ImgPals Photo Host 1.0 - Admin Account Disactivation

-=--------------------ADVISORY-------------------=- ImgPals Photo Host Version 1.0 STABLE Author: Corrado Liotta Aka CorryL [email protected] -=-----------------------------------------------=- -=+ Application: ImgPals Photo Host -=+ Version: 1.0 STABLE -=+ Vendor's URL:...

ImgPals Photo Host 1.0 Stable Admin Account Deactivation

-=--------------------ADVISORY-------------------=- ImgPals Photo Host Version 1.0 STABLE Author: Corrado Liotta Aka CorryL [email protected] -=-----------------------------------------------=- -=+ Application: ImgPals Photo Host -=+ Version: 1.0 STABLE -=+ Vendor's URL:...

Code injection

Advantech/BroadWin WebAccess before 7.0 allows remote attackers to 1 enable date and time syncing or 2 disable date and time syncing via a crafted URL...

swDesk Multiple Input Validation Vulnerabilities

swDesk is prone to the following vulnerabilities: 1. An arbitrary file-upload vulnerability. 2. Multiple cross-site scripting vulnerabilities. 3. Multiple PHP code-injection vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced...

Zen-Cart 1.3.9h Cross Site Request Forgery

Advisory Information Title: Zen-Cart Admin CSRF/XSRF - Delete / Disable Products Date published: 2012-02-10 01:59:45 AM upSploit Ref: UPS-2011-0018 CVE REF: CVE-2011-4403 Advisory Summary An attacker can force an administrator to delete or disable products from within his store. Vendor Zen-Cart...

Joomla Bulkenquery Component Local File Inclusion Vulnerability

This host is running Joomla Bulkenquery component and is prone to local file inclusion vulnerability. OpenVAS Vulnerability Test $Id: gbjoomlacombulkenquerylfivuln.nasl 7577 2017-10-26 10:41:56Z cfischer $ Joomla Bulkenquery Component Local File Inclusion Vulnerability Authors: Madhuri D Copyrigh...

PT-2012-2039 · Whmcs · Whmcs

Name of the Vulnerable Software and Affected Versions: WHMCS versions 4.0.x through 5.0.x Description: The issue is related to improper handling of characters in the subject field of a crafted ticket, which can trigger arbitrary code execution in the Smarty templating system. This allows remote...

http TRACE cross-site attacks a vulnerability test with the defense fix-bug warning-the black bar safety net

From the bad wolf's blog Web Presence: http TRACE cross-site attack vulnerabilities. Scan results: http TRACE cross-site attacks His webserver supports the TRACE and/or TRACK methods. TRACE and TRACK is used to debugweb serverthe connection to the HTTP way. Support the way of a presence Server...

PT-2012-2229 · Microsoft · Windows Xp +5

Name of the Vulnerable Software and Affected Versions: Windows Media Player versions in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 Description: A remote code execution issue exists in Windows Media Player, allowing attackers to execute arbitrary code via a...

Distributed Network Protocol v3 'Stop Application' Alert (SCADA) (deprecated)

Binary data 6250.prm...

Joomla Simple File Upload Module Remote Code Execution Vulnerability

This host is running Joomla Simple File Upload Module and is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbjoomlasimplefileuploadcodeexecvuln.nasl 5841 2017-04-03 12:46:41Z cfi $ Joomla Simple File Upload Module Remote Code Execution Vulnerability Authors: Madhur...

Distributed Network Protocol v3 'Disable Unsolicited' Alert (SCADA) (deprecated)

Binary data 6247.prm...

Windows Media Player Denial Of Service Vulnerability

This host is installed with Windows Media Player and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodwinmediaplayerdosvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ Windows Media Player Denial Of Service Vulnerability Authors: Madhuri D Copyright: Copyright c 2011...

PT-2011-5166 · Xt:Commerce · Xt:Commerce

Name of the Vulnerable Software and Affected Versions: xt:Commerce versions 3.0.4 SP2.1 and earlier Description: The issue allows remote attackers to hijack the authentication of admins for specific requests. This can be achieved through cross-site request forgery CSRF vulnerabilities. The...

WebSVN Multiple XSS Vulnerabilities (Dec 2011)

WebSVN is prone to multiple cross-site scripting XSS vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are...

Design/Logic Flaw

The Server Administration Panel in Parallels Plesk Panel 10.2.0build1011110331.18 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving...

VxWorks Debugging Service Security Bypass Vulnerability

VxWorks is prone to a remote security bypass vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Joomla! QContacts Component 'filter_order' Parameter SQL Injection Vulnerability

This host is running Joomla! QContacts component and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: secpodjoomlaqcontactsfilterordersqlinjvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ Joomla! QContacts Component 'filterorder' Parameter SQL Injection Vulnerability Authors:...

BroadWin WebAccess SCADA Client ActiveX Format String

Added: 12/12/2011 OSVDB: 74897 Background BroadWin WebAccess is a web-based SCADA reporting and control solution. Problem BroadWin WebAccess installs an ActiveX Control in the user's browser. The OcxSpool function of this control accepts a parameter that is evaluated using a format string. A form...

Mozilla Firefox Cache Objects History Enumeration Weakness Vulnerability (MAC OS X)

The host is installed with Mozilla Firefox and is prone to cache objects history enumeration weakness vulnerability. OpenVAS Vulnerability Test $Id: gbmozillafirefoxcacheobjenumweaknessvulnmacosx.nasl 7006 2017-08-25 11:51:20Z teissa $ Mozilla Firefox Cache Objects History Enumeration Weakness...