2WIRE Gateway Authentication Bypass & Password Reset Vulnerabilities

Exploit for hardware platform in category remote exploits ==================================================================== 2WIRE Gateway Authentication Bypass & Password Reset Vulnerabilities ==================================================================== 2WIRE GATEWAY AUTHENTICATION...

TransLucid 1.75 Multiple Remote Vulnerabilities

No description provided by source. transLucid - Cross Site Scripting and HTML Injection Vulnerabilities Version Affected: 1.75 newest Info: transLucidonline is the easy website publishing system with which anyone can create and maintain web content, in multiple languages and based on a growing li...

PHP Nuke v.8.0 (referer) SQL Injection

PHP Nuke v.8.0 referer SQL Injection Author: Gerendi Sandor Attila Original advisory: http://gsasec.blogspot.com/2009/05/php-nuke-v80-referer-sql-injection.html Date: May 14, 2009 Package: PHP-Nuke Product homepage: http://phpnuke.org/ Versions Affected: v.8.0 Other versions may also be affected...

Claroline v.1.8.11 Cross-Site Scripting

Author: Gerendi Sandor Attila Original Advisory: http://gsasec.blogspot.com/2009/05/claroline-v1811-cross-site-scripting.html Date: May 05, 2009 Package: Claroline 1.8.11 Product Homepage: http://www.claroline.net/ Versions Affected: v.1.8.11 Other versions may also be affected Severity: Medium...

TinyWebGallery <= 1.7.6 LFI / Remote Code Execution Exploit

No description provided by source. ?php / ----------------------------------------------------------- TinyWebGallery = 1.7.6 LFI / Remote Code Execution Exploit ----------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...

Claroline 1.8.11 Cross Site Scripting

Author: Gerendi Sandor Attila Original Advisory: http://gsasec.blogspot.com/2009/05/claroline-v1811-cross-site-scripting.html Date: May 05, 2009 Package: Claroline 1.8.11 Product Homepage: http://www.claroline.net/ Versions Affected: v.1.8.11 Other versions may also be affected Severity: Medium...

Multiple Vendor - PF Null Pointer Dereference

Multiple Vendor - PF Null Pointer Dereference / / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author : Rembrandt Date : 2009-04-30 Found : 2009-04-09 Affected...

net2ftp <= 0.97 Cross-Site Scripting/Request Forgery Vulnerabilities

No description provided by source. =cicatriz [email protected]==advisories= / / / / // / / // / o / / .-/ =net2ftp = 0.97 Cross-Site Scripting/Request Forgery==/= == =Advisory & Vulnerability Information=== Title: net2ftp = 0.97 Cross-Site Scripting/Request Forgery Advisory ID:...

JobHut 1.2 - pk SQL Injection

JobHut 1.2 - pk SQL Injection \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV108$2009 ----------------------------------------------------------------------------------------- ECHOADV108$2009 JobHut = 1.2 pk Remote Sql Injection Vulnerability...

[ECHO_ADV_107$2009] FubarForum <= 1.6 Critical File Disclosure Vulnerability

ECHOADV107$2009 ----------------------------------------------------------------------------------------- ECHOADV107$2009 FubarForum = 1.6 Critical File Disclosure Vulnerability ----------------------------------------------------------------------------------------- Author : K-159 Date : March, ...

GLPI 0.71.3 - Multiple SQL Injections Vulnerabilities

GLPI 0.71.3 - Multiple SQL Injections Vulnerabilities + Application : GLPI v 0.71.3 + App'z URI : http://glpi-project.org + Bug : Multiple Remote SQL Injections + Author : Zigma + Home : http://NullArea.Net Let's have a look on the Security System GLPI uses : --- \inc\includes.php --- // Security...

[Wintercore Research ] Fujitsu SystemcastWizard Lite PXEService Remote Buffer Overflow.

Wintercore Research:: Advisory W01-0109 html version: http://www.wintercore.com/advisories/advisoryW010109.html 1. Background "SystemcastWizard Lite is support software for the setup of the PRIMEQUEST system" 2. Non-technical description PXEService.exe is prone to a remote buffer overflow due to...

Secunia Research: HP SiteScope SNMP Trap Script Insertion Vulnerability

====================================================================== Secunia Research 20/10/2008 - HP SiteScope SNMP Trap Script Insertion - ====================================================================== Table of Contents Affected...

File Store PRO 3.2 Multiple Blind SQL Injection Vulnerabilities

No description provided by source. | File Store PRO 3.2 Blind SQL Injection | || Download from: http://upoint.info/cgi/demo/fs/filestore.zip - Need admin rights: /confirm.php: code ifisset$GET"folder" && $GET"folder"!="" $folder=$GET"folder"; else exit"Bad Request"; ifisset$GET"id" && $GET"id"!="...

[ECHO_ADV_98$2008] Pre Ads Portal <= 2.0 Sql Injection Vulnerability

ECHOADV98$2008 ----------------------------------------------------------------------------------------- ECHOADV98$2008 Pre Ads Portal = 2.0 Sql Injection Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran Addahroni Date : Jun...

Pre News Manager <= 1.0 (index.php id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== Pre News Manager = 1.0 index.php id SQL Injection Vulnerability ================================================================== \ /\ \ / | \ \ | / \ // / | \ | \ \ Y...

Pre ADS Portal 2.0 - SQL Injection

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV98$2008 ----------------------------------------------------------------------------------------- ECHOADV98$2008 Pre Ads Portal = 2.0 Sql Injection Vulnerability...

[ECHO_ADV_96$2008] HiveMaker Professional &lt;= 1.0.2 &#40;cid&#41; Sql Injection Vulnerability

ECHOADV96$2008 ----------------------------------------------------------------------------------------- ECHOADV96$2008 HiveMaker Professional = 1.0.2 cid Sql Injection Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran...

adv94-K-159-2008.txt

ECHOADV94$2008 ----------------------------------------------------------------------------------------- ECHOADV94$2008 Kmita Mail = 3.0 file Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran Addahroni...

adv92-K-159-2008.txt

ECHOADV92$2008 ----------------------------------------------------------------------------------------- ECHOADV92$2008 Anserv Auction XL viewfaqs.php cat Blind Sql Injection Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran...