CVE-2015-5659

The CVE-2015-5659 entry corresponds to a SQL injection vulnerability in Network Applied Communication Laboratory Pref Shimane CMS, affecting 2.x releases prior to 2.0.1. According to connected documents, the vulnerability allows a remote attacker with authentication to execute arbitrary SQL comma...

CVE-2015-5659: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Network Applied Communication Laboratory Pref Shimane CMS 2.x before 2.0.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

pickscore.com XSS vulnerability

Vulnerable URL: http://www.pickscore.com/contactus.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1572451 Google Pagerank| 1 VIP website status:| No Check pickscore.com SSL...

metalafrica.info XSS vulnerability

Vulnerable URL: http://www.metalafrica.info/site.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4410795 Google Pagerank| 0 VIP website status:| No Check metalafrica.info SSL...

global.kryolan.com XSS vulnerability

Vulnerable URL: https://global.kryolan.com/search/%3Cscript%3Ealert%28%22XSSPOSED%22%29%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...

searsoptical.com XSS vulnerability

Vulnerable URL: http://www.searsoptical.com/SearchDisplay?storeId=12653=16951=-1=24=0=Q=SimpleSearch=2=100=global=true=image=1=%22%3E%3CSVg%2FONLOAd%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS...

ww.rejsa.se Open Redirect vulnerability

Vulnerable URL: http://ww.rejsa.se/redirect.php?http://www.xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP...

braymarksurveys.com XSS vulnerability

Vulnerable URL: http://www.braymarksurveys.com/login/login.php?Message= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website...

aedairy.com XSS vulnerability

Vulnerable URL: http://www.aedairy.com/recipe-search.cfm Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3080137 Google Pagerank| 4 VIP website status:| No Check aedairy.com SSL...

myhouseprice.com XSS vulnerability

Vulnerable URL: http://www.myhouseprice.com/search.cfm Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1647541 Google Pagerank| 3 VIP website status:| No Check myhouseprice.com SSL...

kazahstan.delovoi.net XSS vulnerability

Vulnerable URL: http://kazahstan.delovoi.net/search.php?mode=search=1in=x" onmouseover=prompt/XSSPOSED/ " Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

bbyellow.com XSS vulnerability

Vulnerable URL: http://www.bbyellow.com/browse-business-cities/char:A" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3715060 Google Pagerank| 1 VIP website status:| No Check...

azerbaijanyp.com XSS vulnerability

Vulnerable URL: http://www.azerbaijanyp.com/browse-business-directory/char:D" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1078896 Google Pagerank| 2 VIP website status:| No Chec...

kidwood.su XSS vulnerability

Vulnerable URL: http://kidwood.su/search/searchgood/?a=0string=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E&=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerabili...

SUSE SLED10 / SLES10 Security Update : Xen (SUSE-SU-2012:1606-1)

This update fixes the following security issues in xen : - CVE-2012-5513: XENMEMexchange may overwrite hypervisor memory XSA-29 - CVE-2012-5515: Several memory hypercall operations allow invalid extent order values XSA-31 Also the following bugs have been fixed and upstream patches have been...

cups-filters security update

1.0.35-15:.1 - Applied upstream patch to fix BrowseAllow parsing issue CVE-2014-4338, bug 1091568. - Applied upstream patch for cups-browsed DoS via processbrowsedata out-of-bounds read CVE-2014-4337, bug 1111510...

6: JSM policy not respected by deployed applications

It was found that Java Security Manager permissions configured via a policy file were not properly applied, causing all deployed applications to be granted the java.security.AllPermission permission. In certain cases, an attacker could use this flaw to circumvent expected security measures to...

Piwigo vulnerable to SQL injection

Overview Piwigo is a software to manage and host image files on the web. Piwigo contains a SQL injection vulnerability. Yuji Tounai of bogus.jp reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An...

PHPRecipeBook <= 2.35 (g_rb_basedir) Remote File Include Exploit

No description provided by source. !/usr/bin/perl PHPRecipeBook 2.36 Class: Remote File Include Vulnerability Date: 2006/10/16 Remote: Yes Type: Highly critical Vendor: http://phprecipebook.sourceforge.net/...

Applied Watch Command Center 1.0 Authentication Bypass Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/9124/info A vulnerability has been identified in the system that may allow an attacker to bypass authentication to add attacker supplied IDS alerts and new user accounts in the console. Successful exploitation of these...