CuteNews Detection (HTTP)

HTTP based detection of CuteNews. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.100105";...

CuteNews Detection

This host is running CuteNews, a powerful and easy to use news management system that uses flat files to store its database OpenVAS Vulnerability Test $Id: cutenewsdetect.nasl 5943 2017-04-12 14:44:26Z antu123 $ CuteNews Detection Authors: Michael Meyer Updated to detect UTF-8 CuteNews - By Antu...

CVE-2008-6590

LightNEasy has directory traversal flaws in version 1.2.2 (and possibly SQLite 1.2.2) where a crafted .. in the page parameter to index.php or LightNEasy.php allows remote attackers to read arbitrary files. Root cause appears to be inadequate validation of the page parameter, enabling traversal t...

Multiple vulnerabilities in TYPO3 third party extensions

Several vulnerabilities have been found in the following third party TYPO3 extensions: "Accessibility Glossary" a21glossary, "Calendar Base" cal, "Flat Manager" flatmgr Release Date: March 05, 2009 Please read first: This Collective Security Bulletin CSB is a listing of vulnerable extensions with...

myPHPscripts Login Session 2.0 XSS / Database Disclosure

START 0x01 Informations: Script : myPHPscripts Login Session 2.0 Download : http://www.hotscripts.com/jump.php?listingid=69881&jumptype=1 Vulnerability : XSS / Database Disclosure Author : Osirys Contact : osirysatlivedotit Website : http://osirys.org Notes : Proud to be Italian Greets: : XaDoS,...

myPHPscripts Login Session 2.0 XSS/Database Disclosure Vulns

No description provided by source. START 0x01 Informations: Script : myPHPscripts Login Session 2.0 Download : http://www.hotscripts.com/jump.php?listingid=69881&jumptype=1 Vulnerability : XSS / Database Disclosure Author : Osirys Contact : osirysatlivedotit Website : http://osirys.org Notes :...

myPHPscripts Login Session 2.0 XSS/Database Disclosure Vulns

Exploit for unknown platform in category web applications ============================================================ myPHPscripts Login Session 2.0 XSS/Database Disclosure Vulns ============================================================ START 0x01 Informations: Script : myPHPscripts Login...

myPHPscripts Login Session 2.0 - Cross-Site Scripting Database Disclosure

myPHPscripts Login Session 2.0 - Cross-Site Scripting Database Disclosure START 0x01 Informations: Script : myPHPscripts Login Session 2.0 Download : http://www.hotscripts.com/jump.php?listingid=69881&jumptype=1 Vulnerability : XSS / Database Disclosure Author : Osirys Contact : osirysatlivedotit...

myPHPscripts Login Session 2.0 - Cross-Site Scripting / Database Disclosure

START 0x01 Informations: Script : myPHPscripts Login Session 2.0 Download : http://www.hotscripts.com/jump.php?listingid=69881&jumptype=1 Vulnerability : XSS / Database Disclosure Author : Osirys Contact : osirysatlivedotit Website : http://osirys.org Notes : Proud to be Italian Greets: : XaDoS,...

printlog-disclose.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Printlog eNYe-Sec - www.enye-sec.org -- Description by the author's page -- PRITLOG is an extremely simple, small and powerful blog system. It does not use or need a MYSQL database and fully works based on flat files. The idea is derived from a...

Printlog <= 0.4 (filename) Remote File Disclosure Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Printlog = 0.4: Remote File Edition Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= $ Program: Printlog $ File affected: index.php $ Version: 0.4 $ Download: http://www.hardkap.net/pritlog Found...

Pritlog 0.4 - Filename Remote File Disclosure

Pritlog 0.4 - Filename Remote File Disclosure -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Printlog eNYe-Sec - www.enye-sec.org -- Description by the author's page -- PRITLOG is an extremely simple, small and powerful blog system. It does not use or need a MYSQL database and fully works bas...

Pritlog 0.4 - 'Filename' Remote File Disclosure

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Printlog eNYe-Sec - www.enye-sec.org -- Description by the author's page -- PRITLOG is an extremely simple, small and powerful blog system. It does not use or need a MYSQL database and fully works based on flat files. The idea is derived from a...

Flat Calendar v1.1 Remote Permission Bypass Vulnerability

Flat Calendar v1.1 Remote Permission Bypass Vulnerability Author : CrackersChild Dork : Flat Calendar: View All Flat Calendar: View All iзin yaklak 654.000 sonuзtan Exploits: site.com/calenderpath/admin/add.php Adding New Evetns without admin permissions...

flatcal-bypass.txt

Flat Calendar v1.1 Remote Permission Bypass Vulnerability Author : CrackersChild Dork : Flat Calendar: View All Flat Calendar: View All için yaklaşık 654.000 sonuçtan Exploits: site.com/calenderpath/admin/add.php Adding New Evetns without admin permissions...

Flat Calendar 1.1 - Multiple Administrative Scripts Authentication Bypass Vulnerabilities

source: https://www.securityfocus.com/bid/29662/info Flat Calendar is prone to multiple authentication-bypass vulnerabilities because it fails to perform adequate authentication checks. An attacker can exploit these issues to gain unauthorized access to the application and make arbitrary changes ...

Flat Calendar 1.1 - Multiple Administrative Scripts Authentication Bypass Vulnerabilities

Flat Calendar 1.1 - Multiple Administrative Scripts Authentication Bypass Vulnerabilities source: https://www.securityfocus.com/bid/29662/info Flat Calendar is prone to multiple authentication-bypass vulnerabilities because it fails to perform adequate authentication checks. An attacker can explo...

ActivePDF / Lotus Notes / Symantec Mail Security / Autonomy Keyview multiple security vulnerabilities

Multiple buffer overflows on Folio Flat File / Applix graphics format parsing...

Stack overflow

Multiple stack-based buffer overflows in foliosr.dll in the Folio Flat File speed reader in Autonomy formerly Verity KeyView 10.3.0.0, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, allow remote attackers to execute arbitrary code via a long attribute value in a 1...

Mozilla Foundation Security Advisory 2008-05

Mozilla Foundation Security Advisory 2008-05 Title: Directory traversal via chrome: URI Impact: High Announced: February 7, 2008 Reporter: Gerry Eisenhaur Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 2.0.0.12 Thunderbird 2.0.0.12 SeaMonkey 1.1.8 Description Gerry Eisenhaur reported...