[ACM, Ariadne Content Manager] unauth. SQL injection + user enumeration

Hi sec-folks, I recently discuss with Ariadne team to public disclose two new different vulnerabilities found in Ariadne Content Manager ACM. As the name says, ACM is an enterprise solution for content management mainly used by big private and public companies and institutions. This is the site o...

MODx Revolution CMS 2.0.4-pl2 Remote XSS POST Injection Vulnerability

Summary MODx Revolution is a powerful PHP Content Management Framework that plays nicely with custom code and helps you build sites faster and maintain them with ease. With Revolution you'll leverage the best things to come around since MVC and Active Record. Description The MODx Revolution CMS...

Native Instruments Massive 1.1.4 KSD File Handling Use-After-Free

!/usr/bin/perl Title: Native Instruments Massive 1.1.4 KSD File Handling Use-After-Free Vulnerability Vendor: Native Instruments GmbH Product web page: http://www.native-instruments.com Affected version: 1.1.4 R1901 Summary: MASSIVE is a sonic monster – the ultimate synth for basses and leads. Th...

Adobe Shockwave Player Use-After-Free Vulnerability

Adobe Shockwave Player is prone to a use after free vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DH-MLM v3.6.0 Multiple Remote Vulnerabilities

Exploit for php platform in category web applications ============================================= DH-MLM v3.6.0 Multiple Remote Vulnerabilities ============================================= Name : DH Softwares Affiliate Program Title : DH-MLM v3.6.0 Multiple Remote Vulnerabilities Affected...

eXV² Content Management System 2.10 Remote XSS Vulnerability

Summary eXV² is a free CMS for building and operating private home pages, small and large communities and it's also easily used for small to medium business presences. Description The CMS suffers from a remote reflected Cross-Site Scripting vulnerability when input passed thru "rssfeedURL" and...

AtomatiCMS - Upload Arbitrary File

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ ''' Abysssec Inc Public Advisory Title : AtomatiCMS Upload arbitrary file Vulnerability Affected Version : AtomatiCMS 10all Discovery : www.abysssec.com Vendor :...

Haudenschilt Family Connections CMS (FCMS) Multiple PHP remote file inclusion vulnerabilities

Haudenschilt Family Connections CMS FCMS is prone to multiple remote file inclusion vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Textpattern 4.2.0 (txplib_db) Null Termination Cross-Site Scripting Vulnerability

Summary Textpattern is an open source content management system unlike any other; it allows you to easily create, edit and publish content and make it beautiful in a professional, standards-compliant manner. Description Textpattern CMS version 4.2.0 suffers from a XSS vulnerability. Input passed...

Thousand Bo enterprise website management system v2010 Build 0 7 1 6 vulnerability analysis-vulnerability warning-the black bar safety net

Release time: 2010-07-16 Affected version: Thousand Bo enterprise website management system v2010 Build 0 7 1 6 Vulnerability Description: The search type injection vulnerability Default background address: http://127.1/system/AdminLogin.Asp Publishing author: m4r10 reproduced please indicate the...

Joomla! Component Card View JX - Cross-Site Scripting

Joomla! Component Card View JX - Cross-Site Scripting :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Joomla Component Card View JX XSS Vulnerabilities Author = Valentin Hoebel Contact = [email protected]...

Portaneo Portal v2.2.3 Remote Arbitary file upload exploit

Exploit for php platform in category web applications ========================================================== Portaneo Portal v2.2.3 Remote Arbitary file upload exploit ========================================================== Exploit database separated by exploit 0 0 // type local, remote,...

OneHTTPD 0.6 - Directory Traversal

OneHTTPD 0.6 - Directory Traversal source: https://www.securityfocus.com/bid/39757/info OneHTTPD is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information that coul...

PT-2010-1590 · Tukeva · Tukeva Password Reminder

Name of the Vulnerable Software and Affected Versions: TUKEVA Password Reminder version 1.0.0.3 and earlier Description: The issue allows local users to discover credentials due to a hard-coded password for rem.accdb. This can be achieved via a DBI connection. Recommendations: For versions prior ...

Tracking Requirements And Use Cases Cross Site Scripting vulnerability

Tracking Requirements and Use Cases is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MoinMoin Wiki 'cfg' Package Configuration Unspecified Vulnerability

MoinMoin Wiki is prone to unspecified vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moinmo:moinmoin";...

WikyBlog Multiple Remote Input Validation Vulnerabilities

WikyBlog is prone to multiple vulnerabilities, including an arbitrary-file- upload issue, a cross-site scripting issue, a remote file-include issue and a session-fixation issue. Attackers can exploit these issues to: - execute arbitrary script code in the browser of an unsuspecting user in the...

FFmpeg multiple vulnerabilities (Linux)

This host is installed with FFmpeg and is prone to multiple vulnerabilities OpenVAS Vulnerability Test $Id: gbffmpegmultvulnlin.nasl 5306 2017-02-16 09:00:16Z teissa $ FFmpeg Multiple Vulnerabilities Linux Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone Networks GmbH,...

httpdx 1.5.2 'USER' Command Remote Format String Vulnerability

The SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.100491";...

Calendarix 0.7 - calpath Remote File Inclusion

Calendarix 0.7 - calpath Remote File Inclusion source: https://www.securityfocus.com/bid/37673/info Calendarix is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containi...