5284 matches found
JC URLshrink 1.3.1 - Remote Code Execution Vulnerability
No description provided by source. .--. / Dj7xpl \ | | |, .-. .-. ,| | o/ \o | |/ /\ | @ ^^ \|IIIIII|/ @8@8|-\IIIIII/-| / \ / @ +Iranian Are The Best In World+ + + /I N F O\ + | | +...
SquirrelMail 1.4.x Folder Name Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10246/info It has been reported that SquirrelMail is affected by a cross-site scripting vulnerability in the handling of folder name displays. This issue is due to a failure of the application to properly sanitize...
PHP-NUKE version <= 6.9 - 'cid' SQL Injection Remote Exploit
No description provided by source. !/usr/bin/perl -w use IO::Socket; THIS CODE PUBLIC NOW = \ \ / | \ | / | / / \ | | \ | /\ \ / || /// | / / / / based on 'cid' sql injection vuln in Download module, more info about this vuln u can see here: http://rst.void.ru/texts/advisory10.htm work only...
Microsoft Windows XP/2000/NT 4 Shell Long Share Name Buffer Overrun Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10213/info Microsoft Windows operating systems have been reported to be prone to a remotely exploitable buffer overrun condition. This issue is exposed when a client attempts to connect to an SMB share with an overly long...
easysite 2.3 - Multiple Vulnerabilities
No description provided by source. + EasySite v2.3 Multiple Remote Vulnerabilities + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M, Ras ,Puscasmarin ,ToxicBlood,MesSiAH,xZu,HrN + Local File Inclusion...
I-Gallery Folder Argument Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14002/info i-Gallery is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'folder' parameter of 'folderview.asp'. An attacker...
JV2 Folder Gallery 3.0 0 - (download.php) Remote File Disclosure Exploit
No description provided by source. / Script Name :JV2 Folder Gallery Script site :www.jv2.net Discovered by :SaO Exploit Coded by :PeTrO Credits To soulreaver,Kuz3y Compile: Visual C++ or DevC++ / include stdio.h include string.h include winsock.h pragma commentlib,ws232.lib int mainint argc, cha...
Sonium Enterprise Adressbook <= 0.2 (folder) Include Vulnerability
No description provided by source. +-------------------------------------------------------------------- + + Sonium Enterprise Adressbook Version 0.2 folder RFI + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/342/org/SoniumEnterpriseAdressbookVersion0.2folderRFI.htm +...
Elm 2.5.3 Alternative-Folder Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2403/info There is a buffer overflow in elm 2.5 PL3. This overflow is accessible by passing a long string to the -f Alternative-Folder command-line option. This vulnerability may not be restricted to this version of elm. ...
RealOne Player for Linux 2.2 Alpha Insecure Configuration File Permission Local Privilege Escalation
No description provided by source. source: http://www.securityfocus.com/bid/8571/info The configuration files for the RealOne Player are installed in the a hidden folder in a users home directory. The issue presents itself, because configuration files stored in this directory are installed with...
RaakCMS Multiple Vulnerabilities
No description provided by source. Securitylab.ir Application Info: Name: RaakCms Vendor: http://raakcms.com Vulnerability: ======================= Arbitrary File Upload ======================= http://server/webmaster/pic.aspx select file and folder , your file upload here:...
JV2 Folder Gallery 3.1.1 - (popup_slideshow.php) Multiple Vulnerability
No description provided by source. ----------------------------------------------------------------------------------- JV2 Folder Gallery 3.1.1 popupslideshow.php Multiple Vulnerability ----------------------------------------------------------------------------------- Vendor:...
WeBid <= 0.7.3 RC9 Multiple Remote File Inclusion Vulnerabilities
No description provided by source. ----------------------------------------------------------------------------------------- ECHOADV104$2009 WeBid = 0.7.3 RC9 Multiple Remote File Inclution Vulnerabilities -----------------------------------------------------------------------------------------...
JBLOG 1.5.1 - Remote SQL Table Backup Exploit
No description provided by source. !/usr/bin/perl =about VENDOR JBLOG 1.5.1 maybe earlier versions vulnerable too http://www.lisijie.org AUTHOR discovered & written by Ams ax330d doggy gmail dot com http://www.0x416d73.name/ VULNERABILITY DESCRIPTION Both 'index.php' and 'admin.php' includes file...
JV2 Folder Gallery <= 3.1 - (gallery.php) Remote File Inclusion Vulnerability
No description provided by source...
Microsoft Windows XP/2003 Explorer WMF File Handling Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22715/info Microsoft Windows Explorer is prone to a denial-of-service vulnerability. A remote attacker may exploit this vulnerability by presenting a malicious file to a victim user. Users do not have to open the file --...
Faceless: Tap Jacking Attack on Button Tags
UI Redressing Tap jacking attack may trick users into tapping a specifically crafted malicious App popup window e.g. toast view, making it a gateway for varied threats such as framing attack. Using this technique, a malicious App could potentially trick a user into making purchases, clicking on...
CVE-2014-3840
Multiple cross-site scripting XSS vulnerabilities in apps/common/templates/calculateformtitle.html in Mayan EDMS 0.13 allow remote authenticated users to inject arbitrary web script or HTML via a 1 tag or the 2 title of a source in a Staging folder, 3 Name field in a bootstrap setup, or Title fie...
CVE-2014-3840
CVE-2014-3840 affects Mayan EDMS 0.13, with multiple stored XSS vulnerabilities in apps/common/templates/calculate_form_title.html. The issue allows remote authenticated users to inject arbitrary script/HTML via several vectors: (1) a tag, (2) the title of a source in a Staging folder, (3) the Na...
CVE-2014-3840
Multiple cross-site scripting XSS vulnerabilities in apps/common/templates/calculateformtitle.html in Mayan EDMS 0.13 allow remote authenticated users to inject arbitrary web script or HTML via a 1 tag or the 2 title of a source in a Staging folder, 3 Name field in a bootstrap setup, or Title fie...