PayPal Bug Bounty CN #60 - Information Disclosure DBMS

Document Title: =============== PayPal Bug Bounty CN 60 - Information Disclosure DBMS References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=845 Release Date: ============= 2013-03-19 Vulnerability Laboratory ID VL-ID: ==================================== 845...

[SECURITY] Fedora 17 Update: postgresql-9.1.8-1.fc17

PostgreSQL is an advanced Object-Relational database management system DBM S. The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine ...

Enterprise Resource Planning SQL Injection

Exploit Author: Shahram Darvishvand karajikt21 Exploit Title: erp Enterprise Resource plannin SQL Injection Vulnerability Vendor : sida university system Date: 4/May/2012 Google Dork: "نرم افزار جامع erp شامل قوانین کپی رایت می باشد و نوع نسخه بتا می باشد" Version: 1389/09/17 Tested on: ASHX...

SQL Injection framework: Seringa

Seringa – SQL Injection framework Seringa Romanian for seringe is an SQL injection framework featuring high customizability and a user-friendly interface. It is completely open source. Uses the .NET 4.0 framework and Windows Presentation FoundationWPF for the GUI. With regard to design it utilize...

ES Job Search Engine 3.0 - SQL Injection

ES Job Search Engine 3.0 - SQL Injection Title: ====== ES Job Search Engine v3.0 - SQL injection vulnerability Date: ===== 2012-08-09 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=675 VL-ID: ===== 675 Common Vulnerability Scoring System:...

Joomla Component com_fireboard - SQL Injection Vulnerability

Exploit for php platform in category web applications Joomla comfireboard - SQL Injection Vulnerability Details: ======== A SQL Injection vulnerability is detected in the comfireboard module of the joomla Content Management System. Remote attackers & low privileged user accounts can execute/injec...

Arasism (IR) CMS Shell Upload Vulnerability

Exploit for php platform in category web applications Arasism IR CMS - File Upload Vulnerability Details: ======== A File Upload vulnerability is detected in the famous iranisch Arasism.com Content Management Panel System. The vulnerability allows an attacker remote with low privileged user accou...

Flynax General Classifieds 4.0 XSS / SQL Injection

Title: ====== Flynax General Classifieds v4.0 CMS - Multiple Vulnerabilities Date: ===== 2012-07-13 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=659 VL-ID: ===== 659 Common Vulnerability Scoring System: ==================================== 8.3 Introduction:...

Joomla! Component com_fireboard - SQL Injection

Joomla! Component comfireboard - SQL Injection Title: ====== Joomla comfireboard - SQL Injection Vulnerability Date: ===== 2012-07-11 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=655 VL-ID: ===== 655 Common Vulnerability Scoring System:...

Flynax General Classifieds v4.0 CMS Multiple Vulnerabilities

Flynax General Classifieds v4.0 CMS - Multiple Vulnerabilities Details: ======== 1.1 A SQL Injection vulnerability is detected in the Flynax General Classifieds v4.0 Content Management System. Remote attackers without privileged user accounts can execute/inject own sql commands to compromise the...

Barracuda Appliances - Validation Filter Bypass Vulnerability

Document Title: =============== Barracuda Appliances - Validation Filter Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=661 Release Date: ============= 2012-07-15 Vulnerability Laboratory ID VL-ID: ==================================...

Joomla com_photo - SQL Injection Vulnerability

Document Title: =============== Joomla comphoto - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=654 Release Date: ============= 2012-07-09 Vulnerability Laboratory ID VL-ID: ==================================== 641 Common...

Joomla com_photo - SQL Injection Vulnerability

Document Title: =============== Joomla comphoto - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=654 Release Date: ============= 2012-07-09 Vulnerability Laboratory ID VL-ID: ==================================== 641 Common...

BeneficialBank Business v4.13.1 - Auth Bypass Vulnerability

Document Title: =============== BeneficialBank Business v4.13.1 - Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=654 Release Date: ============= 2012-07-08 Vulnerability Laboratory ID VL-ID: ====================================...

[SECURITY] Fedora 17 Update: postgresql-9.1.4-1.fc17

PostgreSQL is an advanced Object-Relational database management system DBM S. The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine ...

Enterprise Resource planning SQL Injection Vulnerability

Exploit for asp platform in category web applications Exploit Author: Shahram Darvishvand karajikt21 Exploit Title: erp Enterprise Resource plannin SQL Injection Vulnerability Vendor : sida university system Date: 15/May/2012 Google Dork: "نرم افزار جامع erp شامل قوانین کپی رایت می باشد و نوع نسخ...

MyClientBase 0.12 - Multiple Vulnerabilities

Title: ====== MyClientBase v0.12 - Multiple Web Vulnerabilities Date: ===== 2012-04-30 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=511 VL-ID: ===== 511 Introduction: ============= MyClientBase is a simple, intuitive, free and open source web based invoice management...

Opial CMS 2.0 XSS / SQL Injection / Shell Upload

Title: ====== Opial CMS v2.0 - Multiple Web Vulnerabilities Date: ===== 2012-04-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=522 VL-ID: ===== 522 Introduction: ============= Opial lets you create audio mp3/ram/rm/avi/mpg/wav/ai f or any other format audio/video...

Dolibarr CMS v3.2.0 Alpha - SQL Injection Vulnerabilities

Document Title: =============== Dolibarr CMS v3.2.0 Alpha - SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=427 Release Date: ============= 2012-02-09 Vulnerability Laboratory ID VL-ID: ==================================== 4...

FAA US Academy SQL Injection

Title: ====== FAA US Academy AFS - Auth Bypass Vulnerability Date: ===== 2012-01-28 References: =========== http://vulnerability-lab.com/getcontent.php?id=171 VL-ID: ===== 171 Introduction: ============= This is a FAA computer system. FAA computer systems are provided for the processing of Offici...