ArticleLive PHP Version 2005.0.0 Cross Site Scripting Vulnerability

Exploit for unknown platform in category web applications =================================================================== ArticleLive PHP Version 2005.0.0 Cross Site Scripting Vulnerability ===================================================================...

Interspire Shopping Cart - Full Path Disclosure

Interspire Shopping Cart - Full Path Disclosure Exploit Title: Interspire Shopping Cart Full Path Disclosure Date: 13-12-2009 Author: Mr.aFiR Software Link: http://www.interspire.com/ Version: N/A Tested on: GNU/LINUX CVE : N/A Code : N/A / \ / \ / \ | | |/ | | | Y Y | V\ / Y| || |/ / A ||| \ | |...

Interspire Shopping Cart Full Path Disclosure

Exploit for unknown platform in category web applications ============================================= Interspire Shopping Cart Full Path Disclosure ============================================= Exploit Title: Interspire Shopping Cart Full Path Disclosure Date: 13-12-2009 Author: Mr.aFiR Softwar...

Interspire Shopping Cart - Full Path Disclosure

Exploit Title: Interspire Shopping Cart Full Path Disclosure Date: 13-12-2009 Author: Mr.aFiR Software Link: http://www.interspire.com/ Version: N/A Tested on: GNU/LINUX CVE : N/A Code : N/A / \ / \ / \ | | |/ | | | Y Y | V\ / Y| || |/ / A ||| \ | | | | || || \ // \ | | | || | | |/ |/|/ |/...

Directory traversal

Directory traversal vulnerability in dialog/filemanager.php in Interspire Knowledge Manager 5 allows remote attackers to read arbitrary files via a .. dot dot in the p parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-4192

Interspire Knowledge Manager 5 contains a directory traversal vulnerability in dialog/file_manager.php that allows remote attackers to read arbitrary files by manipulating the p parameter (".." traversal). The issue is documented across multiple feeds (NVD, Red Hat, CVE lists) with the same root ...

Interspire Knowledge Manager 5 - p Directory Traversal

Interspire Knowledge Manager 5 - p Directory Traversal source: https://www.securityfocus.com/bid/36541/info Interspire Knowledge Manager is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker t...

Interspire Knowledge Manager 5 - 'p' Directory Traversal

source: https://www.securityfocus.com/bid/36541/info Interspire Knowledge Manager is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information that could aid in furthe...

ActiveKB Knowledgebase (loadpanel.php Panel) Local File Inclusion Vuln

No description provided by source. o------------------------------------------------------------------------------------x | Local File Inclusion Vulnerability | o------------------------------------------------------------------------------------o | Software : ActiveKB Knowledgebase version X.X |...

ActiveKB KnowledgeBase - Panel Local File Inclusion

ActiveKB KnowledgeBase - Panel Local File Inclusion o------------------------------------------------------------------------------------x | Local File Inclusion Vulnerability | o------------------------------------------------------------------------------------o | Software : ActiveKB...

ActiveKB Knowledgebase (loadpanel.php Panel) Local File Inclusion Vuln

Exploit for unknown platform in category web applications ====================================================================== ActiveKB Knowledgebase loadpanel.php Panel Local File Inclusion Vuln ======================================================================...

Authentication flaw

The ProcessLogin function in class.auth.php in Interspire Shopping Cart ISC 4.0.1 Ultimate edition allows remote attackers to bypass authentication and obtain administrative access by reusing the RememberToken cookie after a failed admin login attempt...

CVE-2009-0412

The ProcessLogin function in class.auth.php in Interspire Shopping Cart ISC 4.0.1 Ultimate edition allows remote attackers to bypass authentication and obtain administrative access by reusing the RememberToken cookie after a failed admin login attempt...

CVE-2009-0412

The CVE-2009-0412 entry concerns Interspire Shopping Cart (ISC) 4.0.1 Ultimate edition. The vulnerability exists in the ProcessLogin function of class.auth.php and allows remote attackers to bypass authentication and gain administrative access by reusing the RememberToken cookie after a failed ad...

[BMSA-2009-01] Authentication bypass in Interspire Shopping Cart v4.0.1 and below

BLUE MOON SECURITY ADVISORY 2009-01 =================================== :Title: Authentication bypass in Interspire Shopping Cart :Severity: Critical :Reporter: Truong Van Tri and Blue Moon Consulting :Products: Interspire Shopping Cart v4.0.1 Ultimate edition :Fixed in: v4.0.2 Description...

CVE-2008-2338

Interspire ActiveKB 1.5 and earlier allows remote attackers to gain privileges by setting the auth cookie to true when accessing unspecified scripts in /admin...

Code injection

Interspire ActiveKB 1.5 and earlier allows remote attackers to gain privileges by setting the auth cookie to true when accessing unspecified scripts in /admin...

CVE-2008-2338

Interspire ActiveKB 1.5 and earlier is affected by a privilege-escalation flaw where remote attackers can gain privileges by setting the auth cookie to true when accessing unspecified scripts in /admin. The issue is described across multiple sources (NVD/CVE-2008-2338). The available documents do...

CVE-2008-2338

Interspire ActiveKB 1.5 and earlier allows remote attackers to gain privileges by setting the auth cookie to true when accessing unspecified scripts in /admin...

articlelive-xss.txt

01010111 01001001 01010010 01000101 01000100 01010011 - 01000101 01000011 01010101 01010010 01001001 01010100 - 01011001 ADVISORY: INTERSPIRE ARTICLELIVE NX XSS || 0x00: ABOUT ME || 0x01: DATELINE || 0x02: INFORMATION || 0x03: EXPLOITATION || 0x04: RISK LEVEL || 0x00: ABOUT ME Author: SkyOut Date...