Advanced Poll 2.02 - SQL Injection

Advanced Poll 2.02 - SQL Injection + Title : Advanced Poll 2.02 SQL Injection Vulnerability + Affected Version : v2.02 + Software Link : http://www.electrolized.free.fr/scripts-php/pollphp.zip + Tested on : Windows 7 + Date : 15/10/2011 + Dork : inurl:/db/admin intitle:Advanced Poll 2.02 + Catego...

WhiteHouse Gov Service - Persistent Web Vulnerability

Document Title: =============== WhiteHouse Gov Service - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=308 Release Date: ============= 2011-11-03 Vulnerability Laboratory ID VL-ID: ==================================== 308...

WhiteHouse Gov Service - Persistent Web Vulnerability

Document Title: =============== WhiteHouse Gov Service - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=308 Release Date: ============= 2011-11-03 Vulnerability Laboratory ID VL-ID: ==================================== 308...

Facebook Holi Greeting Cards - SQL Injection Vulnerability

Document Title: =============== Facebook Holi Greeting Cards - SQL Injection Vulnerability References Source: ==================== Facebook 3rd Party Application - Holi Greeting Cards 2011/Q2 Release Date: ============= 2011-11-01 Vulnerability Laboratory ID VL-ID:...

[PT-2011-29] Arbitrary file reading and arbitrary code execution in Router Manager for D-Link DIR-300

---------------------------------------------------------------------- PT-2011-29 Positive Technologies Security Advisory Arbitrary file reading and arbitrary code execution in Router Manager for D-Link DIR-300. ---------------------------------------------------------------------- ---Vulnerable...

Facebook Holi Greeting Cards - SQL Injection Vulnerability

Document Title: =============== Facebook Holi Greeting Cards - SQL Injection Vulnerability References Source: ==================== Facebook 3rd Party Application - Holi Greeting Cards 2011/Q2 Release Date: ============= 2011-11-01 Vulnerability Laboratory ID VL-ID:...

DDIVRT-2011-35 Cisco Unified Contact Center Express Directory Traversal [CVE-2011-3315]

Title ----- DDIVRT-2011-35 Cisco Unified Contact Center Express Directory Traversal CVE-2011-3315 Severity -------- High Date Discovered --------------- August 9, 2011 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: r@b13$ Vulnerability Description...

x10 Adult Media Script - Persistent Web Vulnerabilities

Document Title: =============== x10 Adult Media Script - Persistent Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=301 Release Date: ============= 2011-10-31 Vulnerability Laboratory ID VL-ID: ==================================== 301...

Sparkasse Bank – Tricky Card Bug on ATM [ATM Adventure]

Document Title: =============== Sparkasse Bank – Tricky Card Bug on ATM ATM Adventure References: =========== Document: http://www.vulnerability-lab.com/resources/documents/295.pdf Article: http://www.vulnerability-lab.com/dev/?p=247 Release Date: ============= 2011-10-15 Vulnerability Laboratory...

eFront Enterprise 3.6.9 Arbitrary File Download

Title: ====== eFront Enterprise v3.6.9 - Arbitrary Download Vulnerability Date: ===== 2011-10-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=290 http://www.vulnerability-lab.com/getcontent.php?id=230 VL-ID: ===== 290 Introduction: ============= Tailored with larger...

eFront Enterprise v3.6.9 - Arbitrary Download Vulnerability

Document Title: =============== eFront Enterprise v3.6.9 - Arbitrary Download Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=290 http://www.vulnerability-lab.com/getcontent.php?id=230 Release Date: ============= 2011-10-07 Vulnerability...

North Scottsdale Inventory SQL Injection

Title: ====== Facebook North Scottsdale Inventory - Remote SQL Injection Vulnerability Date: ===== 2011-09-29 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=272 VL-ID: ===== 272 Introduction: ============= The application is currently included and viewable by all...

Authenex SQL Injection

============================================================ FOREGROUND SECURITY, SECURITY ADVISORY 2011-002 - Original release date: September 21, 2011 - Discovered by: Jose Carlos de Arriba - Senior Security Analyst at Foreground Security - Contact: jcarriba at foregroundsecurity dot com, dade ...

NETGEAR Wireless Cable Modem Gateway - Authentication Bypass Cross-Site Request Forgery

NETGEAR Wireless Cable Modem Gateway - Authentication Bypass Cross-Site Request Forgery Sense of Security - Security Advisory - SOS-11-011 Release Date. 20-Sep-2011 Last Update. - Vendor Notification Date. 22-Mar-2011 Product. NETGEAR Wireless Cable Modem Gateway CG814WG Affected versions. Hardwa...

GeoVision DVR Remote View - Multiple Web Vulnerabilities

Document Title: =============== GeoVision DVR Remote View - Multiple Web Vulnerabilities Release Date: ============= 2011-09-12 Vulnerability Laboratory ID VL-ID: ==================================== 51 Product & Service Introduction: =============================== Geovision is a very famous...

MYRE Real Estate Software Multiple Vulnerabilities

Exploit for php platform in category web applications Title : MYRE Real Estate Software Multiple XSS and SQL Injection Vulnerabilities Author : Sooraj K.S SecPod Technologies www.secpod.com Vendor : http://myrephp.com Advisory : http://secpod.org/blog/?p=346...

GeoClassifieds Lite 2.0.x SQL Injection / Cross Site Scripting

--------------------------------------------------------------------- + Title : GeoClassifieds Lite Multiple vulnerabilities + Affected Version : v2.0.1 & V2.0.3.1 & V2.0.3.2 &V2.0.4 + Software Link : http://geodesicsolutions.com/ + Tested on : Windows 7 + Date : 25/08/2011 + Dork : "inurl:/admin...

Several Vulnerabilities in extension Direct Mail Subscription (direct_mail_subscription)

Several vulnerabilities have been found in the following third-party TYPO3 extension: directmailsubscription Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.1.0 and below Vulnerability Types: SQL Injection,...

[PT-2011-19] SQL injection vulnerability in Help Request System

---------------------------------------------------------------------- PT-2011-19 Positive Technologies Security Advisory SQL injection vulnerability in Help Request System ---------------------------------------------------------------------- --- Vulnerable software Help Request System Version...

StarMoney Banking Software - Multiple Vulnerabilities [HD]

Document Title: =============== StarMoney Banking Software - Multiple Vulnerabilities HD References: =========== Download: http://www.vulnerability-lab.com/resources/videos/258.wmv View: http://www.youtube.com/watch?v=Bymh3ct1v4g Release Date: ============= 2011-08-31 Vulnerability Laboratory ID...