4143 matches found
Umer Inc Songs Portal Script - id SQL Injection
Umer Inc Songs Portal Script - id SQL Injection || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...
smb-enum-users NSE Script
Attempts to enumerate the users on a remote Windows system, with as much information as possible, through two different techniques both over MSRPC, which uses port 445 or 139; see smb.lua. The goal of this script is to discover all user accounts that exist on a remote system. This can be helpful...
PT-2008-6149 · Postfix · Postfix
Name of the Vulnerable Software and Affected Versions: Postfix version 2.5.2 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on the /tmp/postfix groups.stdout, /tmp/postfix groups.stderr, and /tmp/postfix groups.message temporary files. The vendor...
Unfixed XSS vulnerability at www.learning2008.com
Security researcher xylitol, has submitted on 26/10/2008 a cross-site-scripting XSS vulnerability affecting www.learning2008.com, which at the time of submission ranked 11844287 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/07/2009. It is...
Sql injection
SQL injection vulnerability in pickusers.php in the groups module in eXtrovert Thyme 1.3 allows remote attackers to execute arbitrary SQL commands via the unamesearch parameter. NOTE: some of these details are obtained from third party information...
dovecot -- ACL plugin bypass vulnerabilities
Timo Sirainen reports in dovecot 1.1.4 release notes: ACL plugin fixes: Negative rights were actually treated as positive rights. 'k' right didn't prevent creating parent/child/child mailbox. ACL groups weren't working...
Restrict access to page history to certain users (or groups)
panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-13247. panel A customer requested for a new feature to restrict access to page history only to a particular group or certain...
Restrict access to page history to certain users (or groups)
A customer requested for a new feature to restrict access to page history only to a particular group or certain users...
ajhyipacmereadarticle-sql.txt
|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...
Brim 2.0.0 (SQL/XSS) Multiple Remote Vulnerabilities
No description provided by source. || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /...
CVE-2008-3789
Samba 3.2.0 uses weak permissions 0666 for the 1 groupmapping.tdb and 2 groupmapping.ldb files, which allows local users to modify the membership of Unix groups...
Code injection
Samba 3.2.0 uses weak permissions 0666 for the 1 groupmapping.tdb and 2 groupmapping.ldb files, which allows local users to modify the membership of Unix groups...
DEBIAN-CVE-2008-3789
Samba 3.2.0 uses weak permissions 0666 for the 1 groupmapping.tdb and 2 groupmapping.ldb files, which allows local users to modify the membership of Unix groups...
CVE-2008-3789
CVE-2008-3789 (Samba 3.2.0): The vulnerability arises from weak permissions (0666) on the group_mapping.tdb and group_mapping.ldb files, enabling local users to modify Unix group memberships. Concrete details in connected docs confirm the affected component/files and the local-privilege consequen...
aproxcms-sql.txt
Viva IslaM Viva IslaM Remote SQL injection Vulnerability Aprox CMS Engine V5.1.0.4 index.php page AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...
Cross site scripting
Cross-site scripting XSS vulnerability in the Organic Groups OG module 5.x before 5.x-7.3 and 6.x before 6.x-1.0-RC1, a module for Drupal, allows remote authenticated users, with group owner permissions, to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-3094
The Organic Groups OG module 5.x before 5.x-7.3 and 6.x before 6.x-1.0-RC1, a module for Drupal, allows remote attackers to obtain sensitive information private group names via unspecified vectors...
CVE-2008-3095
Cross-site scripting XSS vulnerability in the Organic Groups OG module 5.x before 5.x-7.3 and 6.x before 6.x-1.0-RC1, a module for Drupal, allows remote authenticated users, with group owner permissions, to inject arbitrary web script or HTML via unspecified vectors...
Information disclosure
The Organic Groups OG module 5.x before 5.x-7.3 and 6.x before 6.x-1.0-RC1, a module for Drupal, allows remote attackers to obtain sensitive information private group names via unspecified vectors...
CVE-2008-3095
The CVE-2008-3095 entry concerns the Organic Groups (OG) module for Drupal. A cross-site scripting (XSS) vulnerability affects OG 5.x before 5.x-7.3 and 6.x before 6.x-1.0-RC1, allowing remote authenticated users with group owner permissions to inject arbitrary web script or HTML via unspecified ...