moinmoin-dos.txt

=============================================================== !vuln MoinMoin v1.5.9 is prone to multiple remote vulnerabilities. Earlier versions may also be affected. MoinMoin v1.80 is also affected to a lesser extent. Other versions may also be affected...

Gentoo Security Advisory GLSA 200503-04 (phpwebsite)

The remote host is missing updates announced in advisory GLSA 200503-04. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Vulnerabilities in FeedBurner FeedSmith for WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Full path disclosure и HTTP Response Splitting + Cross-Site Scripting уязвимостях в плагине FeedBurner FeedSmith для WordPress. Который разрабатывается FeedBurner, принадлежащей компании Google. Full path disclosure:...

Full path disclosure and SQL Injection vulnerabilities in Envolution

Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых Full path disclosure и SQL Injection уязвимостях в системе Envolution. Full path disclosure: http://site/index.php?module=Errore&type=admin&op=noexist&modname=22 http://site/index.php?module=Errore&type=admin&op=22...

New vulnerabilities in Envolution

Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых Full path disclosure и Cross-Site Scripting уязвимостях в системе Envolution. Full path disclosure: http://site/user.php?module=22 http://site/user.php?uname=22 http://site/user.php?upass=22 http://site/user.php?upassverif=22...

Vulnerabilities in Envolution

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting и Full path disclosure уязвимостях в системе Envolution. XSS: Уязвимость в user.php в модуле NS-NewUser в параметре op. http://site/user.php?module=NS-NewUser&op=3Cscript3Ealertdocument.cookie3C/script3E Full path disclosure:...

Vulnerabilities in FireStats

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Full path disclosure и Cross-Site Scripting уязвимостях в FireStats плагине для WordPress и других CMS. Full path disclosure: http://site/wp-content/plugins/firestats/js/firestats.js.php...

Bilboblog 2.1 Multiple Remote Vulnerabilities

No description provided by source. ------------------------------------------------------------------ Name : Bilboblog 2.1 Multiples Vulnerabilities Description : Bilboblog is a small application of micro-blogging in Php / MySQL Link :...

bilboblog 2.1 - Multiple Vulnerabilities

------------------------------------------------------------------ Name : Bilboblog 2.1 Multiples Vulnerabilities Description : Bilboblog is a small application of micro-blogging in Php / MySQL Link : http://www.tux-planet.fr/bilboblog-version-021-english-translation/ Vuln. types : Login Bypass -...

bilboblog 2.1 - Multiple Vulnerabilities

bilboblog 2.1 - Multiple Vulnerabilities ------------------------------------------------------------------ Name : Bilboblog 2.1 Multiples Vulnerabilities Description : Bilboblog is a small application of micro-blogging in Php / MySQL Link :...

CVE-2008-2723

embed.php in Menalto Gallery before 2.2.5 allows remote attackers to obtain the full path via unknown vectors related to "spoofing the remote address."...

CVE-2008-2723

embed.php in Menalto Gallery before 2.2.5 allows remote attackers to obtain the full path via unknown vectors related to "spoofing the remote address."...

New vulnerabilities in Power Phlogger

Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых SQL Injection, Information Leakage и Full path disclosure уязвимостях в Power Phlogger. SQL Injection:...

New vulnerabilities in Power Phlogger

Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых Information leakage, Full path disclosure и Denial of Service уязвимостях в Power Phlogger. Information leakage: http://site/modules/dbdump.php Утечка названия базы данных, названия и структуры таблиц. Full path disclosure:...

New vulnerabilities in Power Phlogger

Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых Cross-Site Scripting и Full path disclosure уязвимостях в Power Phlogger. XSS Persistent: POST запрос на странице http://site/edUserprofile.php возможны как GET, так и POST запросы: /textareascriptalertdocument.cookie/script В параметре:...

MiniBB 2.2 - Cross-Site Scripting SQL Injection Full Path Disclosure

MiniBB 2.2 - Cross-Site Scripting SQL Injection Full Path Disclosure Author: GiReX Homepage: girex.altervista.org Date: 21/04/2008 CMS: miniBB 2.2 and maybe prior Site: minibb.net Bug 1: Full Path Disclosure Bug 2: Cross Site Scripting Bug 3: Remote SQL Injection Need: registerglobals = On...

miniBB 2.2 (CSS/SQL/FPD) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ======================================================== miniBB 2.2 CSS/SQL/FPD Multiple Remote Vulnerabilities ======================================================== Author: GiReX Date: 21/04/2008 CMS: miniBB 2.2 and maybe prior Site:...

MiniBB 2.2 - Cross-Site Scripting / SQL Injection / Full Path Disclosure

Author: GiReX Homepage: girex.altervista.org Date: 21/04/2008 CMS: miniBB 2.2 and maybe prior Site: minibb.net Bug 1: Full Path Disclosure Bug 2: Cross Site Scripting Bug 3: Remote SQL Injection Need: registerglobals = On --------------------------------------- 21/04/2008 Vendor informed 22/04/20...

minibb-xsssql.txt

Author: GiReX Homepage: girex.altervista.org Date: 21/04/2008 CMS: miniBB 2.2 and maybe prior Site: minibb.net Bug 1: Full Path Disclosure Bug 2: Cross Site Scripting Bug 3: Remote SQL Injection Need: registerglobals = On --------------------------------------- 21/04/2008 Vendor informed 22/04/20...

miniBB 2.2 (CSS/SQL/FPD) Multiple Remote Vulnerabilities

No description provided by source. Author: GiReX Homepage: girex.altervista.org Date: 21/04/2008 CMS: miniBB 2.2 and maybe prior Site: minibb.net Bug 1: Full Path Disclosure Bug 2: Cross Site Scripting Bug 3: Remote SQL Injection Need: registerglobals = On ---------------------------------------...