2075 matches found
PT-2010-5432
Name of the Vulnerable Software and Affected Versions DaDaBIK versions prior to 4.3 beta2 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via the select single parameter when the insert or edit feature is enabled. This is a cross-site scripting XSS...
LEADTOOLS v11.5.0.9 ltlst11n.ocx Insert() Access Violation
Exploit for windows platform in category dos / poc ========================================================== LEADTOOLS v11.5.0.9 ltlst11n.ocx Insert Access Violation ========================================================== Test Exploit Page targetFile = "C:\Program...
LeadTools 11.5.0.9 - 'ltlst11n.ocx' Insert() Access Violation Denial of Service
Test Exploit Page targetFile = "C:\Program Files\Rational\common\ltlst11n.ocx" prototype = "Function Insert ByVal Bitmap As Long , ByVal pszText As String , ByVal Data As Long As Integer" memberName = "Insert" progid = "LEADImgListLib.LEADImgList" argCount = 3 arg1=1 arg2="defaultV"...
Joomla Component com_jobs Upload Vulnerability
Exploit for php platform in category web applications ============================================== Joomla Component comjobs Upload Vulnerability ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /,...
CustomCMS - Persistent Cross-Site Scripting
CustomCMS - Persistent Cross-Site Scripting 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 vendor URL :http://customcms.net/ Price:55$ Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd...
Oracle SQL Injection
Реализация SQL инъекций в Oracle. Введение. В статье рассматриваются особенности реализации уязвимости инъекции SQL-кода в СУБД Oracle. Хотя в настоящее время редко можно встретить использование этой СУБД в Веб программировании, но все-таки такое случается. В статью внесены изменения и дополнения...
Fedora 12 : asterisk-1.6.1.17-1.fc12 (2010-3381)
Update to 1.6.1.17 AST-2010-003: Invalid parsing of ACL rules can compromise security AST-2010-002: This security release is intended to raise awareness of how it is possible to insert malicious strings into dialplans, and to advise developers to read the best practices documents so that they may...
Oracle Database SQL Compiler Access Control Security Bypass (CVE-2007-3855)
There exists a security bypass vulnerability in the Oracle Database Server product. Specifically, the flaw exists due to improper enforcement of user permissions on data access to tables through certain types of views. A remote authenticated attacker may use this vulnerability to perform UPDATE,...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in index.php in OpenCart 1.4 allows remote attackers to hijack the authentication of an application administrator for requests that create an administrative account via a POST request with the route parameter set to "user/user/insert." NOTE: some of...
CVE-2010-1610: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in index.php in OpenCart 1.4 allows remote attackers to hijack the authentication of an application administrator for requests that create an administrative account via a POST request with the route parameter set to "user/user/insert." NOTE: some of...
TR Forum 1.5 insert admin CSRF Vulnerability
Exploit for php platform in category web applications ============================================ TR Forum 1.5 insert admin CSRF Vulnerability ============================================ ======================================================================================== | Title : TR Forum...
TR Forum 1.5 - Cross-Site Request Forgery (Add Admin)
TR Forum 1.5 - Cross-Site Request Forgery Add Admin ======================================================================================== | Title : TR Forum 1.5 insert admin CSRF Vulnerability | Author : EL-KAHINA | email : No-Mail | Home : www.iqs3cur1ty.com/vb | Tested on: windows SP2 França...
TR Forum 1.5 - Cross-Site Request Forgery (Add Admin)
======================================================================================== | Title : TR Forum 1.5 insert admin CSRF Vulnerability | Author : EL-KAHINA | email : No-Mail | Home : www.iqs3cur1ty.com/vb | Tested on: windows SP2 Français V.Pnx2 2.0 + Lunix Français v.9.4 Ubuntu | Bug :...
MySQL and SQL field truncated vulnerability-vulnerability warning-the black bar safety net
The current Web developers certainly have a lot of people did not notice the author mentioned these two issues. The first problem is that, MySQL by default has a configuration parameters maxpacketsize, this parameter is used to limit the MySQL client and the MySQL server end of the data...
CVE-2010-0854
CVE-2010-0854 affects Oracle Database (versions including 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, 11.1.0.7) in the Audit component. The issue is described as an unspecified vulnerability that could let remote authenticated users influence integrity related to auditing on tables, per the NVD entry...
CVE-2010-0854: Undefined Security Weakness
Unspecified vulnerability in the Audit component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect integrity, related to "SELECT, INSERT or DELETE on tables subject to auditing."...
Softbiz Jobs Cross Site Scripting
======================================================================= Softbiz Jobs XSS Vulnerability ======================================================================= by Pratul Agrawal Vulnerability found in- Insert New Banner module email [email protected] company aksitservices Credit b...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in staff/index.php in Kayako SupportSuite 3.60.04 and earlier allow remote authenticated users to inject arbitrary web script or HTML via the 1 subject parameter and 2 contents parameter aka body in an insertquestion action. NOTE: some of these...
Cross site scripting
Cross-site scripting XSS vulnerability in the Insert Node module 5.x before 5.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via an inserted node...
