MDVA-2010:230 : kolab-webadmin

Normal users lacks permission to change their own personal information on kolab web interface, this update fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security...

MTDesing SQL Login Authentication by pass Vulnerability

Exploit for php platform in category web applications ======================================================= MTDesing SQL Login Authentication by pass Vulnerability ======================================================= +: MTDesing SQL Login by pas vuln. Date: 07.57 10.07.210 Author: Curly...

ASP. Net under the C/S back door--WebAdmin 2. Y application details-vulnerability warning-the black bar safety net

Hello everyone, don't know you have not used even the WebAdmin 2. X? Well, yeah, the one that ASP. Net environment under the back door. That's my immature works, if have what not hand over the place but also hope bear with me. Oh, today?, or let the coupling to the“Huang po sells melon from sell...

WebAdmin Shell Upload

Exploit Title: WebAdmin Shell Upload Vulnerability Date: 16.04.2010 Author: DigitALL Software Link: http://cker.name/webadmin/webadmin.php.gz Code : g00gle d0rk: inurl:webadmin.php Size · Permission · Owner · Group, Functions. 3xpl0it: You Edit index.php Or Shell Upload Greetz To: Efe KroNicKq...

WebAdmin - Arbitrary File Upload

WebAdmin - Arbitrary File Upload Exploit Title: WebAdmin Shell Upload Vulnerability Date: 16.04.2010 Author: DigitALL Code : g00gle d0rk: inurl:webadmin.php Size · Permission · Owner · Group, Functions. 3xpl0it: You Edit index.php Or Shell Upload Greetz To: Efe KroNicKq NoFearx38 and All...

WebAdmin Shell Upload Vulnerability

Exploit for php platform in category web applications =================================== WebAdmin Shell Upload Vulnerability =================================== Exploit Title: WebAdmin Shell Upload Vulnerability Date: 16.04.2010 Author: DigitALL Code : g00gle d0rk: inurl:webadmin.php Size ·...

WebAdmin - Arbitrary File Upload

Exploit Title: WebAdmin Shell Upload Vulnerability Date: 16.04.2010 Author: DigitALL Code : g00gle d0rk: inurl:webadmin.php Size · Permission · Owner · Group, Functions. 3xpl0it: You Edit index.php Or Shell Upload Greetz To: Efe KroNicKq NoFearx38 and All 1923Turk.Com Members...

Alt-N WebAdmin - USER Buffer Overflow (Metasploit)

$Id: altnwebadmin.rb 8498 2010-02-15 00:48:03Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

crownweb (page.cfm) Sql Injection Vulnerability

Exploit for unknown platform in category web applications =============================================== crownweb page.cfm Sql Injection Vulnerability =============================================== .:. Script : crownweb .:. Language : Cfm .:. Script Download: http://www.crownweb.net/ .:. Bug Ty...

crownweb - page.cfm SQL Injection

crownweb - page.cfm SQL Injection crownweb page.cfm Sql Injection Vulnerability =================================================================== .:. Email : [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : crownweb .:. Language : Cfm .:. Script Download:...

crownweb - 'page.cfm' SQL Injection

crownweb page.cfm Sql Injection Vulnerability =================================================================== .:. Email : [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : crownweb .:. Language : Cfm .:. Script Download: http://www.crownweb.net/ .:. Bug Type...

Alt-N WebAdmin USER Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Alt-N WebAdm...

RaidenHTTPD Cross Site Scripting and Local File Include Vulnerabilities

RaidenHTTPD is prone to local file-include and cross-site scripting vulnerabilities because the application fails to properly sanitize user- supplied input. These issues affect the WebAdmin component. An attacker may leverage the cross-site scripting issue to execute arbitrary script code in the...

RaidenHTTPD Cross Site Scripting and Local File Include Vulnerabilities

RaidenHTTPD is prone to local file-include and cross-site scripting vulnerabilities because the application fails to properly sanitize user- supplied input. These issues affect the WebAdmin component. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in webadmin/admin.php in @mail 5.6.1 allow remote attackers to inject arbitrary web script or HTML via the 1 type and 2 func parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2009-2455

Atmail WebMail

CVE-2009-2455

Multiple cross-site scripting XSS vulnerabilities in webadmin/admin.php in @mail 5.6.1 allow remote attackers to inject arbitrary web script or HTML via the 1 type and 2 func parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Axigen WebMail/WebAdmin Detection (HTTP)

HTTP based detection of Axigen WebMail SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.100176";...

Atmail WebMail <= 5.6.1 (5.61) webadmin/admin.php Multiple Parameter XSS

The version of Atmail WebMail running on the remote host is vulnerable to multiple cross-site scripting issues. 'webadmin/admin.php' fails to sanitize input to the 'func' parameter, and to the 'type' parameter when 'func' is set to 'stats'. This is known to affect version 5.6.1 5.61 and may affec...

Asbru Web Content Management 6.56.6.9 - SQL Injection Cross-Site Scripting

Asbru Web Content Management 6.56.6.9 - SQL Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/34349/info Asbru Web Content Management is prone to multiple SQL-injection vulnerabilities and a cross-site scripting vulnerability because it fails to sufficiently sanitize...