Open redirect

Open redirect vulnerability in the Modern FAQ irfaq extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL, probably in the "return url parameter."...

Cross site scripting

Cross-site scripting XSS vulnerability in the Modern FAQ irfaq extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to the "return url parameter."...

CVE-2011-5079

Open redirect vulnerability in the Modern FAQ irfaq extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL, probably in the "return url parameter."...

CVE-2012-1070

The CVE-2012-1070 entry concerns a Cross-Site Scripting (XSS) vulnerability in TYPO3’s Modern FAQ (irfaq) extension. Affected version information indicates 1.1.2 and earlier than 1.1.4; the issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, with the desc...

CVE-2011-5079

CVE-2011-5079 describes an open redirect vulnerability in the TYPO3 Modern FAQ (irfaq) extension, affecting version 1.1.2 and other versions prior to 1.1.4. The issue allows remote attackers to redirect users to arbitrary external sites (via the likely return_url parameter), enabling phishing-lik...

CVE-2012-1070

Cross-site scripting XSS vulnerability in the Modern FAQ irfaq extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to the "return url parameter."...

Facebook 2012 Hacker Cup announced !

Facebook 2012 Hacker Cup announced Facebook today announced open registration for its second annual Hacker Cup, an annual algorithmic programming contest open to engineers from around the world. Programmers will be judged on accuracy and speed as they race to solve algorithmic problems to advance...

Strato FAQ Center 2012 - Cross Site Scripting Vulnerability

Document Title: =============== Strato FAQ Center 2012 - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=372 Release Date: ============= 2012-01-06 Vulnerability Laboratory ID VL-ID: ====================================...

WordPress Plugin DS FAQ 1.3.2 - SQL Injection

Exploit Title: WordPress WP DS FAQ plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- switch$POST'action' ... case 'deletefaqbook': if!isset$POST'id' error; $id = $POST'id'; ... $sql = "DELETE FROM ".$tablename." WHERE id = ".$id; $results =...

WordPress Plugin DS FAQ 1.3.2 - SQL Injection

WordPress Plugin DS FAQ 1.3.2 - SQL Injection Exploit Title: WordPress WP DS FAQ plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- switch$POST'action' ... case 'deletefaqbook': if!isset$POST'id' error; $id = $POST'id'; ... $sql = "DELETE FRO...

WordPress WP DS FAQ plugin <= 1.3.2 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress WP DS FAQ plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- switch$POST'action' ... case 'deletefaqbook': if!isset$POST'id' error; $id = $POST'id'; ... $sql =...

Joomla Minitek FAQ Book < 1.4 SQLi Vulnerability - Active Check

Joomla Minitek FAQ Book component is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Joomla Minitek FAQ Book 'id' Parameter SQL Injection Vulnerability

This host is running Joomla Minitek FAQ Book component and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: gbjoomlaminiteksqlinjvuln.nasl 7573 2017-10-26 09:18:50Z cfischer $ Joomla Minitek FAQ Book 'id' Parameter SQL Injection Vulnerability Authors: Madhuri D Copyright:...

Joomla! Component Minitek FAQ Book 1.3 - 'id' SQL Injection

source: https://www.securityfocus.com/bid/48223/info Joomla Minitek FAQ Book is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the applicatio...

Joomla! Component Minitek FAQ Book 1.3 - id SQL Injection

Joomla! Component Minitek FAQ Book 1.3 - id SQL Injection source: https://www.securityfocus.com/bid/48223/info Joomla Minitek FAQ Book is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful...

Joomla Minitek FAQ Book 1.3 SQL Injection

Joomla Component Minitek FAQ Book SQL injection Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com / http://exploit-id.com / http://magelangcyber.web.id Date : 11 June, 2011 Software Information + Vendor : http://www.minitek.gr/ + Download :...

Zeus Source Code Leaked

The source code to the infamous Zeus crimeware kit, which has been sold on underground forums for years, has been leaked and is now available for anyone to see if they know where to look. Security researchers over the weekend noticed that files that appeared to contain the source code for the Zeu...

T-Dreams FAQ Manager SQL Injection Vulnerability

Exploit for asp platform in category web applications ================================================ T-Dreams FAQ Manager SQL Injection Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ ...

Techno Dreams FAQ Manager Package 1.0 - faqlist.asp SQL Injection

Techno Dreams FAQ Manager Package 1.0 - faqlist.asp SQL Injection source: https://www.securityfocus.com/bid/45202/info Techno Dreams FAQ Manager Package is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Techno Dreams FAQ Manager Package 1.0 - 'faqlist.asp' SQL Injection

source: https://www.securityfocus.com/bid/45202/info Techno Dreams FAQ Manager Package is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...