Secunia Research: Joomla BookLibrary Component Four SQL Injection Vulnerabilities

====================================================================== Secunia Research 30/06/2010 - Joomla BookLibrary Component Four SQL Injection Vulnerabilities - ====================================================================== Table of Contents Affected...

Secunia Research: TaskFreak "password" SQL Injection Vulnerability

====================================================================== Secunia Research 29/06/2010 - TaskFreak "password" SQL Injection Vulnerability - ====================================================================== Table of Contents Affected...

PHPWCMS Cross-Site Request Forgery Vulnerability

No description provided by source. ?php / Exploit Title: PHPWCMS Cross-Site Request Forgery Vulnerability Date: 06/16/2010 Author: Jeremiah Talamantes Software Link: http://phpwcms.googlecode.com/files/phpwcmsr398.zip Version: 1.4.5 r398 Tested on: WinXP SP2 EN on WAMP 2.0 CVE: N/A Jeremiah...

PHPWCMS 1.4.5 r398 Cross Site Request Forgery

PHPWCMS 1.4.5 r389 Cross Site Request Forgery function myfunc var frm = document.getElementById"csrf"; frm.submit; window.onload = myfunc; input type="hidden"...

[ MDVSA-2010:101 ] mysql

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:101 http://www.mandriva.com/security/ Package : mysql Date : May 19, 2010 Affected: 2008.0, 2009.0, 2009.1, 2010.0, Corporate 4.0, Enterprise Server 5.0 Problem Description: A vulnerability has been found an...

OCS Inventory NG Server <= 1.3.1 (login) Remote Authentication Bypass

Exploit for php platform in category web applications ===================================================================== OCS Inventory NG Server OCS Inventory NG function $id return document.getElementByIdid; function $$id return $id.options$id.options.selectedIndex.value; function bypass...

OCS Inventory NG Server 1.3.1 - 'LOGIN' Remote Authentication Bypass

OCS Inventory NG = 1.3.1 login Remote Authentication Bypass function $id return document.getElementByIdid; function $$id return $id.options$id.options.selectedIndex.value; function bypass $'log'.action = $'ocsreports'.value + $$'meth' + '?lang=' + $$'lang'; if $$'type' == 0 $'login'.value = "'...

Ziepod+ 1.0 Cross Application Scripting

Exploit for windows platform in category remote exploits ======================================= Ziepod+ 1.0 Cross Application Scripting ======================================= !/usr/bin/python import thread import socket """ |------------------------------------------------------------------| | ...

Multiple Vulnerabilities in EASY Enterprise DMS

No description provided by source. ------------------------------------------------ Multiple Vulnerabilities in EASY Enterprise DMS - Stored XSS - XSS - Content Injection / Phishing through Frames - Unauthorized access to files - Unauthorized manipulation of data Date: 25.03.2010...

Multiple Vulnerabilities in EASY Enterprise DMS

------------------------------------------------ Multiple Vulnerabilities in EASY Enterprise DMS - Stored XSS - XSS - Content Injection / Phishing through Frames - Unauthorized access to files - Unauthorized manipulation of data Date: 25.03.2010 ------------------------------------------------ EA...

Secunia Research: Pulse CMS Arbitrary File Writing Vulnerability

====================================================================== Secunia Research 24/03/2010 - Pulse CMS Arbitrary File Writing Vulnerability - ====================================================================== Table of Contents Affected...

Employee TimeClock Software 0.99 - SQL Injection

source: http://www.securityfocus.com/archive/1/509995 ====================================================================== Secunia Research 10/03/2010 - Employee Timeclock Software SQL Injection Vulnerabilities - ====================================================================== Table of...

Cisco Releases Security Advisory for Unified MeetingPlace

Cisco has released a security advisory to address multiple vulnerabilities in Unified MeetingPlace. These vulnerabilities may allow a remote, unauthenticated attacker to obtain sensitive information, manipulate configuration data, create unauthorized accounts, operate with elevated privileges or...

Design/Logic Flaw

AOLserver 4.5.1 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator...

REWTERZ-20100101 - n.player Local Heap Overflow Vulnerability

======================================================== Rewterz 05/01/2010 - n.player Local Heap Overflow Vulnerability - 1 Affected Software n.player 1.12.07 NOTE: Other versions may also be affected. ======================================================== 2 Severity Rating: High Impact: Denia...

Secunia Research: AproxEngine Multiple Vulnerabilities

====================================================================== Secunia Research 29/12/2009 - AproxEngine Multiple Vulnerabilities - ====================================================================== Table of Contents Affected Software......................................................

Vulnerabilities in Athree CMS

====================================================================== Secunia Research 29/12/2009 - AproxEngine Multiple Vulnerabilities - ====================================================================== Table of Contents Affected Software......................................................

Firefox Multiple Vulnerabilities Dec-09 (Linux)

The host is installed with Firefox Browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodfirefoxmultvulndec09lin02.nasl 5055 2017-01-20 14:08:39Z teissa $ Firefox Multiple Vulnerabilities Dec-09 Linux Authors: Sharath S Copyright: Copyright c 2009 SecPod,...

Mozilla Firefox Multiple Vulnerabilities (Dec 2009) - Linux

Mozilla Firefox is prone to multiple vulnerabilities. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Firefox Multiple Vulnerabilities Dec-09 (Windows)

The host is installed with Firefox Browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodfirefoxmultvulndec09win01.nasl 5055 2017-01-20 14:08:39Z teissa $ Firefox Multiple Vulnerabilities Dec-09 Windows Authors: Sharath S Copyright: Copyright c 2009 SecPod,...