Socialware 2.2 Cross Site Scripting / Shell Upload

Exploit Title:Upload Vulnerability and XSS in socialware V2.2 www.iscripts.com Version: Web Application vendor :www.iscripts.com Date: 29 apr,2010 Dork:Powered by iScripts SocialWare Author:Sid3^effects Code : --------------------------------------------------------------------------------------...

Clipak Shell Upload

======================================================================================== | Title : clipak Upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Tested on: windows SP2 Français V.Pnx2 2.0 + Lunix Français v.9.4 Ubuntu | Bug :...

TinyPug Cross Site Request Forgery

============================================================================== » Note : Default Username Of Admin : Administrator ============================================================================== » Tinypug Remote Change Password Exploit...

Populum 2.3 SQL Injection

::::::::::::::ProUd to Be InDiaN:::::::::::::: AuthoR : -SiLeNtp0is0n- Vuln. App : Populum version 2.3 App Detail : Content management software for hybrid blog/media/commerce communities VuLneraBiLity : SQL injection DoRk : "Powered by Populum" My HoMe : www.andhrahackers.com gReetZ : Mr.XXXX...

Fedora Update for moodle FEDORA-2008-0627

Check for the Version of moodle OpenVAS Vulnerability Test Fedora Update for moodle FEDORA-2008-0627 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for moodle FEDORA-2008-11550

Check for the Version of moodle OpenVAS Vulnerability Test Fedora Update for moodle FEDORA-2008-11550 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

[SECURITY] Fedora 9 Update: moodle-1.9.3-5.fc9

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

[SECURITY] Fedora 10 Update: moodle-1.9.3-3.fc10

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

Design/Logic Flaw

A "logic error" in Cisco IOS 12.0 through 12.4, when a Multiprotocol Label Switching MPLS VPN with extended communities is configured, sometimes causes a corrupted route target RT to be used, which allows remote attackers to read traffic from other VPNs in opportunistic circumstances...

CVE-2008-1900

optionUpdate.asp in Carbon Communities 2.4 and earlier allows remote attackers to edit arbitrary member information via a modified ID field...

CVE-2008-1900

optionUpdate.asp in Carbon Communities 2.4 and earlier allows remote attackers to edit arbitrary member information via a modified ID field...

CVE-2008-1900

Carbon Communities 2.4 and earlier are affected by CVE-2008-1900 via the option_Update.asp component. The root cause is that a modified ID field allows remote attackers to edit arbitrary member information. The impact is remote modification of member data. The connected documents do not provide e...

CVE-2008-1896

Multiple cross-site scripting XSS vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Redirect parameter to login.asp and the 2 OrderBy parameter to membersend.asp...

Sql injection

Multiple SQL injection vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to events.asp, the 2 UserName parameter to getpassword.asp, and possibly an unspecified parameter to 3 optionUpdate.asp in an edit action...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Redirect parameter to login.asp and the 2 OrderBy parameter to membersend.asp...

CVE-2008-1895

Multiple SQL injection vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to events.asp, the 2 UserName parameter to getpassword.asp, and possibly an unspecified parameter to 3 optionUpdate.asp in an edit action...

CVE-2008-1896

Multiple cross-site scripting XSS vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Redirect parameter to login.asp and the 2 OrderBy parameter to membersend.asp...

CVE-2008-1895

Multiple SQL injection vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to events.asp, the 2 UserName parameter to getpassword.asp, and possibly an unspecified parameter to 3 optionUpdate.asp in an edit action...

CVE-2008-1896

CVE-2008-1896 describes multiple cross-site scripting (XSS) vulnerabilities in Carbon Communities versions 2.4 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML through two parameters: (1) Redirect in login.asp and (2) OrderBy in member_send.asp. The consolidat...

CVE-2008-1895

CVE-2008-1895 affects Carbon Communities versions