DSECRG-08-039.txt

Hello, bugtraq. Digital Security Research Group DSecRG Advisory DSECRG-08-039 Application: Pluck CMS Versions Affected: 4.5.3 Vendor URL: http://www.pluck-cms.org/ Bug: Local File Include Exploits: YES Reported: 25.08.2008 Vendor Response: 30.08.2008 Solution: YES Date of Public Advisory:...

[DSECRG-08-039] Local File Include Vulnerability in Pluck CMS 4.5.3

Hello, bugtraq. Digital Security Research Group DSecRG Advisory DSECRG-08-039 Application: Pluck CMS Versions Affected: 4.5.3 Vendor URL: http://www.pluck-cms.org/ Bug: Local File Include Exploits: YES Reported: 25.08.2008 Vendor Response: 30.08.2008 Solution: YES Date of Public Advisory:...

qshop-sqlxss.txt

000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0 0 0 0 0 0 000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 000 0 0 0...

Pluck CMS 4.5.3 (g_pcltar_lib_dir) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Pluck CMS 4.5.3 gpcltarlibdir Local File Inclusion Vulnerability ===================================================================== Hello, bugtraq. Digital Security...

Q-Shop 3.0 Remote XSS/SQL Injection Vulnerabilities

No description provided by source. 000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0 0 0 0 0 0 000 0 0 0 ...

CVE-2008-6935

creationtimestamp| type| source ---|---|--- 2008-11-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7145 2008-11-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7167...

CVE-2008-6936

creationtimestamp| type| source ---|---|--- 2008-11-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7145 2008-11-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7167...

Oracle Database 11g — EXFSYS PL/SQL injection vulnerability

Application: Oracle database 11G Versions Affected: Oracle 11.1.0.6 and 10.2.0.1 Vendor URL: http://oracle.com Bugs: PL/SQL Injections Exploits: YES Reported: 17.11.2008 Vendor response: 18.11.2008 Last response: 24.11.2008 Date of Public Advisory: 13.01.2009 Author: Alexandr Polyakov Description...

Q-Shop 3.0 - Cross-Site Scripting SQL Injection

Q-Shop 3.0 - Cross-Site Scripting SQL Injection 000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0 0 0 0 0...

CVE-2008-6944

creationtimestamp| type| source ---|---|--- 2008-11-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7112 2008-11-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7110 2008-11-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7111...

CVE-2008-6943

creationtimestamp| type| source ---|---|--- 2008-11-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7110 2008-11-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7111 2008-11-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7112...

CVE-2008-6942

creationtimestamp| type| source ---|---|--- 2008-11-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7110 2008-11-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7111 2008-11-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7112...

HP-UX PHSS_38840 : HP-UX Running Xserver, Remote Execution of Arbitrary Code (HPSBUX02381 SSRT080083 rev.2)

s700800 11.31 Xserver cumulative patch : Potential security vulnerabilities have been identified with HP-UX running Xserver. The vulnerabilities could be exploited remotely to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in thi...

Fresh Email Script 1.0 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ====================================================== Fresh Email Script 1.0 Multiple Remote Vulnerabilities ====================================================== 1. +-----------------+-----------------+-----------------+ 2...

CVE-2008-5655

creationtimestamp| type| source ---|---|--- 2008-11-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7045 2008-11-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7053...

CVE-2008-6720

creationtimestamp| type| source ---|---|--- 2008-11-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7024 2012-09-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37786...

CVE-2008-6488

creationtimestamp| type| source ---|---|--- 2008-11-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7021 2008-11-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7026...

CVE-2008-6231

creationtimestamp| type| source ---|---|--- 2008-11-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6998 2008-11-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7000...

CVE-2008-6293

creationtimestamp| type| source ---|---|--- 2008-11-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6965 2008-11-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6968 2008-11-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6964...

MatPo Link 1.2b (Blind SQL Injection/XSS) Multiple Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== MatPo Link 1.2b Blind SQL Injection/XSS Multiple Vulnerabilities ================================================================== Discovered by : Hakxer Type Gap : Blind...