DMXReady Secure Document Library 1.1 SQL Injection

Title : DMXReady Secure Document Library http://target/path/applications/SecureDocumentLibrary/incsecuredocumentlibrary.asp Edit - http://target/path/admin/SecureDocumentLibrary/MembersAreaManager/components/CategoryManager/uploadimagecategory.asp?cid= SQL Inject Example: USERNAME-...

TOR Privilege Escalation Vulnerability - Windows

TOR is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

phpList cline Parameter Array Remote File Inclusion

The version of phpList installed on the remote host fails to filter user input to the 'clinec' parameter before passing it to a PHP 'include' function in 'admin/index.php'. Regardless of PHP's 'registerglobals' setting, an unauthenticated attacker can exploit this issue to view arbitrary files on...

GLSA-200812-18 : JasPer: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200812-18 JasPer: User-assisted execution of arbitrary code Marc Espie and Christian Weisgerber have discovered multiple vulnerabilities in JasPer: Multiple integer overflows might allow for insufficient memory allocation, leading...

ocean12poll-sql.txt

Application: Ocean12 Poll Manager Pro Vendor Name: Ocean12 Vendors Url: http://ocean12tech.com/ Bug Type: Ocean12 Poll Manager Pro SQL Injection Exploitation: Remote Google Dork: "Maintained with the Ocean12 Poll Manager Pro" Example...

Active Web Mail v 4 (Auth Bypass) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Active Web Mail v 4 Auth Bypass Remote SQL Injection Vulnerability ==================================================================== Tybe:Auth Bypass Remote SQL...

Ruby on Rails redirect_to() HTTP Header Injection Vulnerability - Linux

The host is running Ruby on Rails, which is prone to HTTP Header Injection Vulnerability. OpenVAS Vulnerability Test $Id: gbrubyrailshttpheaderinjvulnlin.nasl 4227 2016-10-07 05:45:35Z teissa $ Ruby on Rails redirectto HTTP Header Injection Vulnerability - Linux Authors: Veerendra GG Copyright:...

WebStudio CMS (index.php pageid) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== WebStudio CMS index.php pageid Blind SQL Injection Vulnerability ================================================================== Application: WebStudio CMS Bug Type:...

Pilot Group PG Roommate Finder Solution - SQL Injection

Pilot Group PG Roommate Finder Solution - SQL Injection source: https://www.securityfocus.com/bid/32430/info Pilot Group PG Roommate is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Team SHATTER Security Advisory: Oracle Database Multiple SQL Injection vulnerabilities in LTADM

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory Oracle Database Multiple SQL Injection vulnerabilities in LTADM November 12, 2008 Risk Level: Medium Affected versions: Oracle Database Server versions 9iR2, 10gR1, 10gR2 and 11gR1 Remote exploitable: Yes Authentication...

Team SHATTER Security Advisory: Oracle Database SQL Injection in SYS.DBMS_CDC_IPUBLISH.ALTER_HOTLOG_INTERNAL_CSOURCE

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory Oracle Database SQL Injection in SYS.DBMSCDCIPUBLISH.ALTERHOTLOGINTERNALCSOURCE November 12, 2008 Risk Level: Medium Affected versions: Oracle Database Server versions 10gR1, 10gR2 and 11gR1 Remote exploitable: Yes...

Team SHATTER Security Advisory: Oracle Database multiple SQL Injection vulnerabilities in Workspace Manager

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory Oracle Database multiple SQL Injection vulnerabilities in Workspace Manager November 12, 2008 Risk Level: High Affected versions: Oracle Database Server versions 9iR2, 10gR1, 10gR2 and 11gR1 Remote exploitable: Yes...

Dizi Portali - film.asp SQL Injection

Dizi Portali - film.asp SQL Injection source: https://www.securityfocus.com/bid/32239/info Dizi Portali is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

domainsellerpro-sql.txt

WwW.StarHack.Us Author : TR-ShaRk Web : StarHack.Us OldKral.Com Email : [email protected] Msn : [email protected] Script : Domain Seller Pro� v1.5 SQL Injection Vuln. : index.php?a=d&id=-4+union+select+1,2,@@version,4,5,6,7,8,9,10,11,12,13,14-- Demo :...

HACKATTACK Advisory 20081016]WEB//NEWS SQL Injection and Cookie Manipulation

HACKATTACK Advisory 20081016WEB//NEWS SQL Injection and Cookie Manipulation Details ======= Product: WEB//NEWS Security-Risk: high Remote-Exploit: yes Vendor-URL: http://www.stylemotion.de/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David Vieira-Kurz...

[MajorSecurity Advisory #56]moziloWiki - Directory Traversal, XSS and SessionFixation Issues

MajorSecurity Advisory 56moziloWiki - Directory Traversal, XSS and SessionFixation Issues Details ======= Product: moziloWiki Security-Risk: High Remote-Exploit: yes Vendor-URL: http://www.mozilo.de/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David...

A4Desk Event Calendar - eventid SQL Injection

A4Desk Event Calendar - eventid SQL Injection source: https://www.securityfocus.com/bid/33835/info A4Desk Event Calendar is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

A4Desk Event Calendar - v Remote File Inclusion

A4Desk Event Calendar - v Remote File Inclusion source: https://www.securityfocus.com/bid/31507/info A4Desk Event Calendar is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the...

[MajorSecurity Advisory #54]xt:Commerce - Cross Site Scripting and Session Fixation Issues

MajorSecurity Advisory 54xt:Commerce - Cross Site Scripting and Session Fixation Issues Details ======= Product: xt:Commerce Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.xtcommerce-shop.com/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered...

[MajorSecurity Advisory #53]BLUEPAGE CMS - Cross Site Scripting and Session Fixation Issues

MajorSecurity Advisory 53BLUEPAGE CMS - Cross Site Scripting and Session Fixation Issues Details ======= Product: BLUEPAGE CMS Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.bluepage-cms.com/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered b...