2280 matches found
BurpSentintel - GUI Burp Plugin to ease discovering of security holes in web applications
A plugin for Burp Intercepting Proxy, to aid and ease the identification of vulnerabilities in web applications. Searching for vulnerabilities in web applications can be a tedious task. Most of the time consists of inserting magic chars into parameters, and looking for suspicious output. Sentinel...
Dolibarr CMS 3.5.3 SQL Injection / Cross Site Scripting
Vulnerability Name: SQL injection Severity: Critical URL: http://localhost/dolibarr/user/fiche.php Affected Users: All authenticated users Issue details: The "entity" parameter appears to be vulnerable to SQL injection attacks. A single quote was submitted in the entity parameter, and a database...
deV!L`z Clanportal Gamebase Addon SQL Injection Vulnerability
No description provided by source...
Webspell dailyinput Movie Addon 4.2.x SQL Injection Vulnerability
No description provided by source. ======================================================================================== | Title : Webspell 4.2.x dailyinput Movie-Addon SQL Injection Vulnerability | Author : Easy Laster | Script : Webspell 4.2.x dailyinput Movie-Addon | Site :...
PHPNuke AddOn PHPToNuke.PHP 1.0 Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3807/info phptonuke.php is a PHPNuke AddOn script to insert a PHP script into the middle of a PHPNuke site. It is written and maintained by Lebios. It is possible for a malicious user to create a link to the phptonuke.php...
phpBB Fishing Cat Portal Addon - 'functions_portal.php' Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28708/info Fishing Cat Portal Addon for phpBB is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue can allow an attacker to compromise the...
PHPKIT 1.6.x 'b-day.php' Addon SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38891/info PHPKIT 'b-day.php' addon is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
WBB2-Addon: Acrotxt 1.0 - (show) Remote SQL Injection Vulnerability
No description provided by source. Title: WBB2-Addon: Acrotxt v1 show Remote SQL Injection Bug by: D4m14n 11/07/2007 Page: www.damians-world.dl.am // www.team-internet.dl.am Dork: inurl:acrotxt.php wbb SQL-Injection: http://target/path/acrotxt.php?show=SQL Example:...
PHP-Fusion Teams Structure Infusion Addon SQL Injection
No description provided by source. Exploit Title: PHP-fusion Team Structure Infusion All versions SQL injection Date: 16-1-2010 Author: Saif El-Sherei Software Link: http://www.php-fusion.co.uk/infusions/addondb/view.php?addonid=120 Version: PHP-fusion 7.01..03, TeamStructure Infusionall versions...
Woltlab Burning Board Regenbogenwiese 2007 Addon SQL Injection Exploit.
No description provided by source...
PHP-Nuke 6.5 Addon Viewpage.PHP File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7191/info PHP-Nuke has been reported prone to a file disclosure vulnerability when using the viewpage.php addon. It has been reported that PHP-Nuke may disclose arbitrary web server readable files under certain...
Webspell FIRSTBORN Movie-Addon Blind SQL Injection Vulnerability
No description provided by source. ======================================================================================== | Title : Webspell FIRSTBORN Movie-Addon Blind SQL Injection Vulnerability | Author : Easy Laster | Script : Webspell FIRSTBORN Movie-Addon | Site : www.firstborn.de | Price...
deV!L`z Clanportal Witze Addon 0.9 - SQL Injection Vulnerability
No description provided by source. ======================================================================================== | Title : deV!Lz Clanportal Witze Addon Versions 0.9 SQL Injection Vulnerability | Author : Easy Laster | Download : http://dzcp-zone.de/downloads/?action=show&id=97 | Scrip...
Coppermine Photo Gallery <= 1.2.2b (Nuke Addon) Include Vulnerability
No description provided by source. ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Coppermine Photo Gallery v1.2.2b for PHPNUKE THEMEDIR Remote File...
Woltlab Burning Board FLVideo Addon (video.php, value param) - SQL Injection
No description provided by source...
Network Tool 0.2 PHPNuke Addon Metacharacter Filtering Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3552/info Network Tool is a PHPNuke addon, written and maintained by Rick Fournier. It is designed to offer network features such as nmap, traceroute, and ping from a web interface. A problem with the package has been...
Slack: CSRF on add comment section
Hi, Steps to repro: 1 Go to this link https://sehacure.slack.com/help/requests/237956 2 The malicious guy should now the request number and the username. 3 Open Tamper data using tamper data firefox addon,Fill the reply in the form. 4 Submit the request.You will see there are no anti-csrf token i...
Nagios Looking Glass Addon for Nagios server/s3_download.php File Disclosure
The Nagios Looking Glass Addon for Nagios installed on the remote host is affected by a file disclosure vulnerability. By sending a specially crafted request to the Addon's 'server/s3download.php' script, a remote, unauthenticated attacker can leverage this vulnerability to obtain the contents of...
Feeder.co RSS Feeder 5.2 Chrome - Persistent Vulnerability
Document Title: =============== Feeder.co RSS Feeder 5.2 Chrome - Persistent Vulnerability Release Date: ============= 2013-10-25 Vulnerability Laboratory ID VL-ID: ==================================== 1119 Common Vulnerability Scoring System: ==================================== 3.8 Product &...
Woltlab Burning Board Regenbogenwiese 2007 Addon - SQL Injection
Exploit Title: Woltlab Burning Board Regenbogenwiese 2007 Addon SQL Injection Exploit Google Dork: inurl:regenbogenwiese.php wbb and more Date: 04.09.2013 Exploit Author: Easy Laster Software Name: Regenbogenwiese v1.5 © 2007 by DieKrabbe Version: 1.5 Tested on: Windows 8/Backtrack !/usr/bin/ruby...