LotusCMS <= 3.0 LFI Vulnerability - Active Check

LotusCMS is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

PHP MicroCMS 1.0.1 CSRF and XSS Vulnerabilities

Exploit for php platform in category web applications Product: PHP MicroCMS Vendor: ApPHP http://www.apphp.com/ Vulnerable Version: 1.0.1 and probably prior versions Vendor Notification: 21 December 2010 Vulnerability Type: CSRF Cross-Site Request Forgery Status: Not Fixed, Vendor Alerted, Awaiti...

Citrix Access Gateway Command Injection Vulnerability

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 VSR Security Advisory http://www.vsecurity.com/ - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Advisory Name: Citrix Access Gateway Command Injection Vulnerability Release Date:...

Joomla! Component com_redirect 1.5.19 - Local File Inclusion

Joomla! Component comredirect 1.5.19 - Local File Inclusion source: https://www.securityfocus.com/bid/45364/info The 'comredirect' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this...

SuSE 11 / 11.1 Security Update : OpenOffice_org (SAT Patch Numbers 2586 / 2589)

This update of OpenOfficeorg fixes the following security issue : - Arbitrary macros written in Python can be executed by bypassing macro security permissions. CVE-2010-0395 It also provides the maintenance update to OpenOffice.org-3.2.1. Details about all upstream changes can be found at...

Joomla 'com_img' Component LFI Vulnerability (Nov 2010) - Active Check

The SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla"; if description scriptoid"1.3.6.1.4.1.25623.1.0.100920";...

Mediacoder 0.7.5.4792 - Local Buffer Overflow (SEH)

Exploit Title: Mediacoder 0.7.5.4792 SEH Buffer Overflow Exploit Date: 11/29/2010 Author: 0v3r Software Link: http://www.mediacoderhq.com/mirrors.htm?file=MediaCoder-0.7.5.4792.exe Version: 0.7.5.4792 Tested on: Windows XP SP3 EN CVE: N/A !/usr/bin/python win32bind - EXITFUNC=seh LPORT=4444...

Zen Cart 'includes/initsystem.php' Local File Include Vulnerability

Zen Cart is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow the...

MetInfo 2.0 PHP Code Injection Vulnerability

Exploit for php platform in category web applications ============================================ MetInfo 2.0 PHP Code Injection Vulnerability ============================================ Exploit Title£ºMetInfo 2.0 PHP Code Injection Vulnerability Date:2010-10-31 Author£ºlinux520.com...

TFTgallery <= 0.13.1 'thumbnailformpost.inc.php' LFI Vulnerability - Active Check

TFTgallery is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

eoCMS Local File Include Vulnerability

eoCMS is prone to multiple input-validation vulnerabilities, including: 1. An HTML-injection vulnerability 2. An SQL-injection vulnerability 3. Multiple local file-include vulnerabilities Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise...

NovaBoard <= 1.1.4 'nova_lang' LFI Vulnerability

NovaBoard is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Fretsweb Multiple Local File Include Vulnerabilities

Fretsweb is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information and to execute arbitrary local scripts in the context of the webserver process. Thi...

CuteNews (page) local File Inclusion Vulnerability

Exploit for php platform in category web applications ================================================== CuteNews page local File Inclusion Vulnerability ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ ...

XSS vulnerability in Atutor edit content folder

Vulnerability ID: HTB22599 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinatutoreditcontentfolder.html Product: ATutor Vendor: Inclusive Design Institute http://www.atutor.ca/ Vulnerable Version: 1.0 Vendor Notification: 01 September 2010 Vulnerability Type: XSS Cross Site Scripting...

Local File Inclusion in TCMS

Vulnerability ID: HTB22573 Reference: http://www.htbridge.ch/advisory/localfileinclusionintcms.html Product: TCMS Vendor: Target CMS http://targetcms.com/ Vulnerable Version: 100728 and Probably Prior Versions Vendor Notification: 09 August 2010 Vulnerability Type: Local File Inclusion Status: No...

Prometeo 1.0.65 - SQL Injection

// / ////// //////// /// / / / / // / / / / /// //////// / / // / / / // / // /// //////// // ================================= Prometeo vers. 1.0.65 -SQLi Vulnerability- ================================= -Vulnerability ID: LD3-Product: Prometeo-Vendor: Prometeo...

Apple QuickTime Crafted HTTP Error Response Buffer Overflow (CVE-2008-0234)

Apple QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous audio/video stream formats, which include RSTP. There exists a buffer overflow vulnerability in Apple QuickTime application. The flaw ...

MS Windows KTM Invalid Free with Reused Transaction GUID (MS10-047)

Exploit for windows platform in category dos / poc =================================================================== MS Windows KTM Invalid Free with Reused Transaction GUID MS10-047 =================================================================== Microsoft Windows KTM Invalid Free with reus...

Local File Inclusion in CMS Source

Vulnerability ID: HTB22545 Reference: http://www.htbridge.ch/advisory/localfileinclusionincmssource.html Product: CMS Source Vendor: Proud Daddy Web Design http://www.prouddaddy.net/ Vulnerable Version: Current at 28.07.2010 and Probably Prior Versions Vendor Notification: 28 July 2010...