SonicWALL EMail Security 7.3.5 - Multiple Vulnerabilities

Document Title: =============== SonicWALL EMail Security 7.3.5 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=543 Release Date: ============= 2012-08-13 Vulnerability Laboratory ID VL-ID: ==================================== 5...

Flogr 2.5.6 / 2.3 Cross Site Scripting Vulnerabilities

Exploit for php platform in category web applications Flogr v2.5.6 & v2.3 - Cross Site Script Vulnerabilities Details: ======== Multiple non persistent cross site scripting vulnerabilities are detected in the Flogr v2.5.6 & v2.3 photo gallery CMS. The vulnerability allows remote attackers to hija...

Flynax General Classifieds v4.0 CMS Multiple Vulnerabilities

Flynax General Classifieds v4.0 CMS - Multiple Vulnerabilities Details: ======== 1.1 A SQL Injection vulnerability is detected in the Flynax General Classifieds v4.0 Content Management System. Remote attackers without privileged user accounts can execute/inject own sql commands to compromise the...

ShopperPress v2.7 Wordpress - Cross Site Vulnerabilities

Document Title: =============== ShopperPress v2.7 Wordpress - Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=670 Release Date: ============= 2012-08-01 Vulnerability Laboratory ID VL-ID: ==================================== 67...

Distimo Monitor 6.0 Cross Site Scripting

Title: ====== Distimo Monitor 6.0 - Multiple Cross Site Vulnerabilities Date: ===== 2012-07-05 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=631 VL-ID: ===== 631 Common Vulnerability Scoring System: ==================================== 2 Introduction: =============...

iAuto Mobile Application 2012 Multiple Vulnerabilities

Exploit for php platform in category web applications iAuto Mobile Application 2012 - Multiple Web Vulnerabilities Introduction: ============= With Internet on mobile devices booming, having a desktop-oriented version is just not enough anymore. Empower your visitors with content designed for...

Distimo Monitor 6.0 Cross Site Scripting

Exploit for php platform in category web applications Distimo Monitor 6.0 - Multiple Cross Site Vulnerabilities Introduction: ============= Distimo Monitor allows developers to track their daily download and revenue figures from all app stores in one convenient place. View application rankings in...

Design/Logic Flaw

Moodle 2.3.x before 2.3.1 uses only a client-side check for whether references are permitted in a file upload, which allows remote authenticated users to bypass intended alias aka shortcut restrictions via a client that omits this check...

CVE-2012-3387

Moodle 2.3.x before 2.3.1 uses only a client-side check for whether references are permitted in a file upload, which allows remote authenticated users to bypass intended alias aka shortcut restrictions via a client that omits this check...

UBUNTU-CVE-2012-3387

Moodle 2.3.x before 2.3.1 uses only a client-side check for whether references are permitted in a file upload, which allows remote authenticated users to bypass intended alias aka shortcut restrictions via a client that omits this check...

Flynax General Classifieds v4.0 CMS - Multiple Vulnerabilities

Document Title: =============== Flynax General Classifieds v4.0 CMS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=659 Release Date: ============= 2012-07-12 Vulnerability Laboratory ID VL-ID:...

Flogr v2.5.6 & v2.3 - Cross Site Script Vulnerabilities

Document Title: =============== Flogr v2.5.6 & v2.3 - Cross Site Script Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=656 Release Date: ============= 2012-07-10 Vulnerability Laboratory ID VL-ID: ==================================== 656...

CORE-2012-0530 - Lattice Diamond Programmer Buffer Overflow

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Lattice Diamond Programmer Buffer Overflow 1. Advisory Information Title: Lattice Diamond Programmer Buffer Overflow Advisory ID: CORE-2012-0530 Advisory URL:...

Lattice Diamond Programmer Buffer Overflow

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Lattice Diamond Programmer Buffer Overflow 1. Advisory Information Title: Lattice Diamond Programmer Buffer Overflow Advisory ID: CORE-2012-0530 Advisory URL:...

Lattice Diamond Programmer Buffer Overflow

Exploit for windows platform in category dos / poc Lattice Diamond Programmer Buffer Overflow 1. Advisory Information Title: Lattice Diamond Programmer Buffer Overflow Advisory ID: CORE-2012-0530 Advisory URL: http://www.coresecurity.com/content/lattice-diamond-programmer-buffer-overflow Date...

Lattice Diamond Programmer 1.4.2 - Buffer Overflow (PoC)

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Lattice Diamond Programmer Buffer Overflow 1. Advisory Information Title: Lattice Diamond Programmer Buffer Overflow Advisory ID: CORE-2012-0530 Advisory URL:...

Lattice Diamond Programmer 1.4.2 - Buffer Overflow (PoC)

Lattice Diamond Programmer 1.4.2 - Buffer Overflow PoC Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Lattice Diamond Programmer Buffer Overflow 1. Advisory Information Title: Lattice Diamond Programmer Buffer Overflow Advisory ID: CORE-2012-0530 Advisory URL:...

Commentics 2.0 Cross Site Request Forgery / Cross Site Scripting

Commentics 2.0 Vendor information: "Commentics is a free, advanced PHP comment script with many features. Professionally written and with open source code, its main aims are to be integrable, customizable and secure." Vendor URI: http://www.commentics.org/ Issues: Cross Site Scripting, Cross Site...

AZ Photo Album - Cross-Site Scripting Arbitrary File Upload

AZ Photo Album - Cross-Site Scripting Arbitrary File Upload source: https://www.securityfocus.com/bid/53641/info The AZ Photo Album is prone to a cross-site-scripting and an arbitrary-file-upload vulnerabilities because it fails to properly sanitize user-supplied input. Attackers can exploit thes...

AZ Photo Album - Cross-Site Scripting / Arbitrary File Upload

source: https://www.securityfocus.com/bid/53641/info The AZ Photo Album is prone to a cross-site-scripting and an arbitrary-file-upload vulnerabilities because it fails to properly sanitize user-supplied input. Attackers can exploit these issues to steal cookie information, execute arbitrary clie...