Jomsborg AB, Sverige Sql Injection Vulnerability

Exploit for php platform in category web applications + Exploit Title :Jomsborg AB, Sverige Sql Injection Vulnerability + Author : eXeSoul + Contact : email protected + Date : 02-03-2011 + category: Web Apps SQli + HomePage : www.indishell.in + Version : all + Tested on : windows/linux +...

Jomsborg AB, Sverige SQL Injection

Exploit Title :Jomsborg AB, Sverige Sql Injection Vulnerability + Author : eXeSoul + Contact : [email protected] + Date : 02-03-2011 + category: Web Apps SQli + HomePage : www.indishell.in + Version : all + Tested on : windows/linux + Vulnerability Style : PHP Sql Injection Vunerability + Vendor:...

Oracle MySQL Eventum 2.3 Cross Site Scripting

Oracle MySQL Eventum 2.3 Remote Script Insertion Vulnerabilities Vendor: MySQL AB / Oracle Corporation Product web page: http://forge.mysql.com/wiki/Eventum Affected version: 2.2 and 2.3 Summary: Eventum is a user-friendly and flexible issue tracking system that can be used by a support departmen...

AB WEB CMS V.1.35 Multiple Remote Vulnerabilities

Exploit for php platform in category web applications ! AB WEB CMS V.1.35 Multiple Remote Vulnerabilities ! Author : Dr.0rYX and Cr3w-DZ ! MAIL : email protected & email protected ! greet to :WWW.GAZA-HACKER.NET / Software Information + Vendor : http://www.aeline-informatique.com/ + script : AB W...

ab Web CMS 1.35 - Multiple Vulnerabilities

ab Web CMS 1.35 - Multiple Vulnerabilities . . \ \ /| | \ /|| / / /\ \ | | | | \ \ \ | \ \ |/ \ \ | | \ / \ | /| | | Y \ // / | \ | | / \ \ / \ || /\ /| || || / /\ / || ||\ / / / / / / / / . ||/ | .. / | / // / | | \ \ \ \ \ / || |||| / | || \ /|| / / / / / / / / Pr!v8...

AB WEB CMS 1.35 Cross Site Scripting / SQL Injection

. . \ \ /| | \ /|| / / /\ \ | | | | \ \ \ | \ \ |/ \ \ | | \ / \ | /| | | Y \ // / | \ | | / \ \ / \ || /\ /| || || / /\ / || ||\ / / / / / / / / . ||/ | .. / | / // / | | \ \ \ \ \ / || |||| / | || \ /|| / / / / / / / / Pr!v8 Expl0iT AND t00L ALGERIAN HACKERS - NORTH-AFRICA...

ab Web CMS 1.35 - Multiple Vulnerabilities

. . \ \ /| | \ /|| / / /\ \ | | | | \ \ \ | \ \ |/ \ \ | | \ / \ | /| | | Y \ // / | \ | | / \ \ / \ || /\ /| || || / /\ / || ||\ / / / / / / / / . ||/ | .. / | / // / | | \ \ \ \ \ / || |||| / | || \ /|| / / / / / / / / Pr!v8 Expl0iT AND t00L...

MySQL 5.1.x错误UNINSTALL PLUGIN权限检查漏洞

BUGTRAQ ID: 39543 MySQL是一款使用非常广泛的开放源代码关系数据库系统，拥有各种平台的运行版本。 MySQL没有正确地执行UNINSTALL PLUGIN权限检查，用户无需拥有DELETE权限便可卸载插件 MySQL 5.1.x 厂商补丁： MySQL AB -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://lists.mysql.com/commits/103144?f=plain http://bazaar.launchpad.net/mysql/mysql-server/mysql-5.1/revision/33...

MySQL MaxDB Webtool GET Command Buffer Overflow (CVE-2005-0684)

MaxDB is an open source database application suite developed by MySQL AB available for various operating systems. The software bundles an HTTP server component, named Webtool, used to provide web-based application interfaces. Clients can connect to the Webtool with a web browser and access...

TinyMCE - Javascript WYSIWYG Editor xss/sql injection vurnerebility

=================================================================== TinyMCE - Javascript WYSIWYG Editor xss/sql injection vurnerebility =================================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0...

TinyMCE Cross Site Scripting / SQL Injection

Vurnerebility: Js tinymce/tinymce WYSIWYGjava script vurnerebility xss--popup & SQl implemented + Language : Java--,Xml + lisences : LGPL + Vendor : Moxiecode Systems AB + support : IE7J0/IE6.0/NS8.1-IE/NS8.1-G/FF2.0/O9.02; + Category : bug report + vendor : http://tinymce.moxiecode.com/ +...

TinyMCE WYSIWYG Editor - Multiple Vulnerabilities

TinyMCE WYSIWYG Editor - Multiple Vulnerabilities + Vurnerebility: Js tinymce/tinymce WYSIWYGjava script vurnerebility xss--popup & SQl implemented + Language : Java--,Xml + lisences : LGPL + Vendor : Moxiecode Systems AB + support : IE7J0/IE6.0/NS8.1-IE/NS8.1-G/FF2.0/O9.02; + Category : bug repo...

TinyMCE WYSIWYG Editor Multiple Vulnerabilities

Exploit for unknown platform in category web applications =============================================== TinyMCE WYSIWYG Editor Multiple Vulnerabilities =============================================== + Vurnerebility: Js tinymce/tinymce WYSIWYGjava script vurnerebility xss--popup & SQl implement...

TinyMCE WYSIWYG Editor - Multiple Vulnerabilities

Vurnerebility: Js tinymce/tinymce WYSIWYGjava script vurnerebility xss--popup & SQl implemented + Language : Java--,Xml + lisences : LGPL + Vendor : Moxiecode Systems AB + support : IE7J0/IE6.0/NS8.1-IE/NS8.1-G/FF2.0/O9.02; + Category : bug report + vendor : http://tinymce.moxiecode.com/ +...

Code injection

Multiple unspecified vulnerabilities on the Rockwell Automation AB Micrologix 1100 and 1400 controllers allow remote attackers to obtain privileged access or cause a denial of service halt via unknown vectors...

CVE-2009-3739

The CVE-2009-3739 entry applies to Rockwell Automation Allen-Bradley MicroLogix 1100 and MicroLogix 1400 controllers. Public sources describe multiple vulnerabilities that could allow remote attackers to obtain privileged access or cause a denial of service, via unspecified vectors. Reported impa...

CVE-2009-3739

Multiple unspecified vulnerabilities on the Rockwell Automation AB Micrologix 1100 and 1400 controllers allow remote attackers to obtain privileged access or cause a denial of service halt via unknown vectors...

Infinity <= 2.x.x options[style_dir] Local File Disclosure Vulnerability

Exploit for unknown platform in category web applications ======================================================================== Infinity ---------------------------------------------------------------------------------------------------------------- - +LFD Exploit:...

MySQL sql_parse.cc远程格式串漏洞

BUGTRAQ ID: 35609 MySQL是一款使用非常广泛的开放源代码关系数据库系统，拥有各种平台的运行版本。 MySQL的sqlparse.cc文件中的dispatchcommand函数存在格式串错误： 2084行： case COMCREATEDB: // QQ: To be removed char db=thd-strduppacket, alias; HACREATEINFO createinfo; statisticincrementthd-statusvar.comstatSQLCOMCREATEDB, &LOCKstatus; // null test to...

MySQL Connector/NET缺少SSL证书验证漏洞

BUGTRAQ ID: 35514 MySQL Connector/Net是MySQL数据库的ADO.NET驱动。 MySQL Connector/Net在使用加密的时候没有对服务器的证书执行验证。在NativeDriver.cs文件中，StartSSL函数依赖于名为 NoServerCheckValidation的验证函数，而该函数没有执行任何验证。此外还有另一个名为ServerCheckValidation 的函数，而该函数被标注掉。 能够对连接执行中间人攻击的攻击者可以通过利用这个漏洞绕过加密验证，从而破坏SSL所提供的安全性。 MySQL AB MySQL Connector/N...