5162 matches found
Asterisk Trixbox CE Cross Site Scripting
The asterisk phonebook module found in trixbox CE is vulnerable to an xss which can be triggered by importing a contact from a csv file like this: "/alertdocument.cookie;";123123123;12313 FATAL ERROR url is $ip/admin/config.php?type=tool&display=phonebook So an import of a csv file which may...
Joomla TimeTrack Component v1.2.4 Multiple SQL Injection Vulnerabilities
Exploit for php platform in category web applications ======================================================================== Joomla TimeTrack Component v1.2.4 Multiple SQL Injection Vulnerabilities ======================================================================== Name TimeTrack Vendor...
Debian DSA-2092-1 : lxr-cvs - missing input sanitizing
Dan Rosenberg discovered that in lxr-cvs, a code-indexing tool with a web frontend, not enough sanitation of user input is performed; an attacker can take advantage of this and pass script code in order to perform cross-site scripting attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Science Fair In A Box SQL Injection / Cross Site Scripting
Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Science Fair In A Box SQLi & XSS Vulnerability Version:2.0.6 Price:Free Vendor url:http://www.sfiab.ca/ Published: 2010-06-09 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue®, S1ayer,d3c0d3r and to all ICW members Science Fair In...
Joomla Component DW Graph Local File Inclusion
No description provided by source. --------------------------------------------------------------------------------- Joomla Component DW Graph Local File Inclusion --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group : LatinHackTeam Email &...
Joomla! Component DW Graph - Local File Inclusion
--------------------------------------------------------------------------------- Joomla Component DW Graph Local File Inclusion --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group : LatinHackTeam Email & msn : [email protected] Date : ...
Joomla Component com_dwgraphs Local File Inclusion
Exploit for php platform in category web applications ================================================== Joomla Component comdwgraphs Local File Inclusion ================================================== Author : Chip D3 Bi0s Group : LatinHackTeam Email & msn : email protected Date : 31 March...
Joomla! Component DW Graph - Local File Inclusion
Joomla! Component DW Graph - Local File Inclusion --------------------------------------------------------------------------------- Joomla Component DW Graph Local File Inclusion --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group :...
OpenOffice NULL pointer dereference
NULL pointer dereference on CSV and SLK files parsing...
Hellcode Research: OpenOffice File Parsing Null Pointer Vulnerability
Release Date: 2010-01-14 Product: OpenOffice Tested Vulnerable Versions: 3.1.1 and 3.1.0 Vulnerability: Null Pointer Description: Hellcode Research discovered a null pointer vulnerability in Openoffice for Windows. Opening a malformed ".csv" file with Openoffice, causes a crash on "soffice.bin"...
OpenOffice 3.1 - .csv Remote Denial of Service
OpenOffice 3.1 - .csv Remote Denial of Service source: https://www.securityfocus.com/bid/37807/info OpenOffice is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue by enticing an unsuspecting victim to open a specially crafted '.csv' file. Successful exploits wil...
Fedora 10 : phpMyAdmin-3.2.0.1-1.fc10 (2009-7340)
The first security release for phpMyAdmin 3.2.0: - security XSS: Insufficient output sanitizing in bookmarks This version contains a number of small new features and some bug fixes: - core better support for vendor customisation based on what Debian needs - rfe warn when session.gcmaxlifetime is...
Fedora 9 : phpMyAdmin-3.2.0.1-1.fc9 (2009-7337)
The first security release for phpMyAdmin 3.2.0: - security XSS: Insufficient output sanitizing in bookmarks This version contains a number of small new features and some bug fixes: - core better support for vendor customisation based on what Debian needs - rfe warn when session.gcmaxlifetime is...
Ability to grant Import/Export privileges to a group or a user
In our JIRA environment, we have several projects where each of the project admins uploads tasks from a CSV file into their respective project. Inorder for these project admins have the upload permissions, they need to be part of the JIRA System Administration group. This is unacceptable and is a...
Fedora 8 : phpMyAdmin-2.11.8.1-1.fc8 (2008-6810)
This update solves PMASA-2008-6 phpMyAdmin security announcement from 2008-07-28: Cross-site Framing; XSS in setup.php; see http://www.phpmyadmin.net/homepage/security.php?issue=PMASA-2008-6 - interface Table list pagination in navi - profiling Profiling causes query to be executed again really...
[SECURITY] Fedora 9 Update: sipp-3.1-2.fc9
SIPp is a free Open Source test tool / traffic generator for the SIP protoc ol. It includes a few basic SipStone user agent scenarios UAC and UAS and establishes and releases multiple calls with the INVITE and BYE methods. It can also reads custom XML scenario files describing from very simple to...
FTP Server Zipped .csv File Detection
Binary data 4040.prm...
FTP Server Zipped .csv File Uploaded
Binary data 4056.prm...