550 matches found
openEngine 2.0 100226 - Local File Inclusion / Cross-Site Scripting
SecPod Technologies www.secpod.com Title : openEngine Local File Inclusion and XSS Vulnerabilities Vendor : http://www.openengine.de Advisory : http://secpod.org/blog/?p=152 http://secpod.org/advisories/SECPODOpenengineLFIXSSVuln.txt Version : openEngine 2.0 100226; other versions may also be...
openEngine 2.0 Cross Site Scripting / Local File Inclusion
SecPod Technologies www.secpod.com Title : openEngine Local File Inclusion and XSS Vulnerabilities Vendor : http://www.openengine.de Advisory : http://secpod.org/blog/?p=152 http://secpod.org/advisories/SECPODOpenengineLFIXSSVuln.txt Version : openEngine 2.0 100226; other versions may also be...
Pecio CMS 2.0.5 Cross Site Scripting
Pecio Content Management System CMS v2.0.5 Cross-Site scripting Vulnerability SecPod Technologies www.secpod.com Author: Antu Sanadi SecPod ID: 1006 09/10/2010 Issue Discovered 09/21/2010 Vendor Notified 09/21/2010 Vendor Confirmed Solution not available. Class: Cross-Site Scripting Severity:...
Inout Adserver (id) Remote SQL injection Vulnerability
No description provided by source. Inout Adserver id Remote SQL injection -X | |/ / || |/ | / | \ \ \ / / | \ / / \ | ' | | || | / | \ // / / / | , / ||\|||| ||| // // / // Red n'black i dress eagle on my chest. It's good to be an ALBANIAN Keep my head up high for that flag i die. Im...
Google Chrome Web Script Execution Vulnerabilities - June09
This host has Google Chrome installed and is prone to Web Script Execution vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromewebscriptexecvulnjun09.nasl 7585 2017-10-26 15:03:01Z cfischer $ Google Chrome Web Script Execution Vulnerabilities - June09 Authors: Sharath S Copyright:...
PHPAuctionSystem - Multiple Remote File Inclusions
»=======================================================================================================-X » » » PHPAuctionSystem Multiple Remote File Inclusion Vulnerability » » » » ======= ------d-------m------ ==== ==== » » || = | |o o| | || || || » » || = |||| || || » » =======...
FreeLyrics 1.0 (source.php p) Remote File Disclosure Vulnerability
No description provided by source. Piker FreeLyrics Remote Source Code Disclosure Vulnerability Affected software: FreeLyrics Vendor: http://lyrics.sourceforge.net/ Risk: Medium http://target/path/source.php?p=FILE PoC: http://target/path/source.php?p=config.php Found by Piker...
OTManager CMS 2.4 - 'Tipo' Remote File Inclusion
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= OTManager 2.4 Remote File Inclusion RFI Vulnerability - Security flaw discovered by Colt7r - CONTACT: colt7r |@| bsdmail.org - Affected Software: OTManager 2.4 - Risk: HIGH - Exploit: http://host/Admin/ADMPagina.php?Tipo=EVIL CODE...
Microsoft MS08-0 1 4 high-risk vulnerability interpretation-vulnerability warning-the black bar safety net
MS08-0 1 4vulnerabilityis Microsoft 3 month release of a high-risk vulnerability, which the official described: if a user opens a specially crafted Excel file, the vulnerability could allow remote code execution. Successful exploitation of these vulnerabilities the attacker can take complete...
Vulnerability in Windows Media Player Could Allow Remote Code Execution (954154)
Microsoft Security Bulletin MS08-054 – Critical Vulnerability in Windows Media Player Could Allow Remote Code Execution 954154 Published: September 9, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Windows Media Player...
DTSA-161-1 samba - privilege escalation
Bulletin has no description...
Dotclear 'ecrire/images.php' Arbitrary File Upload Vulnerability
Advisory 1 "Dotclear 'ecrire/images.php' Arbitrary File Upload Vulnerability" $ Author : Morgan ARMAND $ Contact : armandm at epitech dot net $ Vendor URL : http://www.dotclear.net $ Vendor Contacted : 07/04/2008 $ Vendor Status : No response $ Affected Software : Dotclear = 1.2.7.1 $ Severity :...
Security Advisory on RSA Web ID (XSS)
The following security report has been sent to RSA/EMC on the 2/10/2007 and confirmed by them. RSA took action to alert their customers. ----------------------------------------- Description The WebID authentication framework suffers from a flow allowing to steal an authenticated users's session ...
boastMachine <=3.1 SQL Injection Vulnerbility
...:::::boastMachine =3.1 SQL Injection Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my best friend in the...
Directory Traversal in SafeNet Sentinel Protection Server and Keys Server
SUMMARY ======= SafeNet Inc.'s Sentinel Protection Server and Sentinel Keys Server products include web servers which are vulnerable to directory traversal attacks. A remote attacker could exploit these vulnerabilities to read arbitrary files with the permissions of the web server, typically...
projectalumni-sqlxss.txt
project-alumni sql injection & xss author : tomplixsee [email protected] -------------------------------------------------------------------------- affected software version : project alumni 1.0.9, 1.0.8, or lower?? download : https://sourceforge.net/projects/project-alumni/ vulnerability...
project alumni <= 1.0.9 Remote XSS / SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ project alumni = 1.0.9 Remote XSS / SQL Injection Vulnerability ================================================================ project-alumni sql injection & xss author :...
project alumni 1.0.9 - Cross-Site Scripting SQL Injection
project alumni 1.0.9 - Cross-Site Scripting SQL Injection project-alumni sql injection & xss author : tomplixsee [email protected] ------------------------------------------------------------------------------------------------------------- affected software version : project alumni v1.0.9,...
Microsoft Security Bulletin MS07-051 - Critical Vulnerability in Microsoft Agent Could Allow Remote Code Execution (938827)
Microsoft Security Bulletin MS07-051 - Critical Vulnerability in Microsoft Agent Could Allow Remote Code Execution 938827 Published: September 11, 2007 Version: 1.0 General Information Executive Summary This critical security update resolves a privately reported vulnerability. A remote code...
xGB 2.0 - 'xGB.php' Remote Security Bypass
/ xGB 2.0 xGB.php Remote Permission Bypass Vulnerability Bug discovered by DarkFuneral http://www.darkfuneral89.altervista.org/ Affected Software: xGB CMS Site: "i don't know! :P" Severity: Critical Description: An attacker can edit all message in xGB Google Dork: allinurl:"xGb.php" E-Mail:...