School Management System Pro 6.0.0 Backup Disclosure

======================================================================================== | Title : School Management System Pro 6.0.0 Backup Dump Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Web Site :...

Oracle Closes 47 Holes in DB, Solaris, Java Patch

Oracle has dealt a sweeping blow to vulnerabilities in its quarterly Critical Patch Update CPU. The vendor closes a total of 47 holes in many of its products, among them the database, the business suites, Sun Solaris and the Java System Directory Server. Read the full article. The H Security...

School Management System Pro 6.0.0 - Backup Dump

School Management System Pro 6.0.0 - Backup Dump ======================================================================================== | Title : School Management System Pro 6.0.0 Backup Dump Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | We...

Mihalism Multi Host 4.0.0 - Arbitrary File Upload

Mihalism Multi Host 4.0.0 - Arbitrary File Upload ======================================================================================== | Title : Mihalism Multi Host V 4.0.0 Upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site :...

Book Library v1.4.162 Local Dos .bkd File

Exploit for windows platform in category dos / poc ========================================= Book Library v1.4.162 Local Dos .bkd File ========================================= Exploit Title: Book Library Local Dos .bkd file Date: April 14, 2010 Software Link: http://wensoftware.com/ Version:...

MovieLibrary v1.4.401 Local Dos .dmv File

Exploit for windows platform in category dos / poc ========================================= MovieLibrary v1.4.401 Local Dos .dmv File ========================================= Exploit Title: MovieLibrary Local Dos .dmv file Date: April 14, 2010 Software Link: http://wensoftware.com/ Version:...

Mp3 Online Id Tag Editor - Remote File Inclusion

Mp3 Online Id Tag Editor - Remote File Inclusion ======================================================================================== | Title : Mp3 Online Id Tag Editor RFI Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | | Web Site :...

Mp3 Online Id Tag Editor - Remote File Inclusion

======================================================================================== | Title : Mp3 Online Id Tag Editor RFI Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | | Web Site : http://www.p30vel.ir/ | Script : Powered by OMS4ALL v1.10 -...

Multi-Mirror - Arbitrary File Upload

======================================================================================== | Title : Multi-Mirror Remote Upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site : http://www.p30vel.ir/ | Tested on: windows SP2 Français V.Pnx2...

Design/Logic Flaw

Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2010-0851

Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2010-0852

CVE-2010-0852 affects Oracle Database XML DB component across versions 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3. The vulnerability is described as unspecified, allowing remote authenticated users to affect confidentiality and integrity via unknown vectors. The connected NVD entry provides a CVS...

CVE-2010-0851

CVE-2010-0851 affects the Oracle Database XML DB component. The vulnerability exists in Oracle Database versions 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3, caused by an unspecified issue that allows remote authenticated users to affect confidentiality via unknown vectors. The connected documents...

CVE-2010-0852

Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2010-0851

Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality via unknown vectors...

nss_db: Information leak due the DB_CONFIG file read from current working directory

The Free Software Foundation FSF Berkeley DB NSS module aka libnss-db 2.2.3pre1 reads the DBCONFIG file in the current working directory, which allows local users to obtain sensitive information via a symlink attack involving a setgid or setuid application that uses this module...

Games Script - Galore Backup Dump

Games Script - Galore Backup Dump ======================================================================================== | Title : Games Script Galore Backup Dump Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Script : Copyright © 2008...

Joomla! Component QPersonel 1.0.2 - SQL Injection

Joomla! Component QPersonel 1.0.2 - SQL Injection Exploit Title: Joomla Component QPersonel SQL Injection Vulnerability Date: 13.04.2010 Author: Valentin Category: webapps/0day Version: XSS security fix from 31.12.2009, 1.02 and before Tested on: Debian Lenny, MySQL 5 CVE : Code :...

Joomla Multi-Venue Restaurant Menu Manager SQL Injection

Exploit Title: Joomla Component Multi-Venue Restaurant Menu Manager SQL Injection Vulnerability Date: 11.04.2010 Author: Valentin Category: webapps/0day Version: Tested on: CVE : Code : :: General information :: Joomla Component Multi-Venue Restaurant Menu Manager SQL Injection Vulnerability :: b...

Games Script - 'Galore' Backup Dump

======================================================================================== | Title : Games Script Galore Backup Dump Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Script : Copyright © 2008 GamesGalore.tld - iAG NULLED | Tested on:...