592 matches found
11in1 CMS 1.0.1 - 'do.php' CRLF Injection
11in1 CMS v1.0.1 do.php CRLF Injection Vulnerability Vendor: 11in1 Product web page: http://www.11in1.org Affected version: 1.0.1 Summary: Eleven in One is an open-source content management system CMS that is powered by PHP and MySQL. It does not only help you manage your personal blog but also...
SetSeed CMS 5.8.20 (loggedInUser) remote sql injection flaws and fixes-vulnerability warning-the black bar safety net
SetSeed CMS 5.8.20 loggedInUser Remote SQL Injection Vulnerability Developer: SetSeed Program official: http://www.setseed.com Affected version: 5.8.20 Summary: SetSeed is a self-hosted CMS which lets you rapidly build and deploy complete websites and online stores for your clients. Description:...
Ashampoo Burning Studio Elements 10.0.9 - '.ashprj' Heap Overflow
!/usr/bin/perl Ashampoo Burning Studio Elements 10.0.9 .ashprj Heap Overflow Vulnerability Vendor: Ashampoo GmbH & Co. KG Product web page: http://www.ashampoo.com Affected version: 10.0.9 Summary: Ashampoo Burning Studio Elements offers you everything you need to burn movies, music and data - fa...
PG eLms Pro vDEC_2007_01 - 'contact_us.php' Multiple POST Cross-Site Scripting Vulnerabilities
PG eLMS Pro vDEC200701 contactus.php Multiple POST XSS Vulnerabilities function xss1document.forms"xss".submit; form acti...
WordPress 3.1.3 - SQL Injection
WordPress 3.1.3 - SQL Injection SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple SQL Injection Vulnerabilities product: WordPress vulnerable version: 3.1.3/3.2-RC1 and probably earlier versions fixed version:...
Sitemagic CMS 2010.04.17 Cross Site Scripting
Sitemagic CMS 2010.04.17 SMExt Remote Cross-Site Scripting Vulnerability Vendor: Sitemagic CMS Product web page: http://www.sitemagic.org Affected version: 2010.04.17 Summary: Sitemagic CMS is a fantastic new platform for building and maintaining great looking websites. It is very easy to set up...
Family Connections CMS 2.3.2 - Persistent Cross-Site Scripting XML Injection
Family Connections CMS 2.3.2 - Persistent Cross-Site Scripting XML Injection Family Connections CMS 2.3.2 Stored XSS And XPath Injection function xpathdocument.forms"xml".submit; function xssdocument.forms"xss".submit; a href="javascri...
Family Connections CMS 2.3.2 XSS / XML Injection
Family Connections CMS 2.3.2 Stored XSS And XPath Injection function xpathdocument.forms"xpath".submit; function xssdocument.forms"xss".submit; font color="r...
PHP-Nuke 8.x <= "chng_uid" Blind SQL Injection Vulnerability
PHP-Nuke 8.x = Blind SQL Injection Vulnerability 1. OVERVIEW The administration backend of PHP-Nuke 8.x is vulnerable to Blind SQL Injection. 2. BACKGROUND PHP-Nuke is a Web Portal System or content management system. The goal of PHP-Nuke is to have an automated web site to distribute news and...
Pointter PHP Content Management System 1.2 Multiple Vulnerabilities
Exploit for php platform in category web applications Vendor: PangramSoft GmbH Product web page: http://www.pointter.com Affected version: 1.2 Summary: Pointter PHP Content Management System is an advanced, fast and user friendly CMS script that can be used to build simple websites or professiona...
Adobe Acrobat Reader 9.x - Memory Corruption
Adobe Acrobat Reader 9.x - Memory Corruption --------------------------------------------------------------------------- Title : Adobe Acrobat Reader All Version memory corruption Product: Adobe Acrobat Reader Product Homepage: www.adobe.com...
Adobe Acrobat Reader < 9.x - Memory Corruption
--------------------------------------------------------------------------- Title : Adobe Acrobat Reader All Version memory corruption Product: Adobe Acrobat Reader Product Homepage: www.adobe.com --------------------------------------------------------------------------- Author : ITSecTeam Email...
[RT-SA-2010-003] Geo++(R) GNCASTER: Faulty implementation of HTTP Digest Authentication
Advisory: Geo++R GNCASTER: Faulty implementation of HTTP Digest Authentication During a penetration test, RedTeam Pentesting discovered that the GNCaster software has multiple bugs in its implementation of HTTP Digest Authentication. Details ======= Product: Geo++R GNCASTER Affected Versions: =...
Barracuda Web Firewall 660 Firmware 7.3.1.007 - Multiple Vulnerabilities
Barracuda Web Firewall 660 Firmware 7.3.1.007 - Multiple Vulnerabilities Pentest Information: ==================== GESEC Team remove discover a input validation vulnerability on Barracuda - Web Application Firewall 660 Appliance. A remote attacker is able to get sensitive customer sessions hijack...
Multiple XSS and Injection Vulnerabilities in TestLink Test Management and Execution System
Advisory ID Internal CORE-2009-1013 1. Advisory Information Advisory Id: CORE-2009-1013 Advisory URL:http://www.coresecurity.com/content/testlink-multiple-injection-vulnerabilities Date published: 2009-12-09 Date of last update: 2009-12-09 Vendors contacted: TestLink Community Release mode:...
django -- denial-of-service attack
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
PHP 5.2.6 - error_log Safe_mode Bypass
PHP 5.2.6 - errorlog Safemode Bypass SecurityReason.com PHP 5.2.6 errorlog safemode bypass Author: Maksymilian Arciemowicz cXIb8O3 securityreason.com Date: - - Written: 10.11.2008 - - Public: 20.11.2008 SecurityReason Research SecurityAlert Id: 57 CWE: CWE-264 SecurityRisk: Medium Affected...
Mapbender 2.4.4 (gaz) Remote SQL Injection Vulnerability
No description provided by source. Advisory: SQL-Injections in Mapbender During a penetration test RedTeam Pentesting discovered multiple SQL-Injections in Mapbender. A remote attacker is able to execute arbitrary SQL commands and therefore can get e.g. valid usernames and password hashes of the...
[Full-disclosure] NoseRub Login SQL Injection Vulnerability
-- ---------- ---- - ---------------------------- ---------- ---- -- ----------------------------- ------------- ---seclog- ------------------ ------------ -- --- ------------------- --------- ---- ------------------- ------- -------------------------- --- -------------- ----------- ---...
NoseRub 0.5.2 - Login SQL Injection
-- ---------- ---- - ---------------------------- ---------- ---- -- ----------------------------- ------------- ---seclog- ------------------ ------------ -- --- ------------------- --------- ---- ------------------- ------- -------------------------- --- -------------- ----------- ---...