24 matches found
Douran Portal Cross Site Scripting
Exploit Title : DOURAN Portal XSS Vulnerabilities Author : E1.Coders Contact : E1.Coders at Mail dot RU Portal Link : www.DOURAN.com Tested ON : All ver 0f Douran Portal Security Risk : High Description : All target's iranian GOVerment websites DorK : "DOURAN Portal" OR :...
douran portal <= 3.9.0.23 Multiple Vulnerabilities
No description provided by source. Abysssec Inc Public Advisory Description : these vulnerabilites found one year ago and new version of this portal is not affect whith these vulnerabilites anymore but still lots of web site uses of old version and are vulnerable and also new version is not fully...
Douran 3.9.7.8 File Download/Source Code Disclosure Vulnerability
No description provided by source. Title: Douran Portal File Download/Source Code Disclosure Vulnerability Date of Publishing: 16 March 2010 Application Name: Douran Portal Version: 3.9.7.8 Impact: Medium Vendor: www.douran.com Link: http://douran.com/HomePage.aspx?TabID=4862 Vendor Responses: Th...
Douran Portal 3.9.8.25 SQL Injection
The last version of this portal which used by own company, have SQL Injection bug: http://www.douran.com/homepage.aspx?site=DouranPortal&tabid=1SQLi&lang=fa-IR Ver: DOURAN Portal V3.9.8.25 Exploit Title: Douran Portal SQLi Vulnerability Date: 08/31/2012 Author: Persia Security Group - Prince &...
CVE-2011-1569
download.aspx in Douran Portal 3.9.7.8 allows remote attackers to obtain source code of arbitrary files under the web root via 1 a trailing ".", 2 a trailing space, or 3 mixed case in the FileNameAttach parameter...
Code injection
download.aspx in Douran Portal 3.9.7.8 allows remote attackers to obtain source code of arbitrary files under the web root via 1 a trailing ".", 2 a trailing space, or 3 mixed case in the FileNameAttach parameter...
CVE-2011-1569
CVE-2011-1569 affects Douran Portal up to version 3.9.7.8; the vulnerability is in the download.aspx flow where an attacker can obtain source code of arbitrary files under the web root by supplying a filename with a trailing dot, trailing space, or mixed case in the FileNameAttach parameter. Root...
CVE-2011-1569
download.aspx in Douran Portal 3.9.7.8 allows remote attackers to obtain source code of arbitrary files under the web root via 1 a trailing ".", 2 a trailing space, or 3 mixed case in the FileNameAttach parameter...
Douran 3.9.7.8 File Download/Source Code Disclosure Vulnerability
Exploit for asp platform in category web applications Title: Douran Portal File Download/Source Code Disclosure Vulnerability Date of Publishing: 16 March 2010 Application Name: Douran Portal Version: 3.9.7.8 Impact: Medium Vendor: www.douran.com Link: http://douran.com/HomePage.aspx?TabID=4862...
Douran Portal <= 3.9.7.8 Arbitrary File Download Vulnerability
Douran Portal is prone to a vulnerability that lets attackers download arbitrary files. This issue occurs because the application fails to sufficiently sanitize user-supplied input. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and a...
Douran Portal 3.9.7.8 File Disclosure
Title: Douran Portal File Download/Source Code Disclosure Vulnerability Date of Publishing: 16 March 2010 Application Name: Douran Portal Version: 3.9.7.8 Impact: Medium Vendor: www.douran.com Link: http://douran.com/HomePage.aspx?TabID=4862 Vendor Responses: They didn't respond to the emails...
Douran Portal File Download/Source Code Disclosure Vulnerability
Title: Douran Portal File Download/Source Code Disclosure Vulnerability Date of Publishing: 16 March 2010 Application Name: Douran Portal Version: 3.9.7.8 Impact: Medium Vendor: www.douran.com Link: http://douran.com/HomePage.aspx?TabID=4862 Vendor Responses: They didn't respond to the emails...
Douran 3.9.7.8 - File Download/Source Code Disclosure
Title: Douran Portal File Download/Source Code Disclosure Vulnerability Date of Publishing: 16 March 2010 Application Name: Douran Portal Version: 3.9.7.8 Impact: Medium Vendor: www.douran.com Link: http://douran.com/HomePage.aspx?TabID=4862 Vendor Responses: They didn't respond to the emails...
Douran 3.9.7.8 - File DownloadSource Code Disclosure
Douran 3.9.7.8 - File DownloadSource Code Disclosure Title: Douran Portal File Download/Source Code Disclosure Vulnerability Date of Publishing: 16 March 2010 Application Name: Douran Portal Version: 3.9.7.8 Impact: Medium Vendor: www.douran.com Link: http://douran.com/HomePage.aspx?TabID=4862...
Douran Portal <= v3.9.7.55 Multiple Remote Vulnerabilities
Exploit for asp platform in category web applications ========================================================== Douran Portal alert'ITSecTeam' 2 Remote File Upload : Note : Worked In Older 3.8.2.2 Poc : You Can Upload Your File Without Check Authorization You Can Upload : string acceptedFiles =...
Douran Portal 3.9.7.55 Cross Site Scripting / Shell Upload
=========================================================== + Douran Portal alert'ITSecTeam' Demo : http://isaar.ir/DesktopModules/Gallery/OrderForm.aspx?itemtitle=alert'ITSecTeam' 2 Remote File Upload : Note : Worked In Older 3.8.2.2 Poc : You Can Upload Y...
douran portal 3.9.7.55 - Multiple Vulnerabilities
=========================================================== + Douran Portal alert'ITSecTeam' 2 Remote File Upload : Note : Worked In Older 3.8.2.2 Poc : You Can Upload Your File Without Check Authorization You Can Upload : string acceptedFiles =...
Douran Portal 3.9.7.55 - Arbitrary File Upload / Cross-Site Scripting
source: https://www.securityfocus.com/bid/44594/info Douran Portal is prone to an arbitrary-file-upload vulnerability and a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. Attackers can exploit these issues to upload and execute...
douran portal 3.9.7.55 - Multiple Vulnerabilities
douran portal 3.9.7.55 - Multiple Vulnerabilities =========================================================== + Douran Portal alert'ITSecTeam' 2 Remote File Upload : Note : Worked In Older 3.8.2.2 Poc : You Can Upload Your File Without Check Authorization You Can Upload : string acceptedFiles =...
DOURAN Portal <= 3.9.0.23 Multiple Remote Vulnerabilities
No description provided by source. Abysssec Inc Public Advisory Description : these vulnerabilites found one year ago and new version of this portal "is not" affect whith these vulnerabilites anymore but still lots of web site uses of old version and are vulnerable and also new version is not...