CVE-2008-0539: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in dms/policy/reprequest.php in F5 BIG-IP Application Security Manager ASM 9.4.3 allows remote attackers to inject arbitrary web script or HTML via the reporttype parameter...

PT-2008-2167 · F5 · F5 Big-Ip Application Security Manager

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP Application Security Manager ASM version 9.4.3 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the report type parameter in the dms/policy/rep request.php...

YeSiL KoRiDoR Ziyaretçi Defteri - index.php SQL Injection

YeSiL KoRiDoR Ziyaretçi Defteri - index.php SQL Injection source: https://www.securityfocus.com/bid/27518/info YeSiL KoRiDoR Ziyaretçi Defteri is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...

Joomla! / Mambo Component com_buslicense - 'aid' SQL Injection

source: https://www.securityfocus.com/bid/27508/info The 'combuslicense' component for Mambo/Joomla is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

Magic applications like Server vulnerability-vulnerability warning-the black bar safety net

Author: kEvin198... article source: hacker Defense Shortly before I often go to a music website suddenly announced the indefinite closure,but reserved for VIPs download right. This message is for the avid music lovers as a Thunderbolt. But there is no way,someone else's Station not shut off is...

f5asm-xss.txt

F5 BIG-IP Web Management ASM Security Report XSS Product: F5 BIG-IP Application Security Manager http://www.f5.com/products/big-ip/product-modules/application-security-manager.html The F5 BIG-IP ASM web management interface contains a cross-site scripting vulnerability in the Security Report...

F5 BIG-IP Web Management ASM Security Report XSS

F5 BIG-IP Web Management ASM Security Report XSS Product: F5 BIG-IP Application Security Manager http://www.f5.com/products/big-ip/product-modules/application-security-manager.html The F5 BIG-IP ASM web management interface contains a cross-site scripting vulnerability in the Security Report...

Aconon Mail 2004 - Directory Traversal

Aconon Mail 2004 - Directory Traversal Application: acononR Mail Affected versions: probably all known, tested against 2007 Enterprise SQL 11.7.0 and 2004 Enterprise SQL 11.5.1 Affected plattforms: every, Aconon runs at Win32, Linux, Solaris ... Exploitation: remote Description: Aconon Mail is a...

PacerCMS 0.6 - 'id' Multiple SQL Injections

source: https://www.securityfocus.com/bid/27397/info PacerCMS is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the application, acces...

PacerCMS 0.6 - id Multiple SQL Injections

PacerCMS 0.6 - id Multiple SQL Injections source: https://www.securityfocus.com/bid/27397/info PacerCMS is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an...

Small Axe 0.3.1 - cfile Remote File Inclusion

Small Axe 0.3.1 - cfile Remote File Inclusion Name : Small Axe Weblog 0.3.1 Remote File Include Download From : http://releases.smallaxesolutions.com/smallaxe-0.3.1.zip Found By : RoMaNcYxHaCkEr We Are H-T TeaM Houssamix - ToXiC Home Page : Not Yet : Tryag.cc/cc No-Hack.net V99x.com/vb...

Clever Copy 3.0 - Multiple SQL Injections Cross-Site Scripting Vulnerabilities

Clever Copy 3.0 - Multiple SQL Injections Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/27335/info Clever Copy is prone to multiple input-validation vulnerabilities, including two SQL-injection issues and a cross-site scripting issue, because it fails to...

MyBB 1.2.10 - 'moderation.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/27323/info MyBB is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modif...

Members Area System 1.7 - view_func.php Remote File Inclusion

Members Area System 1.7 - viewfunc.php Remote File Inclusion source: https://www.securityfocus.com/bid/27244/info Members Area System is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitra...

PHP Webquest 2.6 - 'id_actividad' SQL Injection

!/usr/bin/perl PHP Webquest 2.6 Remote SQL Injection Exploit coded by ka0x - D.O.M TEAM 2008 we are: ka0x, an0de, xarnuz download spanish: download: http://phpwebquest.org/descargas/phpwebquest-2.6-espanol.zip download english: http://phpwebquest.org/descargas/phpwebquest-2.6-international.zip vu...

Camtasia Studio 4.0.2 - 'csPreloader' Remote Code Execution

source: https://www.securityfocus.com/bid/27107/info Camtasia Studio is prone to a remote code-execution vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit will allow an attacker to compromise the application and the underlying system; other...

Exiv2: Integer overflow

Background Exiv2 is a C++ library and set of tools for parsing, editing and saving Exif and IPTC metadata from images. Exif, the Exchangeable image file format, specifies the addition of metadata tags to JPEG, TIFF and RIFF files. Description Meder Kydyraliev Google Security discovered an integer...

RunCMS 1.6 - Get Admin Cookie Blind SQL Injection

RunCMS 1.6 - Get Admin Cookie Blind SQL Injection // / RUNCMS 1.6 BLIND SQL Injection Exploit get Admin Cookie / // / exploit get admin cookie that can be used / / to login by pasting it into browser Opera / / and then get access to Admin session / / and change Admins password / / / // // / teste...

Logaholic - 'index.php?conf' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27003/info Logaholic is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues, a cross-site scripting issue, and an HTML-injection issue. The issues occur because the application fails to sufficiently sanitize...

Neuron News 1.0 - Multiple SQL Injections / Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/26896/info Neuron News is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and two cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attack...