Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Important: freetype

Issue Overview: A flaw was found in the way the FreeType font rendering engine processed certain Glyph Bitmap Distribution Format BDF fonts. If a user loaded a specially-crafted font file with an application linked against FreeType, it could cause the application to crash or, possibly, execute...

F5 BIG-IP 11.2.0 SQL Injection

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: SQL Injection product: F5 BIG-IP vulnerable version: =11.2.0 fixed version: 11.2.0 HF3 11.2.1 HF3 CVE number: CVE-2012-3000 impact: Medium homepage: http://www.f5.com/...

Scripts Genie Classified Ultra - SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/57465/info Classified Ultra is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal cookie-based...

Joomla! Component com_collector - Arbitrary File Upload

Exploit Title:Joomla comcollecter shell upload Author: Red Dragonal Alb0zZ Team Home :HackForums.AL,alb0zz.in Date :19/01/2013 Category:: web apps Google dork: inurl:index.php?option=comcollector Tested on: Windows XP Download: http://www.steevo.fr/en/download Home Page: http://www.steevo.fr/...

Microsoft Lync 2012 Code Execution Vulnerability

Microsoft Lync 2012 fails to properly sanitize user-supplied input, whichcan lead to remote code execution. Summary ======= Microsoft Lync 2010 fails to properly sanitize user-supplied input, which can lead to remote code execution. Microsoft was originally notified of this issue December 11, 201...

Critical: Red Hat Security Advisory: Ruby on Rails security update

Updated rubygem-actionpack, rubygem-activesupport, ruby193-rubygem-actionpack, and ruby193-rubygem-activesupport packages that fix multiple security issues are now available for Red Hat OpenShift Enterprise 1.0. The Red Hat Security Response Team has rated this update as having critical security...

CVE-2012-6329

The compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input t...

osTicket - l.php?url Arbitrary Site Redirect

osTicket - l.php?url Arbitrary Site Redirect source: https://www.securityfocus.com/bid/57111/info osTicket is prone to multiple input-validation vulnerabilities including: 1. Multiple cross-site scripting vulnerabilities 2. An open-redirection vulnerability 3. Multiple SQL-injection vulnerabiliti...

XSS vulnerability in source tab configure project

Create a new group named "alert"XSS" 2. In the OnDemand administration section click Fisheye, then Configure to the right of the project name This vulnerability is due to an unescaped group.name parameter in projectrepositorypermissions.vm e.g...

SonicWall Email Security 7.4.1.x - Persistent Vulnerability

Document Title: =============== SonicWall Email Security 7.4.1.x - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=768 Release Date: ============= 2012-12-21 Vulnerability Laboratory ID VL-ID: ====================================...

Webkit HTMLMedia Element beforeLoad Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari Webkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the library'...

BigDump 0.29b and 0.32b - Multiple Vulnerabilities

BigDump 0.29b and 0.32b - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/56744/info BigDump is prone to a cross-site scripting vulnerability, an SQL-injection vulnerability, and an arbitrary-file-upload vulnerability because it fails to sanitize user-supplied data. Exploiting...

Incapsula innovative DDoS Protection techniques

Several weeks ago we reviewed Incapsula, a Cloud-based Security service which can significantly enhance the security of your website, while also boosting its performance. Following this review we've received many responses from our readers who wanted to learn more about Incapsula protection...

Friends in War The FAQ Manager - question SQL Injection

Friends in War The FAQ Manager - question SQL Injection source: https://www.securityfocus.com/bid/56576/info Friends in War The FAQ Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit...

Friends in War The FAQ Manager - 'question' SQL Injection

source: https://www.securityfocus.com/bid/56576/info Friends in War The FAQ Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application,...

Open-Realty 2.5.8 - Cross-Site Request Forgery

Open-Realty 2.5.8 - Cross-Site Request Forgery source: https://www.securityfocus.com/bid/56580/info Open-Realty is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain unauthorized administrative actions and gain access to the...

WordPress Plugin Tagged Albums - 'id' SQL Injection

source: https://www.securityfocus.com/bid/56569/info The Tagged Albums plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. An attacker can exploit this issue to compromise the application,...

Link hijacking attack one, two, three-vulnerability warning-the black bar safety net

Blog post author: lake2 TSRC Release date: 2012-11-09 Blog post content: With application security development, we are more concerned about application security vulnerabilities, in fact, in the application layer below the Transport Layer there are also many security risks and the security risks...

WordPress Plugin PHP Event Calendar - 'cid' SQL Injection

source: https://www.securityfocus.com/bid/56478/info The PHP Event Calendar plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. An attacker can exploit this issue to compromise the...