SyCtel Design - 'menu' Multiple Local File Inclusions

source: https://www.securityfocus.com/bid/47526/info SyCtel Design is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information and execute arbitrary loc...

Mobile Application Security – The New Frontier

The power and popularity of consumer mobile computing is changing faster then you can say iFart the 1 downloaded app worldwide. Commercial entities are rapidly adopting mobile-based applications for retail sales floors, restaurants and dining rooms, distributed mobile banking, and more...

Joomla! Component com_phocadownload - Local File Inclusion

Joomla! Component comphocadownload - Local File Inclusion source: https://www.securityfocus.com/bid/47399/info The 'comphocadownload' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this...

Network Application Firewalls vs. Contemporary Threats

https://docs.google.com/leaf?id=0B0kFVGLVHCsYYzgxYWIyYjAtN2FkMy00NjBlLTk1Z jAtY2JiOWI0ZDA1YmIw&sort=name&layout=list&num=50 Скоро распишу...

PhoenixCMS 1.7 - Local File Inclusion SQL Injection

PhoenixCMS 1.7 - Local File Inclusion SQL Injection source: https://www.securityfocus.com/bid/47389/info PhoenixCMS is prone to a local file-include vulnerability and an SQL-injection vulnerability. An attacker can exploit the local file-include vulnerability using directory-traversal strings to...

Microsoft Office XP Data Validation Record Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Making An Application Security Program Succeed

After winning the attention, and hopefully the backing of executives, as we covered in The Challenge of Starting an Application Security Program, it becomes much more straightforward to win the funding needed for the right tools, services, and training needed for secure application development. N...

Redmine 1.1.1 Cross Site Scripting

Information -------------------- Name : XSS vulnerability in Redmine Software : all Redmine versions from 1.0.1 to 1.1.1 Vendor Homepage : http://www.redmine.org Vulnerability Type : Cross-Site Scripting Severity : High Researcher : Mesut Timur Advisory Reference : NS-11-004 Description...

HTB22912: Multiple SQL Injections in Eleanor CMS

Vulnerability ID: HTB22912 Reference: http://www.htbridge.ch/advisory/multiplesqlinjectionsineleanorcms.html Product: Eleanor CMS Vendor: Eleanor CMS http://eleanor-cms.ru/ Vulnerable Version: rc5 Vendor Notification: 22 March 2011 Vulnerability Type: SQL Injection Status: Fixed by Vendor Risk...

Advanced Image Hosting 2.2 (index.php) SQL Injection Vulnerability

Exploit for php platform in category web applications InformatioN Title : Advanced Image Hosting v2.2 SQLi Vulnerability Author : keracker Vendor or Software Link : http://yabsoft.com Email : email protected Data : 2011-04-01 Google dork: "Powered by: AIH v2.2" Category: Webapps Tested on: Window...

CAT – Web Application Security Test & Assessment Tool

CAT is designed to facilitate manual web application penetration testing for more complex, demanding application testing tasks. It removes some of the more repetitive elements of the testing process, allowing the tester to focus on individual applications, thus enabling them to conduct a much mor...

The Challenge of Starting an Application Security Program

Since organizations started opening their internal applications to the Web, a little more than a decade ago, it became clear that the security of those connected applications would be more complex – and critical to get right – than before. Unfortunately, through complacency, perhaps a feeling tha...

Profile picture thumbnail generation can consume unlimited amount of memory

Discovered a Studio customer, you can upload a very large profile picture to expose the same problem as CONF-21480, just in a different area of the application. We should limit the size of images we're willing to load into memory to avoid this problem with user pictures...

Joomla! 1.6 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/46846/info Joomla! is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

Apache Tomcat 7.0.x < 7.0.11 Security Bypass Vulnerability

Binary data 5816.pasl...

Cosmoshop 10.05.00 - Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/46828/info CosmoShop is prone to multiple cross-site scripting vulnerabilities and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues could allow an attacker to steal...

WS Interactive Automne 4.1 - adminupload-controler.php Arbitrary File Upload

WS Interactive Automne 4.1 - adminupload-controler.php Arbitrary File Upload source: https://www.securityfocus.com/bid/46774/info Automne is prone to an arbitrary-file-upload vulnerability. An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in...

Moodle Prior to 1.9.11/2.0.2 Multiple Vulnerabilities

Moodle is prone to multiple vulnerabilities, including: 1. Multiple cross-site scripting issues 2. Multiple information-disclosure issues 3. An HTML-injection issue 4. An insecure permissions issue Attackers can exploit these issues to bypass certain security restrictions, obtain sensitive...

CGI Generic XSS (persistent, 3rd Pass)

The remote web server hosts one or more CGI scripts that fail to adequately sanitize request strings containing malicious JavaScript. By leveraging this issue, an attacker may be able to cause arbitrary HTML and script code to be executed in a user's browser within the security context of the...

DivX Player 6.x - '.dps' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/46609/info DivX Player is prone to a remote buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute arbitrary code in the context of the...