6590 matches found
Shuo Mei web site management system SomiCMS Enterprise Edition v3. 1 0day-vulnerability warning-the black bar safety net
Author: IDEA4 Bulk to take the shell,the keyword your looking for you can! The use method is as follows Copy the code about. php? aid=-1 union select 1,concatusername,0x20,password,3,4,5,6,7 from somiuser limit 0,1/...
CVE-2011-1107
Unspecified vulnerability in Google Chrome before 9.0.597.107 allows remote attackers to spoof the URL bar via unknown vectors...
Code injection
Unspecified vulnerability in Google Chrome before 9.0.597.107 allows remote attackers to spoof the URL bar via unknown vectors...
CVE-2011-1107
Unspecified vulnerability in Google Chrome before 9.0.597.107 allows remote attackers to spoof the URL bar via unknown vectors...
CVE-2011-1107
Removed by vendor...
Google Fixes 19 Bugs in Chrome, Pays $14K in Bug Bounties
Google has released version 9.0.597.107 of its Chrome browser, fixing 19 security vulnerabilities and paying $14,000 in rewards to researchers in the process. The new version of Chrome, which Google released on Monday afternoon, includes fixes for 16 high-severity vulnerabilities and three bugs...
Discuz X Series Xss vulnerability small collection-vulnerability warning-the black bar safety net
/ Title:Discuz X Series Xssvulnerability small collection Author:sogili@0xsec From:0xsec.org Website:0xsec.org & amp; sogili.com / Discuz X version series smallXssthe vulnerability of the collection. Relates to the Discuz x1. 0 & x1. 5 version. Plus QQ bookmarkXssone. sogili whine when you Tinker...
Discuz entertainment Hall plug-in V1. 0 injection vulnerability and fix-vulnerability warning-the black bar safety net
| Author:0x0F From:0xsec.org Vulnerability Details: sid variable without filtration generated SQL injection. Exploits:http://site/plugin. php? id=huxhall:huxhall&sid=1 You know. KeyWords:inurl:huxhall:huxhall Related companies:Le tour network HappyYux.com Repair Methods:filtration Has a patch:No...
DISCUZX1. 5 local file inclusion vulnerability-vulnerability warning-the black bar safety net
DISCUZX1. 5 local file inclusion, of course, is conditional, is to use a file as a cache. configglobal.php $config'cache''type' = 'file'; function cachedata$cachenames ...... $isfilecache = getglobal'config/cache/type' == 'file'; ...... if$isfilecache $lostcaches = array; foreach$cachenames as...
XYCMS law firm built Station system V1. 0 multi-flaw-vulnerability warning-the black bar safety net
XYCMS law firm built Station system V1. 0 http://down.admin5.com/asp/71909.html B0mbErM@n ; 2011-2-18 eWebEditor http://127.0.0.1:99/system/xyeWebEditor/admin/login.asp User=XY2010 Pass=XY2010 XSS http://127.0.0.1:99/online.asp Qq:XSS Mail:XSS Photo:XSS Contents:XSS Eval...
Multi Agent System city. asp SQL injection vulnerability and fix-vulnerability warning-the black bar safety net
Author: R4dc0re Information Description: a Multi-Agent System of the city. asp the reason there may be the use ofSQL injectionis due to this file and there is insufficient filtering of user requests query caused. The use of this vulnerability may allow an attacker to use to the server application...
Windows Vista / 7 lpksetup. exe the DLL-hijacking-vulnerability warning-the black bar safety net
/ Exploit: Windows Vista/7 lpksetup.exe oci.dll DLL Hijacking Vulnerability Extension: the . mlc Author: Tyler Borland [email protected] Date: 10/20/2010 Tested on: Windows 7 Ultimate Windows Vista Ultimate/Enterpries and Windows 7 Enterprise should be vulnerable as well Effect: Remote Code...
Foxit PDF reader v4. 1. 1 title stack buffer overflow-vulnerability warning-the black bar safety net
require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = GreatRanking include Msf::Exploit::FILEFORMAT include Msf::Exploit::PDF include Msf::Exploit::Egghunter include Msf::Exploit::Seh unused due to special circumstances def initializeinfo = superupdateinfoinfo, 'Name' = 'Foxit PDF Read...
DiY-Page and then blast multiple vulnerabilities-vulnerability warning-the black bar safety net
Front someone studied DiY-Page sqlInj vulnerability analysis posts, I followed read Read code, found Diy-Page v8. 2 program also the presence of multiple vulnerabilities including local file inclusion vulnerability, and upload loophole, cross site loophole, etc.. A, local file inclusion...
Cmsez(with easy)total Station system injection 0day-vulnerability warning-the black bar safety net
| allinurl:"owered by CMSEZ" comments.php inurlowered by CMSEZ Vulnerability code: mainfile.php ? //comments include "mainfile.php"; $art=new article; //Set $confirm='yes';//yes:need administrator authentication to the display,no:direct display $member=new member; $userinfo=$member-memberauth;...
BeeSns microblogging system V0. 2 elevation of Privilege oday+exp and fix-vulnerability warning-the black bar safety net
| Publishing author: sub-meter Affected versions: BeeSns V0. 2 Official address: Vulnerabilitydescription: IP filter is not strict,causing the user can submit malicious parameters to enhance their own privileges This microblogging system style nice, personally prefer, the look code is found some...
Shenzhen College of Information Technology V3. 0 injection vulnerability-vulnerability warning-the black bar safety net
Publishing author: xiaokis Affected version: V3. 0 Vulnerability type: SQL injection Vulnerability description: File: the newss. asp % on error resume next sql="update news set hits=hits+1 where id="&cstrrequest"id" conn. execute sql set rs=server. createobject"adodb. recordset" sql="select from...
Rain Joe(YuQa)Network Information feedback system YuQaIFS V1. 0 vulnerability 0day and fix-vulnerability warning-the black bar safety net
Publishing author: f4tb0y Affected versions: YuQaIFS V1. 0 Vulnerability type: design flaw Vulnerability Description: a vulnerability in the file is YuQaIFSSave. the asp directly to the submitted data is written to the database, without any filtering. 主页 面 www.xxx.com/xx/index.asp(xx for this...
CentOS Update for firefox CESA-2010:0966 centos4 i386
Check for the Version of firefox OpenVAS Vulnerability Test CentOS Update for firefox CESA-2010:0966 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Hearing the wind television system registry injection and tasteless of the anti-injection-vulnerability warning-the black bar safety net
Publishing author: LinkEr Affected versions: rapid-wind film and television system Official website: http://www.gxwglm.com Vulnerability type: SQL injection Vulnerability description: news air television system there is more thanSQL injectionvulnerabilities. 1. Register at injection:...