Open-Realty CMS 3.x Cross Site Request Forgery

OVERVIEW Open-Realty CMS 3.x versions are vulnerable to Cross Site Request Forgery. 2. BACKGROUND Open-Realty is the world's leading real estate listing marketing and management CMS application, and has enjoyed being the real estate web site software of choice for professional web site...

City Directory Review and Rating Script SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: City Directory Review and Rating Script SQL Injection Vulnerability Date: 22.12.2012 Author: 3spi0n Script Vendor or Software Link: http://b-scripts.com/en/18-city-reviewer-yelp-clone.html Category: WebApps Type: SQL Injection...

City Directory Review and Rating Script - 'search.php' SQL Injection

Exploit Title: City Directory Review and Rating Script SQL Injection Vulnerability Date: 22.12.2012 Author: 3spi0n Script Vendor or Software Link: http://b-scripts.com/en/18-city-reviewer-yelp-clone.html Category: WebApps Type: SQL Injection MySQLi Tested On: Ubuntu 12.10 - Win7...

USN-1679-1 : linux-ti-omap4 vulnerability

A flaw was discovered in the Linux kernel's handling of new hot-plugged memory. An unprivileged local user could exploit this flaw to cause a denial of service by crashing the system. This script was automatically generated from Ubuntu Security Notice USN-1679-1. It is released under the Nessus...

JVN#53269985: Welcart vulnerable to cross-site request forgery

Welcart provided by Collne Inc. is a WordPress plugin for creating shopping websites. Welcart contains a cross-site request forgery vulnerability. Impact If a logged in user views a malicious page after an item has been added in the shopping cart, the purchase process may unexpectedly be complete...

JVN#18731696: Welcart vulnerable to cross-site scripting

Welcart provided by Collne Inc. is a WordPress plugin for creating shopping websites. Welcart contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the management page of Welcart. Solution Update the software Update to the latest version according to the...

MS12-077: Cumulative Security Update for Internet Explorer (2761465)

The remote host is missing Internet Explorer IE Security Update 2761465. The installed version of IE is affected by vulnerabilities that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid63224;...

USN-1645-1 : linux-ti-omap4 vulnerabilities

Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. CVE-2012-0957 Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cau...

Ubuntu 10.04 LTS : mozilla-devscripts update (USN-1430-5)

USN-1430-3 fixed vulnerabilities in Thunderbird. This update provides an updated mozilla-devscripts which produces packaged addons compatible with the latest thunderbird packaging. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security...

Fedora 17 : weechat-0.3.8-4.fc17 (2012-18526)

Fix arbitrary code execution due to call of shell when executing command within hookprocess Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

VMware OVF Tool Installed

VMware OVF Tool, a command line utility that supports importing and exporting of OVF templates, is installed on the remote Windows host. C Tenable Network Security. Inc. include"compat.inc"; if description scriptid63074; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

TripAdvisor travel website infected with Gamarue malware, infect 2% Indian Internet Users

TripAdvisor Inc., a hotel-review website, recently became a victim of the bug, said Trend Micro Inc., an Internet security solutions provider. Many of TripAdvisor's users received spam mail with booking confirmations for hotels they had checked out on the website, 1.89% of Indian Internet Users...

FreeBSD Ports: FreeBSD

The remote host is missing an update to the system as announced in the referenced advisory. Copyright C 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program...

FreeBSD Ports: rt40

The remote host is missing an update to the system as announced in the referenced advisory. VID 4b738d54-2427-11e2-9817-c8600054b392 OpenVAS Vulnerability Test $ Description: Auto generated from VID 4b738d54-2427-11e2-9817-c8600054b392 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: drupal7

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Splunk 4.x Denial Of Service

Splunk versions 4.0 through 4.3.4 suffer from an unauthenticated remote denial of service vulnerability against splunkd. Vendors: Splunk Inc., http://www.splunk.com Product: Splunk 4.0 - 4.3.4 Vulnerability: Unauthenticated remote denial of service against splunkd Tracking IDs: SPL-55521 Vendor...

Open-Realty 2.5.8 Cross Site Request Forgery Vulnerability

Open-Realty versions 2.5.8 and below suffer from a cross site request forgery vulnerability. Open-Realty 2.5.8 Cross Site Request Forgery Vulnerability 1. OVERVIEW Open-Realty 2.5.8 and lower versions are vulnerable to Cross Site Request Forgery. 2. BACKGROUND Open-Realty is the world's leading...

Open-Realty 2.5.8 Cross Site Request Forgery

OVERVIEW Open-Realty 2.5.8 and lower versions are vulnerable to Cross Site Request Forgery. 2. BACKGROUND Open-Realty is the world's leading real estate listing marketing and management CMS application, and has enjoyed being the real estate web site software of choice for professional web site...

Slackware Advisory SSA:2012-304-01 mozilla-thunderbird

The remote host is missing an update as announced via advisory SSA:2012-304-01. OpenVAS Vulnerability Test $Id: esoftslkssa201230401.nasl 6581 2017-07-06 13:58:51Z cfischer $ Description: Auto-generated from advisory SSA:2012-304-01 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Slackware Advisory SSA:2012-304-02 seamonkey

The remote host is missing an update as announced via advisory SSA:2012-304-02. OpenVAS Vulnerability Test $Id: esoftslkssa201230402.nasl 6581 2017-07-06 13:58:51Z cfischer $ Description: Auto-generated from advisory SSA:2012-304-02 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...