Ziggurrat Farsi CMS 'bck' Parameter Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/39534/info Ziggurat Farsi CMS is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary files within the...

Zigurrat Farsi CMS 'manager/textbox.asp' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38719/info Zigurrat Farsi CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Mandriva Linux Security Advisory : libreoffice (MDVSA-2011:172)

Multiple vulnerabilies has been discovered and corrected in libreoffice : Stack-based buffer overflow in the Lotus Word Pro import filter in LibreOffice before 3.3.3 allows remote attackers to execute arbitrary code via a crafted .lwp file CVE-2011-2685. oowriter in OpenOffice.org 3.3.0 and...

CVE-2010-4989

SQL injection vulnerability in main.asp in Ziggurat Farsi CMS allows remote attackers to execute arbitrary SQL commands via the grp parameter...

CVE-2010-4989

SQL injection vulnerability in main.asp in Ziggurat Farsi CMS allows remote attackers to execute arbitrary SQL commands via the grp parameter...

Sql injection

SQL injection vulnerability in main.asp in Ziggurat Farsi CMS allows remote attackers to execute arbitrary SQL commands via the grp parameter...

CVE-2010-4989

SQL injection vulnerability in main.asp in Ziggurat Farsi CMS allows remote attackers to execute arbitrary SQL commands via the grp parameter...

CVE-2010-4989

The CVE-2010-4989 entry concerns a SQL injection in the Ziggurat Farsi CMS. Affected component: main.asp; vulnerable parameter: grp. Root cause: unsafely constructed SQL queries allow an attacker to modify/execute arbitrary SQL remotely. Impact is reflected as partial confidentiality, integrity, ...

CVE-2010-4989: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in main.asp in Ziggurat Farsi CMS allows remote attackers to execute arbitrary SQL commands via the grp parameter...

PT-2011-1924

Name of the Vulnerable Software and Affected Versions Ziggurat Farsi CMS affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting a SQL injection vulnerability in the main.asp file via the grp parameter in the...

Ziggurat CMS Cross Site Scripting / SQL Injection

Ziggurat CMS Multiple Vulnerabilities --------------------------------------------------------- Portal Name: Ziggurat Farsi CMS software : http://www.farsi-cms.com Author : d3c0der - [email protected] google dork : Powered By Ziggurat Farsi CMS homepage : www.attackerz.ir spt : netqurd - maarek...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the rendering engine in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allow remote attackers to inject arbitrary web script or HTML via 1 x-mac-arabic, 2 x-mac-farsi, or 3 x-mac-hebrew characters that may b...

CVE-2010-3770: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the rendering engine in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allow remote attackers to inject arbitrary web script or HTML via 1 x-mac-arabic, 2 x-mac-farsi, or 3 x-mac-hebrew characters that may b...

Mozilla XSS hazard in multiple character encodings (MFSA 2010-84)

Multiple cross-site scripting XSS vulnerabilities in the rendering engine in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allow remote attackers to inject arbitrary web script or HTML via 1 x-mac-arabic, 2 x-mac-farsi, or 3 x-mac-hebrew characters that may b...

PT-2010-5058

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.5.16 Mozilla Firefox versions 3.6.x prior to 3.6.13 SeaMonkey versions prior to 2.0.11 Description The issue allows remote attackers to inject arbitrary web script or HTML via specific characters that may be...

CVE-2010-3770

Multiple cross-site scripting XSS vulnerabilities in the rendering engine in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allow remote attackers to inject arbitrary web script or HTML via 1 x-mac-arabic, 2 x-mac-farsi, or 3 x-mac-hebrew characters that may b...

Ziggurat Farsi CMS SQL Injection

InformatioN Title : Ziggurat Farsi CMS SQL Injection Vulnerability Author : Arash Saadatfar ExploiT Vulnerable File : http://server/main.asp?id=5945&grp=SQL Injection FinisH :D...

Ziggurat Farsi CMS - SQL Injection

Hello. Thank You For Your Perfect Web Site. Title : Ziggurat Farsi CMS SQL Injection Vulnerability Author: Arash Saadatfar InformatioN Title : Ziggurat Farsi CMS SQL Injection Vulnerability Author : Arash Saadatfar ExploiT Vulnerable File : http://server/main.asp?id=5945&grp=SQL Injection FinisH ...

Ziggurat Farsi CMS SQL Injection Vulnerability

Exploit for asp platform in category web applications ============================================== Ziggurat Farsi CMS SQL Injection Vulnerability ============================================== Author: Arash Saadatfar InformatioN Title : Ziggurat Farsi CMS SQL Injection Vulnerability Author :...

Ziggurat Farsi CMS - SQL Injection

Ziggurat Farsi CMS - SQL Injection Hello. Thank You For Your Perfect Web Site. Title : Ziggurat Farsi CMS SQL Injection Vulnerability Author: Arash Saadatfar InformatioN Title : Ziggurat Farsi CMS SQL Injection Vulnerability Author : Arash Saadatfar ExploiT Vulnerable File :...