CVE-2009-4808

CVE-2009-4808 affects Graugon PHP Article Publisher 1.0. The admin.php authentication check can be bypassed by setting the g_admin cookie to 1, allowing remote attackers to gain administrative access. This is the root cause and impact described across sources; no remediation or mitigation details...

CVE-2009-4808

admin.php in Graugon PHP Article Publisher 1.0 allows remote attackers to bypass authentication and obtain administrative access by setting the gadmin cookie to 1...

Kiasabz Article News CMS Magazine SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================= Kiasabz Article News CMS Magazine SQL Injection Vulnerability =============================================================...

Kiasabz Article News CMS Magazine - SQL Injection

======================================================================================== | Title : Kiasabz Article News CMS Magazine SQL Injection Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site :...

Kiasabz Article News CMS Magazine - SQL Injection

Kiasabz Article News CMS Magazine - SQL Injection ======================================================================================== | Title : Kiasabz Article News CMS Magazine SQL Injection Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web...

Apple Releases Security Update 2010-002 and Mac OS X v10.6.3

Apple has released Security Update 2010-002 and Mac OS X v10.6.3 to address multiple vulnerabilities that affect a number of applications. These vulnerabilities may allow an attacker to execute arbitrary code, obtain sensitive information, cause a denial-of-service condition, bypass security...

httpd, mod_ssl security update

CentOS Errata and Security Advisory CESA-2010:0175 Updated httpd packages that fix one security issue, a bug, and add an enhancement are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability...

Microsoft Security Bulletin MS10-016 - Important Vulnerability in Windows Movie Maker Could Allow Remote Code Execution (975561)

Microsoft Security Bulletin MS10-016 - Important Vulnerability in Windows Movie Maker Could Allow Remote Code Execution 975561 Published: March 09, 2010 Version: 1.0 General Information Executive Summary This security update addresses a privately reported vulnerability in Windows Movie Maker and...

Microsoft Re-Releases Security Bulletin MS10-015

Microsoft has re-released the security update described in Microsoft Security Bulletin MS10-015. This release contains an updated installation package that does not allow the security update to be installed on computers infected with malicious code. Microsoft has also released a Fix-It Tool to...

Explay CMS <= 2.1 SQL Injection Vulnerabilities

=============================================== Explay CMS = 2.1 SQL Injection Vulnerabilities =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 // /' / // /' / /' 0 0 / / / / / / 1 1 / / 0 ...

Article Friendly - 'Filename' Local File Inclusion

source: https://www.securityfocus.com/bid/38461/info Article Friendly is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local script...

Article Friendly - Filename Local File Inclusion

Article Friendly - Filename Local File Inclusion source: https://www.securityfocus.com/bid/38461/info Article Friendly is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensiti...

Joomla 1.5.15 Persistant XSS Vulnerability

Exploit for unknown platform in category web applications ========================================== Joomla 1.5.15 Persistant XSS Vulnerability ========================================== prog ------------- Joomla 1.5.15 vuln ------------- Persistant XSS in 'Author Alias' source -------------...

Article Friendly Cross Site Request Forgery

======================================================================= Article friendly CSRF Vulnerability ======================================================================= by Pratul Agrawal Vulnerability found in- Admin module email [email protected] company aksitservices Credit by Pratu...

Article Friendly - SQL Injection

Article Friendly - SQL Injection / /| | || || | | | | | || | / \ / || | / | | | | / / |||| | | | | | | / \ | | | / /| /| // |\ || |||| || ||||// \||\ ||| \ ..Bl4ck H4T.. ============================================================================== ! Article Friendly = SQL Injection...

Article Friendly SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================ Article Friendly SQL Injection Vulnerability ============================================ === -/Expl0it Code- : === SQL Injection Vulnerability : -/ Link Admin:...

Article Friendly SQL Injection Vulnerability

No description provided by source. / /| | || || | | | | | || | / \ / || | / | | | | / / |||| | | | | | | / \ | | | / /| /| // |\ || |||| || ||||// \||\ ||| \ ..Bl4ck H4T.. ============================================================================== ! Article Friendly = SQL Injection...

Article Friendly - SQL Injection

/ /| | || || | | | | | || | / \ / || | / | | | | / / |||| | | | | | | / \ | | | / /| /| // |\ || |||| || ||||// \||\ ||| \ ..Bl4ck H4T.. ============================================================================== ! Article Friendly = SQL Injection Vulnerability...

$4 Mil Stolen in Carbon Emission Credits Hack

Credit card numbers are so passe. Today’s hackers know the real powerhouse data to steal is emission certificates. That’s exactly what hackers went after last week when they obtained unauthorized access to online accounts where companies maintain their carbon credits. Read the full article. Wired...

Multiple vulnerabilities in third party extensions

Several vulnerabilities have been found in the following third party TYPO3 extensions: Event Manager eventmanagement, Game Article DB gamearticledb, Simple career mlcareer, Surprise Calendar mlsurprisecalendar, Search Api Ajax Google searchajaxgoogle, Download Manager sprdownloadmanager Release...