3420 matches found
BusinessSpace <= 1.2 (id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================ BusinessSpace = 1.2 id Remote SQL Injection Vulnerability ============================================================...
Adobe Flash Player Multiple Vulnerabilities - Nov08 (Linux)
This host has Adobe Flash Player installed and is prone to multiple security bypass vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeflashplayermultvulnnov08lin.nasl 6539 2017-07-05 12:02:14Z cfischer $ Adobe Flash Player Multiple Vulnerabilities - Nov08 Linux Authors: Chandan S Copyright:...
Gentoo Security Advisory GLSA 200502-33 (mediawiki)
The remote host is missing updates announced in advisory GLSA 200502-33. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200502-33 (mediawiki)
The remote host is missing updates announced in advisory GLSA 200502-33. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Privilege escalation: User is able to add a page to his watchlist without having the permission
Szenario: create user1 and user2 user1 has access to space1 user2 has access to space2 user1 can add a page to his watchlist by manipulating using a proxy like webscarab the postrequest to http://localhost:8080/dwr/exec/PageNotification.startWatching.dwr and replacing the id contained in paramete...
XSS and Data Manipulation attacks found in CMS PHPCart.
. . | / | | | / / | |/ // / / / |/ / // | / | | / / / // / |/| || /| / / / / / / / / | | / / / | // est.2007 / / forum.darkc0de.com -d3hydr8 - sinner01 - baltazar - P47r1ck - C1c4Tr1Z - beenu -rsauron - letsgorun - K1u - DON - OutLawz - MAGE -JeTFyrE -r45c4l -Bond Author: h4x0r Home :...
phpcart-xss.txt
. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com -d3hydr8 - sinner01 - baltazar - P47r1ck - C1c4Tr1Z - beenu -rsauron - letsgorun - K1u - DON - OutLawz - MAGE -JeTFyrE -r45c4l -Bond...
Nagasaki Electronic Prefectural Office System vulnerable to bypass authentication
Overview Nagasaki Prefectural Government has developed an open source electronic prefectural office system. Some of the system contain a vulnerability to bypass authentication. Impact A remote attacker could bypass the user authentication process. As a result, an attacker could view or falsify...
Symantec Altiris Deployment Solution多个安全漏洞
BUGTRAQ ID: 29198,29199,29194,29218,29196,29197 Symantec Altiris Deployment Solution是自动化的操作系统部署解决方案，用于从统一的位置部署和管理服务器、桌面和笔记本等。 Symantec Altiris Deployment Solution中存在多个安全漏洞，可能允许恶意的本地或远程用户获得权限提升、操控某些数据、泄露敏感信息、执行SQL注入攻击或入侵有漏洞的系统。 1 默认监听于TCP...
itcms-exec.txt
=========================================================================================================================== | | / | | | | | | | / / / || \ '| / | ' / - | / \ V V / - ' \ / - || | \/,|/| /| |||||///|./ |,|...
Microsoft Security Bulletin MS08-021 – Critical Vulnerabilities in GDI Could Allow Remote Code Execution (948590)
Microsoft Security Bulletin MS08-021 – Critical Vulnerabilities in GDI Could Allow Remote Code Execution 948590 Published: April 8, 2008 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in GDI. Exploitation of either of these...
Cacti 0.8.7 - 'graph_view.php?graph_list' SQL Injection
source: https://www.securityfocus.com/bid/27749/info Cacti is prone to multiple unspecified input-validation vulnerabilities, including: - Multiple cross-site scripting vulnerabilities - Multiple SQL-injection vulnerabilities - An HTTP response-splitting vulnerability. Attackers may exploit these...
[SA27699] Layton HelpBox Multiple Vulnerabilities
---------------------------------------------------------------------- A new version 0.9.0.0 - Release Candidate 1 of the free Secunia PSI has been released. The new version includes many new and advanced features, which makes it even easier to stay patched. Download and test it today:...
Mozilla Firefox, SeaMonkey, XULRunner: Multiple vulnerabilities
Background Mozilla Firefox is a cross-platform web browser from Mozilla. SeaMonkey is a free, cross-platform Internet suite. Description Multiple vulnerabilities have been reported in Mozilla Firefox and SeaMonkey. Various errors in the browser engine and the Javascript engine can be exploited to...
CVE-2002-2303
3D3.Com ShopFactory 5.8 is affected by a vulnerability where client-side encryption and decryption of sensitive price data enables remote attackers to modify shopping cart prices by using JavaScript to decrypt the cookie containing the data. This indicates a weakness in where price data is stored...
Scott Manktelow Design Stride 1.0 - Content Management System main.php SQL Injection
Scott Manktelow Design Stride 1.0 - Content Management System main.php SQL Injection source: https://www.securityfocus.com/bid/26041/info Scott Manktelow Design Stride 1.0 Content Management System is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied...
Oracle Security: Insert / Update / Delete Data via Views
Insert / Update / Delete Data via Views This advisory http://www.red-database-security.com/advisory/oracleviewvulnerability.html Name Insert / Update / Delete Data via Views DB17 Systems Oracle 8i - 10g Rel. 2 Severity High Risk Category Bypass Access Control Author Alexander Kornbrust ak at...
POWER PHLOGGER v.2.2.5 (username) SQL Injection
POWER PHLOGGER v.2.2.5 username SQL Injection Author: Attila Gerendi Darkz Date: December 20, 2005 Package: POWER PHLOGGER http://www.phpee.com/ Versions Affected: v.2.2.5 Other versions may also be affected Severity: SQL Injection Description: Input passed to the "username" parameter in...
fusetalkpoc-sql.txt
Hello everyone, After trying to report bugs to FuseTalk, and seeing them providing patches to customers dropping new fixed .cfm files in a private place reserved to customers without giving proper credits and without reporting them publicly we were following the Full Disclosure Policy v2.0, we...
fusetalk SQL (autherror.cfm)
Hello everyone, After trying to report bugs to FuseTalk, and seeing them providing patches to customers dropping new fixed .cfm files in a private place reserved to customers without giving proper credits and without reporting them publicly we were following the Full Disclosure Policy v2.0, we...