FreeBSD : redmine -- multiple vulnerabilities (fcc39d22-5777-11df-bf33-001a92771ec2)

The Redmine release announcement reports that several cross side scripting vulnerabilities and a potential data disclosure vulnerability have been fixed in the latest release. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

DynamiXgate Affiliate Store Builder Cross Site Scripting

Vulnerability ID: HTB22362 Reference: http://www.htbridge.ch/advisory/xssindynamixgate.html Product: DynamiXgate Affiliate Store Builder Vendor: DynamiXgate Team Vulnerable Version: Current version at 2010, April Vendor Notification: 27 April 2010 Vulnerability Type: XSS Cross Site Scripting...

XSS vulnerability in EasyPublish CMS

Vulnerability ID: HTB22356 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityineasypublishcms.html Product: EasyPublish CMS Vendor: Escio AS Vulnerable Version: Current at 23.04.2010 and Probably Prior Versions Vendor Notification: 23 April 2010 Vulnerability Type: XSS Cross Site Scripti...

eliteCMS 1.01 Cross Site Request Forgery

Vulnerability ID: HTB22355 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinelitecms.html Product: eliteCMS Vendor: Elite Graphix Vulnerable Version: 1.01 and Probably Prior Versions Vendor Notification: 19 April 2010 Vulnerability Type: CSRF Cross-Site Request Forgery Status: Not Fixed, Vend...

Acuity CMS 2.6.2 Cross Site Scripting

Vulnerability ID: HTB22352 Reference: http://www.htbridge.ch/advisory/xssinacuitycms.html Product: Acuity CMS asp version Vendor: The Collective Vulnerable Version: 2.6.2 ASP and Probably Prior Versions Vendor Notification: 19 April 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not...

XSRF (CSRF) in eliteCMS

Vulnerability ID: HTB22355 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinelitecms.html Product: eliteCMS Vendor: Elite Graphix Vulnerable Version: 1.01 and Probably Prior Versions Vendor Notification: 19 April 2010 Vulnerability Type: CSRF Cross-Site Request Forgery Status: Not Fixed, Vend...

redmine -- multiple vulnerabilities

The Redmine release announcement reports that several cross side scripting vulnerabilities and a potential data disclosure vulnerability have been fixed in the latest release...

PT-2010-2540 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: A spoofing issue exists due to the way Windows checks the inner packet's IPv6 source address in a tunneled ISATAP packet. This could allow an attacker to impersonate an addres...

Important: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes a security issue is now available for Red Hat Enterprise Linux 3 and 4 Extras. This update has been rated as having important security impact by the Red Hat Security Response Team. The flash-plugin package contains a Mozilla Firefox compatible Adob...

Cold di novel program of tasteless vulnerability-vulnerability warning-the black bar safety net

Just on chinaz visiting when found this system download the amount of near-3w, back to read the next code, found tasteless vulnerability A, The following analysis: 看 到 后台 登陆 页面 /admin/login.php ? include’data.php’; if$POST’password’==$password & $POST’adminname’==$adminname setcookie"xCookie",...

Joomla! Component com_schools - SQL Injection

Joomla Component comschools SQL injection author:Mr.tro0oqy email:[email protected] exp: http://server/path/index.php?option=comschools&Itemid=89&schoolid=-53+union+select+1,groupconcatusername,0x3a,password,3,4,5,6,7,8,9,10,11+from+josusers-- demo :...

Seamonkey Multiple Vulnerabilities Dec-09 (Linux)

The host is installed with Seamonkey browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodseamonkeymultvulndec09lin.nasl 5122 2017-01-27 12:16:00Z teissa $ Seamonkey Multiple Vulnerabilities Dec-09 Linux Authors: Sharath S Copyright: Copyright c 2009 SecPod,...

CGI Generic Local File Inclusion

The remote web server hosts CGI scripts that fail to adequately sanitize request strings. By leveraging this issue, an attacker may be able to include a local file and disclose its content. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

Oracle Database Server REPCAT_RPC.VALIDATE_REMOTE_RC SQL Injection (CVE-2009-1021)

Oracle Database Server is an enterprise-level relational database application suite. An SQL injection vulnerability has been reported in Oracle Database server. Remote authenticated attackers having Create Session privileges can exploit this vulnerability to inject and execute malicious SQL...

CVE-2009-2976

Cisco Aironet Lightweight Access Point AP devices send the contents of certain multicast data frames in cleartext, which allows remote attackers to discover Wireless LAN Controller MAC addresses and IP addresses, and AP configuration details, by sniffing the wireless network...

JibberBook Disclosure / Injection

» Script: JibberBook » Language: PHP » Website: http://jibberbook.com » Founder: Onur YILMAZ aka DJR » Site: www.onuryilmaz.info === data source of comments disclosure .xml file === » JibberBook/datalayer/xml/comments.xml === output === 127.0.0.1 Mozilla/5.0 Windows; U; Windows NT 6.0; en-US...

Tenrok 1.1.0 (UDD/RCE) Multiple Remote Vulnerabilities

No description provided by source. + Tenrok 1.1.0 UDD/RCE Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Homepage : http://tenrok.com/ + Users Data Disclosure - PoC http://127.0.0.1/userpwd.txt + Remote Command Execution - Must be logged i...

Tenrok 1.1.0 (UDD/RCE) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ====================================================== Tenrok 1.1.0 UDD/RCE Multiple Remote Vulnerabilities ====================================================== + Tenrok 1.1.0 UDD/RCE Multiple Remote Vulnerabilities + Discovered By SirGo...

tenrok 1.1.0 - File Disclosure Remote Code Execution

tenrok 1.1.0 - File Disclosure Remote Code Execution + Tenrok 1.1.0 UDD/RCE Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Homepage : http://tenrok.com/ + Users Data Disclosure - PoC http://127.0.0.1/userpwd.txt + Remote Command Execution ...

tenrok 1.1.0 - File Disclosure / Remote Code Execution

Tenrok 1.1.0 UDD/RCE Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Homepage : http://tenrok.com/ + Users Data Disclosure - PoC http://127.0.0.1/userpwd.txt + Remote Command Execution - Must be logged in. - Go to http://127.0.0.1/post.php...