244 matches found
ArticleLive PHP Version 2005.0.0 Cross Site Scripting Vulnerability
Exploit for unknown platform in category web applications =================================================================== ArticleLive PHP Version 2005.0.0 Cross Site Scripting Vulnerability ===================================================================...
ArticleLive PHP 2005.0.0 - Cross-Site Scripting
ArticleLive PHP 2005.0.0 - Cross-Site Scripting ======================================================================================== | Title : ArticleLive PHP Version 2005.0.0 Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane -...
Interspire Shopping Cart - Full Path Disclosure
Interspire Shopping Cart - Full Path Disclosure Exploit Title: Interspire Shopping Cart Full Path Disclosure Date: 13-12-2009 Author: Mr.aFiR Software Link: http://www.interspire.com/ Version: N/A Tested on: GNU/LINUX CVE : N/A Code : N/A / \ / \ / \ | | |/ | | | Y Y | V\ / Y| || |/ / A ||| \ | |...
Interspire Shopping Cart Full Path Disclosure
Exploit for unknown platform in category web applications ============================================= Interspire Shopping Cart Full Path Disclosure ============================================= Exploit Title: Interspire Shopping Cart Full Path Disclosure Date: 13-12-2009 Author: Mr.aFiR Softwar...
Interspire Shopping Cart - Full Path Disclosure
Exploit Title: Interspire Shopping Cart Full Path Disclosure Date: 13-12-2009 Author: Mr.aFiR Software Link: http://www.interspire.com/ Version: N/A Tested on: GNU/LINUX CVE : N/A Code : N/A / \ / \ / \ | | |/ | | | Y Y | V\ / Y| || |/ / A ||| \ | | | | || || \ // \ | | | || | | |/ |/|/ |/...
Directory traversal
Directory traversal vulnerability in dialog/filemanager.php in Interspire Knowledge Manager 5 allows remote attackers to read arbitrary files via a .. dot dot in the p parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2009-4192
Interspire Knowledge Manager 5 contains a directory traversal vulnerability in dialog/file_manager.php that allows remote attackers to read arbitrary files by manipulating the p parameter (".." traversal). The issue is documented across multiple feeds (NVD, Red Hat, CVE lists) with the same root ...
CVE-2009-4192: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in dialog/filemanager.php in Interspire Knowledge Manager 5 allows remote attackers to read arbitrary files via a .. dot dot in the p parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Interspire Knowledge Manager 5 - p Directory Traversal
Interspire Knowledge Manager 5 - p Directory Traversal source: https://www.securityfocus.com/bid/36541/info Interspire Knowledge Manager is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker t...
Interspire Knowledge Manager 5 - 'p' Directory Traversal
source: https://www.securityfocus.com/bid/36541/info Interspire Knowledge Manager is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information that could aid in furthe...
ActiveKB Knowledgebase (loadpanel.php Panel) Local File Inclusion Vuln
No description provided by source. o------------------------------------------------------------------------------------x | Local File Inclusion Vulnerability | o------------------------------------------------------------------------------------o | Software : ActiveKB Knowledgebase version X.X |...
ActiveKB Knowledgebase (loadpanel.php Panel) Local File Inclusion Vuln
Exploit for unknown platform in category web applications ====================================================================== ActiveKB Knowledgebase loadpanel.php Panel Local File Inclusion Vuln ======================================================================...
ActiveKB KnowledgeBase - Panel Local File Inclusion
ActiveKB KnowledgeBase - Panel Local File Inclusion o------------------------------------------------------------------------------------x | Local File Inclusion Vulnerability | o------------------------------------------------------------------------------------o | Software : ActiveKB...
Authentication flaw
The ProcessLogin function in class.auth.php in Interspire Shopping Cart ISC 4.0.1 Ultimate edition allows remote attackers to bypass authentication and obtain administrative access by reusing the RememberToken cookie after a failed admin login attempt...
CVE-2009-0412
The ProcessLogin function in class.auth.php in Interspire Shopping Cart ISC 4.0.1 Ultimate edition allows remote attackers to bypass authentication and obtain administrative access by reusing the RememberToken cookie after a failed admin login attempt...
CVE-2009-0412
The CVE-2009-0412 entry concerns Interspire Shopping Cart (ISC) 4.0.1 Ultimate edition. The vulnerability exists in the ProcessLogin function of class.auth.php and allows remote attackers to bypass authentication and gain administrative access by reusing the RememberToken cookie after a failed ad...
CVE-2009-0412: Improper Authentication
The ProcessLogin function in class.auth.php in Interspire Shopping Cart ISC 4.0.1 Ultimate edition allows remote attackers to bypass authentication and obtain administrative access by reusing the RememberToken cookie after a failed admin login attempt...
[BMSA-2009-01] Authentication bypass in Interspire Shopping Cart v4.0.1 and below
BLUE MOON SECURITY ADVISORY 2009-01 =================================== :Title: Authentication bypass in Interspire Shopping Cart :Severity: Critical :Reporter: Truong Van Tri and Blue Moon Consulting :Products: Interspire Shopping Cart v4.0.1 Ultimate edition :Fixed in: v4.0.2 Description...