Unrestricted file upload

Unrestricted file upload vulnerability in the Compose Email feature in the Emails module in Sugar Community Edition aka SugarCRM before 5.2f allows remote authenticated users to execute arbitrary code by uploading a file with only an extension in its name, then accessing the file via a direct...

[SECURITY] Fedora 11 Update: moin-1.8.4-1.fc11

MoinMoin is an advanced, easy to use and extensible WikiEngine with a large community of users. Said in a few words, it is about collaboration on easily editable web pages...

TYPO3 Security Bulletin

It has been discovered that the extension CWT Community cwtcommunity is vulnerable to SQL-injections. Release Date: June 16 2009 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.0.3 and all versions below...

MDVA-2009:109 : mysql

This update provides mysql-5.0.83 Community Server with the latest bugfixes for mysql-5.0.x. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was...

(Post Form --> Parent Register (name)) Credentials Changer (SQLi) EXPLOIT -- Online Grades & Attendance v-3.2.6-->

!/usr/bin/perl ------------------------------------------------------------------------------------------------------------------- Post Form -- Parent Register name Credentials Changer SQLi EXPLOIT -- Online Grades & Attendance v-3.2.6--...

Joomla Boy Scout Advancement 0.3 SQL Injection

------------------------------------------------------------------------------------------------------------ MULTIPLE SQL INJECTION VULNERABILITIES --Joomla Component 'Boy Scout Advancement' ----------------------------------------------------------------------------------------------------------...

WoDig community program wodig. asp page the filter is not strict lead to SQL injection vulnerabilities-vulnerability warning-the black bar safety net

System number: WAVDB-0 1 4 2 1 Affected version: WoDig 4.1.2 Program description: WODIG is a refined design of Chinese DIGG community open source program is a Windows NT Service environment under the DIGG community program the best solution. Vulnerability analysis: In the file wodig. asp: tagsnam...

CVE-2009-1651

SQL injection vulnerability in admin/memberdetails.php in 2daybiz Business Community Script allows remote attackers to execute arbitrary SQL commands via the mid parameter...

CVE-2009-1652

admin/adminaddeditdetails.php in Business Community Script does not properly restrict access, which allows remote attackers to gain privileges and add administrators via a direct request...

Sql injection

SQL injection vulnerability in admin/memberdetails.php in 2daybiz Business Community Script allows remote attackers to execute arbitrary SQL commands via the mid parameter...

Server side request forgery (ssrf)

admin/adminaddeditdetails.php in Business Community Script does not properly restrict access, which allows remote attackers to gain privileges and add administrators via a direct request...

CVE-2009-1651

SQL injection vulnerability in admin/memberdetails.php in 2daybiz Business Community Script allows remote attackers to execute arbitrary SQL commands via the mid parameter...

CVE-2009-1652

The CVE-2009-1652 issue affects admin/adminaddeditdetails.php in the Business Community Script, where access controls are not properly enforced. This enables remote attackers to gain privileges and add administrators via a direct request. The description from NVD (and cross-referenced entries) in...

CVE-2009-1651

The CVE-2009-1651 entry describes a SQL injection in the 2daybiz Business Community Script, specifically in admin/member_details.php. The vulnerability is exploitable via the mid parameter, allowing remote attackers to execute arbitrary SQL commands. The public references (NVD entry and other sou...

Counterpoint: The need for a cybersecurity czar is real

As everyone prepares to examine the results of the Obama Administration’s cyber-security review, one of the largest issues in play remains to what extent the White House will embrace recommendations to create a Cabinet-level position to address the matter or some role superior to today’s “cyber...

2daybiz Business Community Script Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================================= 2daybiz Business Community Script Multiple Remote Vulnerabilities =================================================================...

2DayBiz Business Community Script - Multiple Vulnerabilities

------------------------------------------------------------------------------------------------------------- 2daybiz Business Community Script adminaddeditdetails.php Add Admin / Remote Blind SQL Injection Exploit...

MDVA-2009:106 : mysql

This update provides mysql-5.0.81 Community Server with the latest bugfixes for mysql-5.0.x. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was...

microTopic 1 Blind SQL Injection

!/usr/bin/perl --------------------------------------------------------------------------- POST var 'rating' BLIND SQL INJECTION--microTopic v1 Initial Release-- --------------------------------------------------------------------------- CMS INFORMATION: --WEB:...

webSPELL 4.2.0e - page Blind SQL Injection

webSPELL 4.2.0e - page Blind SQL Injection !/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; use Getopt::Long; '/ -.- ------------------oOO------OOo----------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Research Division //...