dotDefender 3.8-5 - Remote Code Execution (via Cross-Site Scripting)

dotDefender 3.8-5 - Remote Code Execution via Cross-Site Scripting / DotDefender = 3.8-5 No Authentication Remote Code Execution Through XSS Tested on DotDefender 3.8-5 On Ubuntu Server 9.10 64-bit with Firefox 3.6.3 Paul Hand aka rAWjAW AT offsec.com Original Post-Authentication Remote Command...

CVE-2010-2513

SQL injection vulnerability in the JE Ajax Event Calendar comjeajaxeventcalendar component 1.0.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the view parameter to index.php...

CVE-2010-2513

CVE-2010-2513 describes a SQL injection in the Joomla! component JE Ajax Event Calendar (com_jeajaxeventcalendar) version 1.0.5. The vulnerability allows remote attackers to execute arbitrary SQL commands by supplying a crafted value to the view parameter in index.php. This is a server-side datab...

Joomla JE Ajax Event Calendar SQL Injection Vulnerability

No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Joomla JE Ajax event calendar SQL Vulnerable Version:1.0.5 Published: 2010-06-23 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat. Special Greetz: Topsecure.net, inj3ct0r...

Joomla! Component JE Ajax Event Calendar 1.0.5 - SQL Injection

Joomla! Component JE Ajax Event Calendar 1.0.5 - SQL Injection Exploit Title:Joomla JE Ajax event calendar SQL Vulnerable Version:1.0.5 Author: L0rd CrusAd3r aka VSN [email protected] Published: 2010-06-23 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat. Special...

Joomla! Component JE Ajax Event Calendar 1.0.5 - SQL Injection

Exploit Title:Joomla JE Ajax event calendar SQL Vulnerable Version:1.0.5 Author: L0rd CrusAd3r aka VSN [email protected] Published: 2010-06-23 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat. Special Greetz: Topsecure.net, inj3ct0r Team Shoutzz:- To all ICW members...

Joomla JE Ajax SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

Joomla Components jeeventcalendar Sql Injection Vulnerability

Exploit for php platform in category web applications ============================================================= Joomla Components jeeventcalendar Sql Injection Vulnerability =============================================================...

CVE-2010-2129

Directory traversal vulnerability in the JE Ajax Event Calendar comjeajaxeventcalendar component 1.0.1 and 1.0.3 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. NOTE: some of these details are obtained from third party information...

Directory traversal

Directory traversal vulnerability in the JE Ajax Event Calendar comjeajaxeventcalendar component 1.0.1 and 1.0.3 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-2129

CVE-2010-2129 is a directory traversal vulnerability in the Joomla! extension JE Ajax Event Calendar (com_jeajaxeventcalendar) versions 1.0.1 and 1.0.3, allowing remote attackers to read arbitrary files by supplying a .. in the view parameter to index.php. The issue arises from insufficient input...

CVE-2010-2129

Directory traversal vulnerability in the JE Ajax Event Calendar comjeajaxeventcalendar component 1.0.1 and 1.0.3 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. NOTE: some of these details are obtained from third party information...

CompactCMS 1.4.0 Remote File Upload

dear sir or madam ITSecTeam has found new vulnerability in CompactCMS 1.4.0 tinymce In the following contain some information about the bug best regards [email protected] Technical Manager Title: CompactCMS 1.4.0 tinymce Remote File Upload Vendor: http://www.compactcms.nl/ AUTHOR: ITSecTeam Email:...

CompactCMS 1.4.0 - 'tiny_mce' Arbitrary File Upload

Title: CompactCMS 1.4.0 tinymce Remote File Upload Vendor: http://www.compactcms.nl/ AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Original Advisory: www.ITSecTeam.com/en/vulnerabilities/vulnerability52.htm Thanks: r3dm0v3, pejvak,...

JE Ajax Event Calendar - Local File Inclusion

JE Ajax Event Calendar - Local File Inclusion Exploit Title: JE Ajax Event Calendar Local File Inclusion Vulnerability Date: 14.05.2010 Author: Valentin Category: webapps/0day Version: 1.0.3 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::...

Joomla JE Ajax Event Calendar 1.0.3 Local File Inclusion

Exploit Title: JE Ajax Event Calendar Local File Inclusion Vulnerability Date: 14.05.2010 Author: Valentin Category: webapps/0day Version: 1.0.3 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = J...

Joomla! Component com_manager 1.5.3 - 'id' SQL Injection

----------------------------------------------------------------------- Joomla Component commanager 1.5.3 id SQL Injection Vulnerability ----------------------------------------------------------------------- Author : Islam DefenDers Mr.HaMaDa Site : http://MiXaTy.com Date : April, 15-2010 Locati...

Joomla Manager 1.5.3 SQL Injection

----------------------------------------------------------------------- Joomla Component commanager 1.5.3 id SQL Injection Vulnerability ----------------------------------------------------------------------- Author : Islam DefenDers Mr.HaMaDa Site : http://MiXaTy.com Date : April, 15-2010 Locati...

Joomla iProperty 1.5.3 SQL Injection

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- Joomla...

Joomla! Component Foobla Suggestions 1.5.1.2 - Local File Inclusion

----------------------------------------------------------------------------------------- Joomla Component Foobla Suggestions Local File Inclusion ----------------------------------------------------------------------------------------- Author : Chip D3 Bi0s Email : chipdebiosalt+64gmail.com Date...