OrderSys <= 1.6.4 Sql Injection Vulnerabilities

Dear All, I have found multiple sql injection vulnerabilities in OrderSys = 1.6.4. The vendor knows the vulnerabilities and he is fixing them as stated in the enclosed advisory. See also http://www.bioinformatics.org/phplabware/labwiki/index.php?page=releasenotes Since the developer is currently...

OrderSys 1.6.4 - SQL Injection

------------------------------------------------------------------------ OrderSys = 1.6.4 Sql Injection Vulnerabilities ------------------------------------------------------------------------ author............: muuratsalo Revshell.com contact...........: muuratsaloatgmaildotcom...

LabStoRe <= 1.5.4 SQL Injection

Exploit for php platform in category web applications ------------------------------------------------------------------------ LabStoRe = 1.5.4 Sql Injection Vulnerabilities ------------------------------------------------------------------------ author............: muuratsalo Revshell.com...

CVE-2009-0404

Multiple cross-site scripting XSS vulnerabilities in Bioinformatics htmLawed 1.1.3 and 1.1.4 allow remote attackers to inject arbitrary web script or HTML via invalid Cascading Style Sheets CSS expressions in the style attribute, which is processed by Internet Explorer 7...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Bioinformatics htmLawed 1.1.3 and 1.1.4 allow remote attackers to inject arbitrary web script or HTML via invalid Cascading Style Sheets CSS expressions in the style attribute, which is processed by Internet Explorer 7...

CVE-2009-0404

Multiple cross-site scripting XSS vulnerabilities in Bioinformatics htmLawed 1.1.3 and 1.1.4 allow remote attackers to inject arbitrary web script or HTML via invalid Cascading Style Sheets CSS expressions in the style attribute, which is processed by Internet Explorer 7...

CVE-2009-0404

CVE-2009-0404 affects Bioinformatics htmLawed 1.1.3 and 1.1.4, with multiple XSS vulnerabilities allowing remote injection of arbitrary script/HTML via invalid CSS expressions in the style attribute processed by Internet Explorer 7. The vulnerability details specify the affected component and ent...

Unfixed XSS vulnerability at bioinformatics.charite.de

Security researcher xylitol, has submitted on 16/07/2008 a cross-site-scripting XSS vulnerability affecting bioinformatics.charite.de, which at the time of submission ranked 47905 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/09/2008. It i...