session Delete Vulnerability Product & Service Introduction: =============================== ZTE zxv10 w300 ADSL wireless router cat family gateway accessories include a host,...
DEBIAN-CVE-2015-2665
Cross-site scripting XSS vulnerability in Cacti before 0.8.8d allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Ebay Magento Bug Bounty #12 - CSRF Web Vulnerability
Document Title: =============== Ebay Magento Bug Bounty 12 - CSRF Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1460 Video: http://www.vulnerability-lab.com/getcontent.php?id=1526 View Video: https://www.youtube.com/watch?v=x7uaABfxxU...
CVE-2015-1741
Microsoft Internet Explorer versions 9–11 are affected by CVE-2015-1741, a memory corruption vulnerability triggered by a crafted web page that can allow remote code execution or cause a denial of service. The issue is documented as a separate vulnerability from CVE-2015-1752. Public references i...
CVE-2015-1740
Microsoft Internet Explorer 6–11 is affected by CVE-2015-1740, a memory corruption vulnerability exploitable via a crafted web site that can allow remote code execution or a denial of service. The affected product is Internet Explorer (versions 6 through 11); the underlying cause is memory corrup...
SysAid Help Desk .jsp File Upload Vulnerability
SysAid Help Desk is a suite of Web-based IT management software. An arbitrary file upload vulnerability in the SysAid Help Desk ChangePhoto.jsp script allows remote attackers to submit a special .jsp file and execute it...
Pasworld - 'detail.php' Blind SQL Injection
========================================================= + Title :- Pasworld detail.php Blind Sql Injection Vulnerability + Date :- 5 - June - 2015 + Vendor Homepage: :- http://main.pasworld.co.th/ + Version :- All Versions + Tested on :- Nginx/1.4.5, PHP/5.2.17, Linux - Windows + Category :-...
Multiple HTML Injection Vulnerabilities in Dolibarr
Dolibarr is a WEB-based open source ERP and CRM system . Dolibarr suffers from multiple HTML injection vulnerabilities due to the program failing to adequately filter user-submitted input. The vulnerabilities could be exploited to allow an attacker to execute arbitrary script code in the context ...
PentestBox - Portable Penetration Testing Distribution for Windows Environments
PentestBox is not like other Penetration Testing Distributions which runs on virtual machines. It is created because more than 50% of penetration testing distributions users uses windows. So it provides an efficient platform for Penetration Testing on windows platform. Check out demo video: Easy ...
Hive 2.0 RC2 XSS / Code Execution / SQL Injection
| Title : Hive v2.0 RC2 Multi Vulnerability | Author : indoushka | email : [email protected] | Dork : "Powered by DigitalHive" | Tested on: windows 8.1 Français V.Pro | Bug : Stop Script | Download : http:///www.digitalhive.com ======================================= Stop SCript working :...
Ebay Magento Bug Bounty #6 - Persistent Mail Web Vulnerability
Document Title: =============== Ebay Magento Bug Bounty 6 - Persistent Mail Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1393 EIBBP-31097 Release Date: ============= 2015-06-01 Vulnerability Laboratory ID VL-ID:...
某政府在用系统通用型SQL注入#3
简要描述： rt 详细说明： 某政府在用系统通用型SQL注入3。 案例如下: http://wssp.jiangxi.gov.cn:8008/outportal/licenseManage/licenseManage.jsp http://117.40.187.175:8008/outportal/licenseManage/licenseManage.jsp http://xzfw.jinxi.gov.cn/outportal/licenseManage/licenseManage.jsp...
OYO File Manager 1.1 - Multiple Web Vulnerabilities
Document Title: =============== OYO File Manager 1.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1494 Release Date: ============= 2015-05-17 Vulnerability Laboratory ID VL-ID: ==================================== 1493...
Wireless Photo Transfer v3.0 iOS - File Include Vulnerability
Document Title: =============== Wireless Photo Transfer v3.0 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1492 Release Date: ============= 2015-05-12 Vulnerability Laboratory ID VL-ID:...
Pimcore v3.0.5 CMS - Multiple Web Vulnerabilities
Document Title: =============== Pimcore v3.0.5 CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1482 Release Date: ============= 2015-05-08 Vulnerability Laboratory ID VL-ID: ==================================== 1482...