1856 matches found
php168v6 getshell 0day-vulnerability warning-the black bar safety net
SEBUG-Appdir:Php168 Published:2009-12-26 Affected version: php168 v6. 0 vulnerability description: The two-step first do/jsarticle. php file if! eregi"^hot|com|new|lastview|like|pic$",$type die"Type Error"; $FileName=dirnameFILE."/../ cache/jsarticlecache/"; if$type==’like’ $FileName.= floor$id/3...
Mandriva Security Advisory MDVSA-2009:098-1 (krb5)
The remote host is missing an update to krb5 announced via advisory MDVSA-2009:098-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
dedecms(plus/feedback_js.php)injection vulnerability-vulnerability warning-the black bar safety net
Found by:Rainy'Fox&St0p Team:two fat network securityhttp://bbs.erpangzi.com Affected version: dedecms GBK 5.1 Vulnerability description: 文件 :plus/feedbackjs.php ifempty$arcID $row = $dlist-dsql-GetOne"Select id From @cachefeedbackurl where url='$arcurl' "; ifisarray$row $urlindex = $row'id'; Get...
OCS Inventory NG < 1.02.1 Multiple SQLi Vulnerabilities
OCS Inventory NG is prone to multiple SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
PT-2009-4665
Name of the Vulnerable Software and Affected Versions DirectAdmin versions 1.33.6 and earlier Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the URI in a view=advanced request. This occurs due to a vulnerability in CMD...
Online Grades & Attendance 3.2.6 - Multiple SQL Injections
|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | MULTIPLE SQL...
Joomla Boy Scout Advancement 0.3 SQL Injection
------------------------------------------------------------------------------------------------------------ MULTIPLE SQL INJECTION VULNERABILITIES --Joomla Component 'Boy Scout Advancement' ----------------------------------------------------------------------------------------------------------...
minitwitter 0.3-beta - SQL Injection / Cross-Site Scripting
|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | MULTIPLE...
MULTPLE REMOTE VULNERABILITIES --ProjectCMS v-1.1 Beta-->
------------------------------------------------------------ MULTPLE REMOTE VULNERABILITIES --ProjectCMS v-1.1 Beta-- ------------------------------------------------------------ CMS INFORMATION: --WEB: http://projectcms.org/ --DOWNLOAD: http://projectcms.org/uploads/projectcms1.1BETA.zip --DEMO:...
MiniTwitter 0.2b Remote User Options Changer Exploit
No description provided by source. !-- || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------...
WysGui CMS 1.2 BETA(Insecure Cookie Handling)--Blind-sql-injection-exploit-->
!/usr/bin/perl --------------------------------------------------------- WysGui CMS 1.2 BETAcookie BSQL --------------------------------------------------------- CMS INFORMATION: --WEB: http://wysgui.com/ --DOWNLOAD: http://sourceforge.net/projects/wysgui/ --DEMO: http://wysgui.com/demo/...
CLAN TIGER CMS--AUTH BYPASS LOGIN FORM (SQL INJECTION)-->
----------------------------------------------------------- CLAN TIGER CMS AUTH BYPASS LOGIN FORM SQL INJECTION ----------------------------------------------------------- CMS INFORMATION: --WEB: http://www.clantiger.com --DOWNLOAD: http://www.clantiger.com/download-clan-cms --DEMO:...
7-Zip Unspecified Archive Handling Vulnerability (Windows)
This host is installed with 7zip and is prone to Unspecified vulnerability. OpenVAS Vulnerability Test $Id: gb7ziparchivehandlingvulnwin.nasl 4865 2016-12-28 16:16:43Z teissa $ 7-Zip Unspecified Archive Handling Vulnerability Windows Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbone...
[oCERT-2008-015] glib and glib-predecessor heap overflows
2008-015 glib and glib-predecessors heap overflows Description: Base64 encoding and decoding functions in glib suffer from vulnerabilities during memory allocation which may result in arbitrary code execution when processing large strings. A number of other GNOME-related applications which predat...
Mandrake Security Advisory MDVSA-2009:062 (shadow-utils)
The remote host is missing an update to shadow-utils announced via advisory MDVSA-2009:062. OpenVAS Vulnerability Test $Id: mdksa2009062.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:062 shadow-utils Authors: Thomas Reinke Copyright: Copyright c 20...
Fedora Update for openoffice.org FEDORA-2007-376
Check for the Version of openoffice.org OpenVAS Vulnerability Test Fedora Update for openoffice.org FEDORA-2007-376 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Mandrake Security Advisory MDVSA-2009:027 (cups)
The remote host is missing an update to cups announced via advisory MDVSA-2009:027. OpenVAS Vulnerability Test $Id: mdksa2009027.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:027 cups Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Opera Stored Cross Site Scripting Vulnerability
====================================================== ================= = Opera Stored Cross Site Scripting Vulnerability = = Vendor Website: = http://www.opera.com = = Affected Version: = -- All desktop versions = = Public disclosure on 22nd October 2008 =...
[oCERT-2008-012] Horde, Popoon frameworks common input sanitization errors (XSS)
2008-012 Horde, Popoon frameworks common input sanitization errors XSS Two cross-site scripting XSS vulnerabilities were reported in Horde Framework. The first of which is that the Horde framework fails to properly sanitize the filename of MIME attachments on received emails. The second...
Novell eDirectory Multiple Vulnerabilities - Linux
Novell eDirectory is prone to cross-site scripting XSS, denial of service DoS and remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...