Information disclosure vulnerabilities in extension "Front End User Registration" (sr_feuser_register)

It has been discovered that the extension "Front End User Registration" srfeuserregister is vulnerable to information disclosure Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 2.6.1 and below Vulnerability Type:...

Pulse Pro CMS 1.7.2 Cross Site Scripting

Exploit Title: Pulse Pro CMS v.1.7.2 - Reflected Cross-Site Scripting XSS Vulnerability Script Page : http://pulsecms.com Date: 13-12-2011 Author : RandomStorm - http://www.randomstorm.com Avram Marius Gabriel d3v1l Tested on: Windows XP & Vista FF Cross-Site Scripting XSS on Front Site POC:...

Fork CMS 3.1.5 Cross Site Scripting

Exploit Title: Fork CMS v.3.1.5 - Reflected Cross-Site Scripting XSS Vulnerability Script Page : http://www.fork-cms.com/ Date: 13-12-2011 Author : RandomStorm - http://www.randomstorm.com Avram Marius Gabriel d3v1l Tested on: Windows XP & Vista IE9 Cross-Site Scripting XSS on Front Site POC:...

Issue key can be enumerated - Resolve Issue Feature

Security auditing tests performed on a Jira Bug Issue and Project Tracking Software locally running instance shown that the application is succeptible to horizontal privilege elevation attacks within the Resolve Issue feature, accessible through the given address:...

Sql injection

SQL injection vulnerability in the Front-edit Address Book comaddressbook component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a contact action to index.php...

Lulzsec Hacker tracked by Proxy logs, can face 15 years prison

Lulzsec Hacker tracked by Proxy logs, can face 15 years prison The FBI believes that the homeless man they arrested on Thursday was "Commander X", a member of the People's Liberation Front PLF associated with Anonymous hacktivism. The logs maintained by HideMyAss.com, in addition to other evidenc...

Fedora Update for rubygem-actionpack FEDORA-2011-11567

Check for the Version of rubygem-actionpack OpenVAS Vulnerability Test Fedora Update for rubygem-actionpack FEDORA-2011-11567 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for nip2 FEDORA-2011-10781

Check for the Version of nip2 OpenVAS Vulnerability Test Fedora Update for nip2 FEDORA-2011-10781 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

[SECURITY] Fedora 16 Update: nip2-7.24.2-1.fc16

nip2 is a graphical front end to the VIPS package. With nip2, rather than directly editing images, you build relationships between objects in a spreadsheet-like fashion. When you make a change somewhere, nip2 recalculates the objects affected by that change. Since it is demand-driven this update ...

[SECURITY] Fedora 15 Update: nip2-7.24.2-1.fc15

nip2 is a graphical front end to the VIPS package. With nip2, rather than directly editing images, you build relationships between objects in a spreadsheet-like fashion. When you make a change somewhere, nip2 recalculates the objects affected by that change. Since it is demand-driven this update ...

Fedora Update for zabbix FEDORA-2011-10618

Check for the Version of zabbix OpenVAS Vulnerability Test Fedora Update for zabbix FEDORA-2011-10618 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Code Widget Database Driven Product Catalogue (ASP) SQL Injection

Exploit for asp platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Set sail communication corporate website CMS system v1. 1 0day-vulnerability warning-the black bar safety net

This is a broken system, take home the source the horse change it that is their own, also charges Garbage system, but also on the source the horse is encrypted. Vulnerability is a heap of Background login authentication file: !-- include file="conn. asp" - !-- include file="../class/Config. asp" ...

vBulletin CMS 4.1.1 Recent Articles Cross Site Scripting

============================================================ vBulletin 4 CMS Recent Articles widget XSS Vulnerability ============================================================ Title : vBulletin 4 CMS Recent Articles widget XSS Vulnerability Software : http://www.vbulletin.com Tested on : versi...

JoomlaXi Persistent XSS Vulnerability

Exploit for php platform in category web applications 1.JoomlaXi persistent XSS vulnerabilty vendor: www.joomlaxi.com Author: 3psil0nLambDa a.k.a Karthik Email: email protected My blog: epsilonlambda.co.cc Google dork: © 2008-2010 JoomlaXi...

Joomla! Component JoomlaXi - Persistent Cross-Site Scripting

Joomla! Component JoomlaXi - Persistent Cross-Site Scripting 1.JoomlaXi persistent XSS vulnerabilty vendor: www.joomlaxi.com Author: 3psil0nLambDa a.k.a Karthik Email: [email protected] My blog: epsilonlambda.co.cc Google dork: © 2008-2010 JoomlaXi...

SMPlayer v0.6.5.1 - Denial of Service Vulnerability

Document Title: =============== SMPlayer v0.6.5.1 - Denial of Service Vulnerability Release Date: ============= 2011-06-16 Vulnerability Laboratory ID VL-ID: ==================================== 57 Product & Service Introduction: =============================== SMPlayer intends to be a complete...

Front Accounting 2.3.4 CSRF Vulnerability

Exploit for php platform in category web applications Software................Front Accounting 2.3.4 Vulnerability...........Cross-site Request Forgery Threat Level............Low 1/5 Download................http://frontaccounting.com/wb3/ Discovery Date..........4/27/2011 Tested...

Front Accounting 2.3.4 Cross Site Request Forgery

------------------------------------------------------------------------ --Description-- A cross-site request forgery vulnerability in Front Accounting 2.3.4 can be exploited to create a new admin. --PoC--...

Front Accounting 2.3.4 - Cross-Site Request Forgery

Front Accounting 2.3.4 - Cross-Site Request Forgery Software................Front Accounting 2.3.4 Vulnerability...........Cross-site Request Forgery Threat Level............Low 1/5 Download................http://frontaccounting.com/wb3/ Discovery Date..........4/27/2011 Tested...