Multiple vulnerabilities in TYPO3 Core

It has been discovered that TYPO3 Core is vulnerable to Arbitrary Code Execution, Path Traversal, Cross-Site Scripting XSS, SQL injection and Information Disclosure. Component Type: TYPO3 Core Affected Versions: 4.2.15 and below, 4.3.8 and below, 4.4.4 and below Vulnerability Types: Arbitrary Cod...

Debian DSA-2092-1 : lxr-cvs - missing input sanitizing

Dan Rosenberg discovered that in lxr-cvs, a code-indexing tool with a web frontend, not enough sanitation of user input is performed; an attacker can take advantage of this and pass script code in order to perform cross-site scripting attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

cgTestimonial 2.2 Joomla Component Multiple Remote Vulnerabilities

cgTestimonial 2.2 Joomla Component Multiple Remote Vulnerabilities Name cgTestimonial Vendor http://www.cmsgalaxy.com Versions Affected 2.2 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-08-06 X. INDEX I. ABOUT THE...

Joomla cgTestimonial 2.2 Cross Site Scripting / Shell Upload

cgTestimonial 2.2 Joomla Component Multiple Remote Vulnerabilities Name cgTestimonial Vendor http://www.cmsgalaxy.com Versions Affected 2.2 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-08-06 X. INDEX I. ABOUT THE...

Joomla Component cgTestimonial 2.2 Multiple Remote Vulnerabilities

Exploit for php platform in category web applications ================================================================== Joomla Component cgTestimonial 2.2 Multiple Remote Vulnerabilities ================================================================== cgTestimonial 2.2 Joomla Component Multipl...

Vulnerabilitiy in extension Front End User Registration (sr_feuser_register)

It has been discovered that the extension Frontend User Registration srfeuserregister is susceptible to Security Misconfiguration. Component Type: Third party extension. This extensions is not part of the TYPO3 default installation. Affected Versions: Version 2.5.25. Vulnerability Type: Security...

Joomla! Component eventCal 1.6.4 - Blind SQL Injection

Founded by RoAdKiLlEr Team: Albanian Hacking Crew Contact: RoAdKiLlEratKhg-CrewdotWs Home: http://a-h-crew.net Download App:http://joomlacode.org/gf/project/eventcal/frs/ ==========ExPl0iT3d by RoAdKiLlEr========== +Description: eventCal is a calendar component for Joomla!. It enables you to...

Joomla Component com_eventcal Blind SQL Injection Vulnerability

Exploit for php platform in category web applications =============================================================== Joomla Component comeventcal Blind SQL Injection Vulnerability ===============================================================...

Joomla! Component JE Awd Song - Persistent Cross-Site Scripting

Joomla! Component JE Awd Song - Persistent Cross-Site Scripting Critical Level : HIGH Vendor Url : http://joomlaextensions.co.in/component/awdsong/ Google Dork: inurl:comawdsong Price:$37.00 Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd...

Joomla Component com_awd_song persistent XSS Vulnerability

Exploit for php platform in category web applications ========================================================== Joomla Component comawdsong persistent XSS Vulnerability ==========================================================...

Fedora Update for irssi FEDORA-2010-6618

Check for the Version of irssi OpenVAS Vulnerability Test Fedora Update for irssi FEDORA-2010-6618 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

[SECURITY] Fedora 13 Update: irssi-0.8.15-1.fc13

Irssi is a modular IRC client with Perl scripting. Only text-mode frontend is currently supported. The GTK/GNOME frontend is no longer being maintained...

[SECURITY] Fedora 11 Update: irssi-0.8.15-1.fc11

Irssi is a modular IRC client with Perl scripting. Only text-mode frontend is currently supported. The GTK/GNOME frontend is no longer being maintained...

Joomla Component com_recruitmentmanager Upload Vulnerability

Exploit for php platform in category web applications ============================================================ Joomla Component comrecruitmentmanager Upload Vulnerability ============================================================ Title:Joomla Component comrecruitmentmanager Upload...

[SECURITY] Fedora 13 Update: kdesdk-4.4.3-1.fc13.1

A collection of applications and tools used by developers, including: cervisia: a CVS frontend kate: advanced text editor kbugbuster: a tool to manage the KDE bug report system kcachegrind: a browser for data produced by profiling tools e.g. cachegr ind kompare: diff tool kuiviewer: displays...

[SECURITY] Fedora 13 Update: cacti-0.8.7f-1.fc13

Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven. Along with being able to maintain graphs, data sources, and round robin archives in a database, Cacti also...

CVE-2009-4823: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in frontend/x3/files/fileop.html in cPanel 11.0 through 11.24.7 allows remote attackers to inject arbitrary web script or HTML via the fileop parameter...

Fedora Update for kdeutils FEDORA-2010-6096

Check for the Version of kdeutils OpenVAS Vulnerability Test Fedora Update for kdeutils FEDORA-2010-6096 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 11 Update: kdesdk-4.4.2-1.fc11

A collection of applications and tools used by developers, including: cervisia: a CVS frontend kate: advanced text editor kbugbuster: a tool to manage the KDE bug report system kcachegrind: a browser for data produced by profiling tools e.g. cachegr ind kompare: diff tool kuiviewer: displays...

[SECURITY] Fedora 12 Update: kdesdk-4.4.2-1.fc12

A collection of applications and tools used by developers, including: cervisia: a CVS frontend kate: advanced text editor kbugbuster: a tool to manage the KDE bug report system kcachegrind: a browser for data produced by profiling tools e.g. cachegr ind kompare: diff tool kuiviewer: displays...