Siteframe CMS 3.2.x SQL Injection / Disclosure

======================================================================================================================================================== o Siteframe CMS 3.2.x SQL Injection & phpinfo Disclosure Vulnerability Software : Siteframe CMS version 3.2.x Vendor : http://siteframe.org/...

Mutt 1.5.19 Security Bypass Vulnerability

Mutt is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mutt:mutt"; ifdescription...

Cross site scripting

WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to read images from arbitrary web sites via a CANVAS element with an SVG image, related to a "cross-site image capture issue."...

30,000 legit websites hit by malware infection

From The Register Dan Goodin A nasty infection that attempts to install a potent malware cocktail on the machines of end users has spread to about 30,000 websites run by businesses, government agencies and other organizations, researchers warned Friday websense.com. The infection sneaks malicious...

Cute Editor ASP.NET Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ======================================================== Cute Editor ASP.NET Remote File Disclosure Vulnerability ========================================================...

Research: Password 'secret question' woefully insecure

In research to be presented at the IEEE Symposium on Security and Privacy virginia.edu this week, researchers from Microsoft and Carnegie Mellon University plan to show that the secret questions used to secure the password-reset functions of a variety of websites are woefully insecure. In a study...

Report: 60% of all web sites contain serious vulnerabilities

From DarkReading Kelly Jackson Higgins Most Websites harbor at least one major vulnerability, and over 80 percent of Websites have had a critical security flaw, according to new data released today by WhiteHat Security. The Website vulnerability statistics, based on Website vulnerability data...

KingSoft Web Shield 1.1.0.62 - Cross-Site Scripting Code Execution

KingSoft Web Shield 1.1.0.62 - Cross-Site Scripting Code Execution KingSoft Web Shield XSS and Remote Code Execution Vulnerability Found by inking Version test Just make a website with evil javascript codes, and browse the url shows above milw0rm.com 2009-05-19...

Most attacks come from legit but hijacked sites

From TechWorld John E. Dunn The number of legitimate Websites being hacked to host malware has hit startling highs in recent days, new figures from MessageLabs have revealed. Data taken from the days between May 4 and 8 showed that 84.6 percent of Websites blocked by the company for hosting...

Puerto Rico sites redirected in DNS attack

From CNet News Elinor Mills An attack on the main domain name system registrar in Puerto Rico led to the local Web sites of Google, Microsoft, Yahoo, Coca-Cola, and other big companies being redirected for a few hours on Sunday to sites that were defaced, according to security firm Imperva. Those...

Cache-poisoning attack snares top Brazilian bank

From The Register Dan Goodin One of Brazil’s biggest banks has suffered an attack that redirected its customers to fraudulent websites that attempted to steal passwords and install malware, according to an unconfirmed report. According to this Google translation of an article penned in Portuguese...

Dust on the network enterprise websites intelligent management system 0day to use the program-vulnerability warning-the black bar safety net

Vulnerability report: Google keywords:inurl:/Web-GuestView. asp Test method: ,username,password,4,5,6,7,8%20fr%6Fm%20admin...

Redaxscript Detection

This host is running Redaxscript a free, PHP and MySQL driven Content Management System for small business and private websites. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Be careful what you search for

While search engine optimization SEO is becoming one of the must do’s for companies that are trying to improve theirsite ranking in search engines like Google and Yahoo, it’s also increasingly becoming a trick of the trade for spammers and malware authors looking to drive traffic to their own...

Sql injection

Multiple SQL injection vulnerabilities in login.php in Kim Websites 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2009-1026

CVE-2009-1026 affects Kim Websites 1.0, with SQL injection vulnerabilities in login.php. The issue allows remote attackers to manipulate the database by supplying crafted values for the username or password fields, enabling arbitrary SQL execution. This aligns with the NVD assessment of a high-se...

CVE-2009-1026

Multiple SQL injection vulnerabilities in login.php in Kim Websites 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

Kim Websites 1.0 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== Kim Websites 1.0 Auth Bypass SQL Injection Vulnerability ==========================================================...

Critical Firefox flaws flagged, fixed

The open-source Mozilla group has released Firefox 3.0.7 with fixes for at least eight security flaws, some rated critical. The most serious of the vulnerabilities could be exploited by attackers to run code and install software, requiring no user interaction beyond normal browsing, Mozilla warne...

[SECURITY] Fedora 10 Update: mediawiki-1.14.0-45.fc10

MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Copy /var/www/wiki over to the desired wiki...