8053 matches found
Zurmo CRM - Persistent XSS Vulnerability
Exploit for php platform in category web applications Affected software: Zurmo CRM Zurmo is an Open Source Customer Relationship Management CRM application that is mobile, social, and gamified. We use a test-driven methodology for building every part of the application. Type of vulnerability: XSS...
IBM Storwize Authenticated Information Disclosure
The remote Storwize device is a model that is affected by an authenticated information disclosure vulnerability. In the event of a hardware fault, memory contents containing customer data may be written to a file that can be read by an authenticated user of the system who may not otherwise have...
Zurmo CRM - Persistent Cross-Site Scripting
Affected software: Zurmo CRM Zurmo is an Open Source Customer Relationship Management CRM application that is mobile, social, and gamified. We use a test-driven methodology for building every part of the application. Type of vulnerability: XSS Stored URL: zurmo.com Discovered by: Provensec Websit...
ManageEngine Support Center Plus 7916 - Directory Traversal
No description provided by source. ----------- Author: ----------- xistence xistenceat0x90.nl ------------------------- Affected products: ------------------------- ManageEngine Support Center Plus 7916 and lower ------------------------- Affected vendors: ------------------------- ManageEngine...
PicoPublisher 2.0 - Remote SQL Injection
No description provided by source. Exploit Title : PicoPublisher v2.0 Remote SQL injection Date : 29/03/2012 Author : ZeTH Contact : zeth/at/hacktheplan8/dot/com http://www.hacktheplan8.com Vendor : Pico Software Site : http://pico.no/ Version : 2.0 Price : $29,00 Dork : intext:Drives med...
DC Scripts DCShop Beta 1.0 02 File Disclosure Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/2889/exploit DCShop is a GCI-based ecommerce system from DCScripts. Under certain configurations, a beta version of this product can allow a remote user to request and obtain files containing confidential order data,...
DC Scripts DCShop Beta 1.0 02 File Disclosure Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/2889/exploit DCShop is a GCI-based ecommerce system from DCScripts. Under certain configurations, a beta version of this product can allow a remote user to request and obtain files containing confidential order data,...
HB Ecommerce SQL Injection Vulnerability
No description provided by source. ------------- HB ECOMMERCE SQL Injection Vulnerability --------------- ------------------------------------------------------------------------ ------------------------------------------------------------------------ + Exploit Title: HB ECOMMERCE SQL Injection...
Joomla com_foobla_suggestions (idea_id) 1.5.11 - SQL Injection Vulnerability
No description provided by source. ----------------------------------------------------------------------------------------- joomla component comfooblasuggestions ideaid SQL Injection Vulnerability ----------------------------------------------------------------------------------------- Author :...
OneWorldStore IDOrder Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13361/info OneWorldStore is prone to an information disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. Exploitation of this vulnerability would expose the...
SunShop <= 4.1.4 (id) Remote SQL Injection Vulnerability
No description provided by source. GulfTech Security Research August 18, 2008 Vendor : Turnkey Web Tools, Inc URL : http://www.turnkeywebtools.com Version : SunShop = 4.1.4 Risk : SQL Injection Description: SunShop shopping cart is a full featured ecommerce solution written in php that allows for...
ManageEngine ServiceDesk 8.0 - Multiple Vulnerabilities
No description provided by source. Title: ====== ManageEngine ServiceDesk 8.0 - Multiple Vulnerabilities Date: ===== 2012-11-15 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=689 VL-ID: ===== 689 Common Vulnerability Scoring System: ====================================...
phpmoneybooks 1.03 - Stored XSS
No description provided by source. Exploit Title: phpmoneybooks 1.03 Stored XSS Date: Jun 28, 2012 Exploit Author: chap0 - chap0.blogspot.com - @chap0 Vendor Homepage: http://phpmoneybooks.com/ Software Link: http://sourceforge.net/projects/phpmoneybooks/files/phpMoneyBooks103.zip/download Versio...
SAFE TEAM Regulus 2.2 Custchoice.PHP Update Your Password Action Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11133/info Regulus is reported prone to an information disclosure vulnerability. It is reported that a specified user/customer password hash is contained in a hidden tag of the 'Update Your Password' action page. An...
KTP Computer Customer Database CMS 1.0 - Local File Inclusion Vulnerability
No description provided by source. !/usr/bin/perl -w ====================================== KTPCCD Local File Inclusion Exploit ====================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...
Green Desktiny - Customer Support Helpdesk 2.3.1 - SQL Injection Vulnerability
No description provided by source. Green Desktiny - Customer Support Helpdesk SQL injection vulnerability - id Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : Desember 25, 2009 Software Information + Vendor : http://www.greendesktiny.com/ + Download : - +...
Absolute News Manager .NET 5.1 pages/default.aspx template Variable Remote File Access
No description provided by source. source: http://www.securityfocus.com/bid/26692/info Absolute News Manager .NET is prone to multiple remote vulnerabilities, including multiple cross-site scripting, SQL-injection, and information-disclosure issues. Attackers can exploit these issues to steal...
cPanel 5-9 Killacct Script Customer Account DNS Information Deletion Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10468/info cPanel is prone to a vulnerability that can allow a remote authenticated administrator to delete customer account DNS information for customers that are not administered by that administrator. This attack can...
OSI Codes PHP Live! Support 3.1 - Remote File Inclusion Vulnerability
No description provided by source. ? Homepage : http://www.indonesiancoder.com ? Location : INDONESIA ? Vendor : http://www.phplivesupport.com/ ? Describe : PHP Live! Support v3.1 c by OSI Codes Inc. Chat with your website visitors with PHP Live! Provide Live Support on your Website Increase your...
Midicart ASP Remote Customer Information Retrieval Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5438/info Midicart ASP is a commercially available e-commerce solution distributed by Coxco Support. It is available for the Microsoft Windows operating system. The default installation of Midicart ASP does not place...