CVE-2012-4053

Cross-site request forgery CSRF vulnerability in eZOE flash player in eZ Publish 4.1 through 4.6 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-4053

Cross-site request forgery CSRF vulnerability in eZOE flash player in eZ Publish 4.1 through 4.6 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2012-4053

The CVE-2012-4053 issue affects eZ Publish 4.1–4.6 via the eZOE Flash Player component, described as a Cross-site Request Forgery (CSRF) allowing remote attackers to hijack user authentication via unknown vectors. The provided documents do not specify exact exploitation vectors, affected products...

CVE-2012-4053: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in eZOE flash player in eZ Publish 4.1 through 4.6 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

PT-2012-5171

Name of the Vulnerable Software and Affected Versions eZ Publish versions 4.1 through 4.6 Description A cross-site request forgery CSRF issue exists in the eZOE flash player component, allowing remote attackers to hijack the authentication of victims via unknown vectors. Recommendations For...

EZ Publish 4.x ezjscore Module - Cross-Site Scripting

EZ Publish 4.x ezjscore Module - Cross-Site Scripting source: https://www.securityfocus.com/bid/52807/info eZ Publish is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

EZ Publish 4.x 'ezjscore' Module - Cross-Site Scripting

source: https://www.securityfocus.com/bid/52807/info eZ Publish is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

CVE-2012-0983

SQL injection vulnerability in Scriptsez.net Ez Album allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php...

Sql injection

SQL injection vulnerability in Scriptsez.net Ez Album allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php...

CVE-2012-0983

The CVE-2012-0983 entry concerns a SQL injection in Scriptsez.net Ez Album. In the affected workflow, an attacker can supply a crafted value for the id parameter in a view action to index.php , enabling remote execution of arbitrary SQL commands. The vulnerability is reported with a High severity...

CVE-2012-0983

SQL injection vulnerability in Scriptsez.net Ez Album allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php...

CVE-2012-0983: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Scriptsez.net Ez Album allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php...

PT-2012-2989

Name of the Vulnerable Software and Affected Versions Ez Album affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to "index.php". This is a SQL injection vulnerability. Recommendations At the moment...

Ez Album Blind SQL Injection

Title : Ez Album Blind SQL Injection Vulnerability Author : Red Security TEAM Date : 31/01/2012 Risk : High Demo : http://www.scriptsez.com/album/demo.php Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM Exploit :...

Ez Album Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Title : Ez Album Blind SQL Injection Vulnerability Author : Red Security TEAM Date : 31/01/2012 Risk : High Demo : http://www.scriptsez.com Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM Exploit :...

Ez Album - Blind SQL Injection

Ez Album - Blind SQL Injection Title : Ez Album Blind SQL Injection Vulnerability Author : Red Security TEAM Date : 31/01/2012 Risk : High Demo : http://www.scriptsez.com Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM Exploit :...

Ez Album - Blind SQL Injection

Title : Ez Album Blind SQL Injection Vulnerability Author : Red Security TEAM Date : 31/01/2012 Risk : High Demo : http://www.scriptsez.com Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM Exploit : http://server/album/index.php?action=view&id=BlindSQLi...

CA Technologies Multiple Products Detection (Windows SMB Login)

SMB login-based detection of multiple CA Technologies products. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free softwar...

Update: Vulnerability in plugins for Typepad, RapidWeaver, Habari, DasBlo, eZ Publish, EE, Serendipity, Social Web CMS, PHP-Fusion, Magento and Sweetcron

Hello 3APA3A! One update concerning Cross-Site Scripting vulnerability in multiple plugins for different engines in plugins for Typepad, RapidWeaver, Habari, DasBlo, eZ Publish, EE, Serendipity, Social Web CMS, PHP-Fusion, Magento and Sweetcron, which all are ports of WP-Cumulus. Which I wrote...

Vulnerability in plugins for Typepad, RapidWeaver, Habari, DasBlo, eZ Publish, EE, Serendipity, Social Web CMS, PHP-Fusion, Magento and Sweetcron

Hello 3APA3A! I want to warn you about Cross-Site Scripting vulnerability in multiple plugins for different engines it's combinations of my three publications which I've made earlier at my site. In plugins for Typepad, RapidWeaver, Habari, DasBlo, eZ Publish, EE, Serendipity, Social Web CMS,...