Calendarix (cal_cat.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================================== Calendarix calcat.php SQL Injection Vulnerability ==================================================== Author : SixP4ck3r Email & msn : email protected Date : 17 July 2010 Critical Lvl : Hig...

Mozilla Foundation Security Advisory 2010-21

Mozilla Foundation Security Advisory 2010-21 Title: Arbitrary code execution with Firebug XMLHttpRequestSpy Impact: High Announced: March 30, 2010 Reporter: mozbugra4 Products: Firefox, SeaMonkey Fixed in: Firefox 3.5.8 Firefox 3.0.19 SeaMonkey 2.0.3 Description Mozilla security researcher...

Mozilla Foundation Security Advisory 2010-12

You are here: Security Center Mozilla Foundation Security Advisories MFSA 2010-12 Mozilla Foundation Security Advisory 2010-12 Title: XSS using addEventListener and setTimeout on a wrapped object Impact: High Announced: March 23, 2010 Reporter: mozbugra4 Products: Firefox, Thunderbird, SeaMonkey...

Mozilla Foundation Security Advisory 2009-19

Mozilla Foundation Security Advisory 2009-19 Title: Same-origin violations in XMLHttpRequest and XPCNativeWrapper.toString Impact: High Announced: April 21, 2009 Reporter: mozbugra4 Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.0.9 Description Mozilla security researcher mozbugra4...

Asbru Web Content Management Vulnerabilities

aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 02-Apr-2009 Software: Asbru Software - Asbru Web Content Management http://www.asbrusoft.com/ "Ready to use, full-featured, database-driven web content management system CMS with integrated communit...

Harvard SQL Injection

┌┌───────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable crack.... ────┐...

WeBid <= 0.7.3 RC9 Multiple Remote File Inclusion Vulnerabilities

No description provided by source. ----------------------------------------------------------------------------------------- ECHOADV104$2009 WeBid = 0.7.3 RC9 Multiple Remote File Inclution Vulnerabilities -----------------------------------------------------------------------------------------...

MODx CMS 0.9.6.2 - Remote File Inclusion / Cross-Site Scripting

:: The Codes Like A Game Anyone Can Play With It,s :: Title: MODx CMS = 0.9.6.2 Multiple Remote Vulne RFI + XSS Vendor: http://modxcms.com/assets/snippets/filedownload/download.php?path=YnVpbGRz&fileName=modx-0.9.6.2.tar.gz&utmsource=0961p2&utmmedium=web&utmcampaign=download Discover by :...

Mozilla Foundation Security Advisory 2008-56

Mozilla Foundation Security Advisory 2008-56 Title: nsXMLHttpRequest::NotifyEventListeners same-origin violation Impact: High Announced: November 12, 2008 Reporter: mozbugra4 Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.0.4 Firefox 2.0.0.18 Thunderbird 2.0.0.18 SeaMonkey 1.1.13...

attachmax-sqlrfidisclose.txt

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV101$2008 ----------------------------------------------------------------------------------------- ECHOADV101$2008 Attachmax Dolphin = 2.1.0 Multiple Vulnerability...

Attachmax Dolphin 2.1.0 - Multiple Vulnerabilities

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV101$2008 ----------------------------------------------------------------------------------------- ECHOADV101$2008 Attachmax Dolphin = 2.1.0 Multiple Vulnerability...

igescms-multi.txt

www.BugReport.ir AmnPardaz Security Research Team Title: IGES CMS =2.0 Multiple Vulnerabilities Vendor: www.iges.nl Exploit: Available Vulnerable Version: 2.0 Impact: High Fix: N/A 1. Description: IGES CMS is a complete, fully featured CMS in PHP language with SQL and became a powerful CMS having...

Mozilla Foundation Security Advisory 2008-28

Mozilla Foundation Security Advisory 2008-28 Title: Arbitrary socket connections with Java LiveConnect on Mac OS X Impact: High Announced: July 1, 2008 Reporter: Gregory Fleischer Products: Firefox, SeaMonkey Fixed in: Firefox 3.0 Firefox 2.0.0.15 SeaMonkey 1.1.10 Description Security researcher...

Mozilla Foundation Security Advisory 2008-22

Mozilla Foundation Security Advisory 2008-22 Title: XSS through JavaScript same-origin violation Impact: High Announced: July 1, 2008 Reporter: mozbugra4 Products: Firefox, SeaMonkey Fixed in: Firefox 3.0 Firefox 2.0.0.15 SeaMonkey 1.1.10 Description Mozilla contributor mozbugra4 submitted a set ...

cmsWorks 2.2 RC4 (mod_root) Remote File Inclusion Vulnerability

No description provided by source. ┌┌───────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rise...

Virtual Support Office-XP <= 3.0.29 Multiple Remote Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: Virtual Support Office-XP Multiple Vulnerabilities. Vendor: www.vso-xp.com Vulnerable Version: 3.0.29, 3.0.27 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory:...

glshdeaf-multi.txt

www.BugReport.ir AmnPardaz Security Research Team Title: GL-SH Deaf Forum =6.5.5 Multiple Vulnerabilities Vendor: www.frank-karau.de Vulnerable Version: 6.5.5 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: www.bugreport.ir/?/46 1. Description: Gl-SH Deaf board is...

GL-SH Deaf Forum 6.5.5 - Multiple Vulnerabilities

GL-SH Deaf Forum 6.5.5 - Multiple Vulnerabilities www.BugReport.ir AmnPardaz Security Research Team Title: GL-SH Deaf Forum =6.5.5 Multiple Vulnerabilities Vendor: www.frank-karau.de Vulnerable Version: 6.5.5 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory:...

pooya-sql.txt

www.BugReport.ir AmnPardaz Security Research Team Title: Pooya Site Builder PSB SQL Injection Vulnerabilities Vendor: www.paridel.com Vulnerable Version: 6.0 Assembly Version Exploit: Available Impact: High Fix: N/A Original Advisory: www.bugreport.ir/?/42 1. Description: Pooya site builder psb i...

QuickerSite Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: QuickerSite Multiple Vulnerabilities Vendor: www.quickersite.com Vulnerable Version: 1.8.5 Exploit: Available Impact: High Fix: N/A Original Advisory: http://bugreport.ir/index.php?/39 1. Description: QuickerSite is a Content Management...