Sophos Email Appliance 2.1 - Web Interface Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/27813/info Sophos Email Appliance is prone to multiple cross-site scripting vulnerabilities that affect its web interface because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage...

artmedic weblog multiple local file inclusion vulnerabilities

artmedic weblog multiple local file inclusion vulnerabilities download http://artmedic-phpscripts.de/index.php?did=artmedicweblog.zip author muuratsalo contact muuratsaloatgmail.com exploits http://localhost/artmedicweblog/index.php?ta=../../../../../../../../../../etc/passwd00...

artmedic weblog 1.0 Multiple Local File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ================================================================= artmedic weblog 1.0 Multiple Local File Inclusion Vulnerabilities ================================================================= artmedic weblog multiple local file...

artmedic-multiplelfi.txt

artmedic weblog multiple local file inclusion vulnerabilities download http://artmedic-phpscripts.de/index.php?did=artmedicweblog.zip author muuratsalo contact muuratsaloatgmail.com exploits http://localhost/artmedicweblog/index.php?ta=../../../../../../../../../../etc/passwd%00...

artmedic weblog multiple xss vulnerabilities

artmedic weblog multiple xss vulnerabilities download http://artmedic-phpscripts.de/index.php?did=artmedicweblog.zip author muuratsalo contact muuratsaloatgmail.com exploits http://localhost/artmedicweblog/artmedicprint.php?date=scriptalert1/script...

PowerNews (Newsscript) 2.5.6 Local File Inclusion Vulnerabilities

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-014 Application: PowerNews Newsscript Versions Affected: 2.5.6 Vendor URL: http://www.powerscripts.org/ Bug: Multiple Local File Include Exploits: YES Reported: 01.02.2008 Vendor Response: none Solution:...

PowerNews (Newsscript) 2.5.6 Local File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ================================================================= PowerNews Newsscript 2.5.6 Local File Inclusion Vulnerabilities ================================================================= Digital Security Research Group DSecRG...

PowerNews 2.5.6 - Local File Inclusion

PowerNews 2.5.6 - Local File Inclusion Digital Security Research Group DSecRG Advisory DSECRG-08-014 Application: PowerNews Newsscript Versions Affected: 2.5.6 Vendor URL: http://www.powerscripts.org/ Bug: Multiple Local File Include Exploits: YES Reported: 01.02.2008 Vendor Response: none...

DSECRG-08-013.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-013 Application: MODx CMS Versions Affected: 0.9.6.1, 0.9.6.1p1 Vendor URL: http://modxcms.com/ Bugs: XSS, SiXSS, stored XSS, Change User Password XSRF Vulnerability. Exploits: YES Reported: 11.01.2008 Vendor response: 11.01.2008 Updated...

DSECRG-08-012.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-012 Application: Azucar CMS Versions Affected: 1.3 Vendor URL: http://azucarcms.sourceforge.net/enhome.htm Bug: Multiple Local File Include Exploits: YES Reported: 30.01.2008 Vendor Response: NONE Date of Public Advisory: 05.02.2008 Author...

Solaris 10 (sparc) : 136998-10 (deprecated)

SunOS 5.10: PostgreSQL 8.2 core patch. Date this patch was last updated by Sun : Jun/09/11 This plugin has been deprecated and either replaced with individual 136998 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled ...

VHD Web Pack 2.0 (index.php page) Local File Inclusion Vulnerability

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-010 Application: VHD Web Pack 2.0 Versions Affected: VHD Web Pack 2.0 Vendor URL: http://www.divideconcept.net/index.php?page=vhdwebpack/index.php Bugs: Local File Include Exploits: YES Reported: 28.01.20...

[DSECRG-08-011] Astrosoft HelpDesk Multiple XSS

Digital Security Research Group DSecRG Advisory DSECRG-08-011 Application: Astrosoft HelpDesk Versions Affected: Vendor URL: http://astrosoft.ru/ Bugs: Multiple XSS Injections Exploits: YES Reported: 29.01.2008 Vendor response: NONE Date of Public Advisory: 04.02.2008 Authors: Alexandr Polyakov,...

DSECRG-08-009.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-009 Application: XOOPS Versions Affected: XOOPS 2.0.18 Vendor URL: http://www.xoops.org/ Bugs: Local File Include,URL Redirecting phishing Exploits: YES Reported: 28.01.2008 Vendor response: 28.01.2008 Date of Public Advisory: 04.02.2008...

DSECRG-08-011.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-011 Application: Astrosoft HelpDesk Versions Affected: Vendor URL: http://astrosoft.ru/ Bugs: Multiple XSS Injections Exploits: YES Reported: 29.01.2008 Vendor response: NONE Date of Public Advisory: 04.02.2008 Authors: Alexandr Polyakov,...

XOOPS 2.0.18 Local File Inclusion / URL Redirecting Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== XOOPS 2.0.18 Local File Inclusion / URL Redirecting Vulnerabilities =================================================================== Digital Security Research Group...

XOOPS 2.0.18 - Local File Inclusion / URL Redirecting

Digital Security Research Group DSecRG Advisory DSECRG-08-009 Application: XOOPS Versions Affected: XOOPS 2.0.18 Vendor URL: http://www.xoops.org/ Bugs: Local File Include,URL Redirecting phishing Exploits: YES Reported: 28.01.2008 Vendor response: 28.01.2008 Date of Public Advisory: 04.02.2008...

nilson-disclose.txt

nilson's blogger 0.11 remote file disclosure vulnerabilities download http://sourceforge.net/projects/nilson-blogger/ author muuratsalo contact muuratsaloatgmail.com exploits http://localhost/nilson-blogger0.11/index.php?permalink=../../../../../../../../../../etc/passwd...

sflog! 0.96 remote file disclosure vulnerabilities

sflog! 0.96 remote file disclosure vulnerabilities download http://sourceforge.net/projects/sflog/ author muuratsalo contact muuratsaloatgmail.com exploits http://localhost/sflog/?blog=test&permalink=../../../../../../../../../../etc/passwd...

sflog! 0.96 - Remote File Disclosure

sflog! 0.96 remote file disclosure vulnerabilities download http://sourceforge.net/projects/sflog/ author muuratsalo contact muuratsaloatgmail.com exploits http://localhost/sflog/?blog=test&permalink=../../../../../../../../../../etc/passwd...