Lois Software WebDB 2.0A Script - Multiple SQL Injections

Lois Software WebDB 2.0A Script - Multiple SQL Injections source: https://www.securityfocus.com/bid/41124/info Lois Software WebDB is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issu...

TomatoCMS 2.0.x - SQL Injection

TomatoCMS 2.0.x - SQL Injection source: https://www.securityfocus.com/bid/40108/info TomatoCMS is prone to a SQL-injection vulnerability and multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues may allow an attacker to...

Digital Factory Publique! 2.3 - 'sid' SQL Injection

source: https://www.securityfocus.com/bid/39988/info Publique! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify dat...

GUI MyBB 2002-2010 exploit

Exploit for php platform in category web applications ========================== GUI MyBB 2002-2010 exploit ========================== !/usr/local/bin/ruby GUI MyBB 2002-2010 04/04/10 Whivack Contact Me = email protected Dork Google : "Moteur MyBB, 2002-2010 MyBB Group." No Security : No Captcha...

Mozilla Products Multiple Vulnerabilities feb-10 (Linux)

The host is installed with Mozilla Firefox/Seamonkey and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmozillaprdtsmultvulnfeb10lin01.nasl 6482 2017-06-29 08:31:43Z cfischer $ Mozilla Products Multiple Vulnerabilities feb-10 Linux Authors: Antu Sanadi Copyright:...

Facebook for iPhone - Persistent Cross-Site Scripting Denial of Service

Facebook for iPhone persistent XSS Facebook application for iPhone is not encoding special characters in Notes detail Adding this code in a note will freeze application: var x = 'x'; while 1 document.write''; x = x + 'x'; App page: http://www.facebook.com/apps/application.php?id=6628568379...

PacketFence Network Access Controller Cross Site Scripting

Title : Injection Flaw in PacketFence Network Access Controller Date : 20-12-2009 Author : K053 Tested on : Private Networks Download : http://www.packetfence.org/download/releases.html Note : ------ PacketFence is a fully supported, Free and Open Source network access control NAC system...

oBlog - Persistent Cross-Site Scripting Cross-Site Request Forgery Admin Brute Force

oBlog - Persistent Cross-Site Scripting Cross-Site Request Forgery Admin Brute Force ------------------------------------------------------------------------------------------------- Application: oBlog Version: the only one there is : Download: http://www.dootzky.com/images/projects/oBlog.zip...

Changetrack Local Privilege Escalation Vulnerability

This host has Changetrack installed and is prone to Local Privilege Escalation vulnerability. OpenVAS Vulnerability Test $Id: secpodchangetrackprivescalationvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Changetrack Local Privilege Escalation Vulnerability Authors: Sharath S Copyright: Copyright c...

NetRisk Security Bypass Vulnerability

This host is installed with NetRisk and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbnetrisksecbypassvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ NetRisk Security Bypass Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Nokia MultiMedia Player 1.1 - Remote Denial of Service

Nokia MultiMedia Player 1.1 - Remote Denial of Service source: https://www.securityfocus.com/bid/36215/info Nokia Multimedia Player is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the affected application to stop responding, denying service to...

Nokia MultiMedia Player 1.1 - Remote Denial of Service

source: https://www.securityfocus.com/bid/36215/info Nokia Multimedia Player is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the affected application to stop responding, denying service to legitimate users. This issue affects Nokia Multimedia Play...

Tukanas Classifieds 1.0 - index.php SQL Injection

Tukanas Classifieds 1.0 - index.php SQL Injection source: https://www.securityfocus.com/bid/43337/info Tukanas Classifieds is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Mozilla Firefox SOCKS5 Proxy Server DoS Vulnerability Aug-09 (Linux)

This host is installed with Mozilla Firefox and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbfirefoxsocks5proxydosvulnaug09lin.nasl 4865 2016-12-28 16:16:43Z teissa $ Mozilla Firefox SOCKS5 Proxy Server DoS Vulnerability Aug-09 Linux Authors: Sharath S Copyright:...

Clipbucket 1.7.1 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/43383/info ClipBucket is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

CVE-2009-2157

Multiple SQL injection vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to execute arbitrary SQL commands via 1 the origmsg parameter to account-inbox.php; the categ parameter to 2 delreq.php and 3 admin-delreq.php; 4 the choice parameter to index.php; 5 the id...

Microsoft Active Directory LDAP Remote Code Execution Vulnerability (969805)

This host is missing a critical security update according to Microsoft Bulletin MS09-018. OpenVAS Vulnerability Test $Id: secpodms09-018.nasl 5363 2017-02-20 13:07:22Z cfi $ Microsoft Active Directory LDAP Remote Code Execution Vulnerability 969805 Authors: Nikita MR Updated to include Active...

MRCGIGUY Ultimate Profit Portal 1.0.1 - Insecure Cookie Handling

MRCGIGUY Ultimate Profit Portal 1.0.1 - Insecure Cookie Handling --------------------------------------------------------------- --------------------------------------------------------------- Ultimate Profit Portal Version 1.0.1 Insecure Cookie Handling Vulnerability...

Mozilla Firefox DoS Vulnerability May-09 (Linux)

The host is installed with Mozilla Firefox browser and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbfirefoxdosvulnmay09lin.nasl 4865 2016-12-28 16:16:43Z teissa $ Mozilla Firefox DoS Vulnerability May-09 Linux Authors: Sharath S Copyright: Copyright c 2009...

CVE-2009-1516

Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1 might allow context-dependent attackers to execute arbitrary code via a large value in the second argument to the Base64FileEncode method, as possibly demonstrated by a web...