Threat Outbreak Alert: Fake Invoice Attachment Email Messages on June 22, 2013

Medium Alert ID: 29751 First Published: 2013 June 24 12:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an invoice attachment for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake LexisNexis Invoice Attachment Email Messages on June 21, 2013

Medium Alert ID: 29750 First Published: 2013 June 24 11:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an invoice attachment from LexisNexis for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Claims Invoice Email Messages on June 17, 2013

Medium Alert ID: 29748 First Published: 2013 June 21 18:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain an invoice notification for the recipient. The text in the email message attempts to convince...

Threat Outbreak Alert: Fake German Invoice Delivery Email Messages on June 21, 2013

Low Alert ID: 29742 First Published: 2013 June 21 13:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to contain an invoice delivery notification for the recipient. The text in the email message attempts to convin...

WHMCS 4.5.2 SQL Injection

Title: WHMCS 4.x SQL Injection Vulnerability Google Dork: intext:"Powered by WHMCompleteSolution" OR inurl:"submitticket.php‎"‎ Author: Ahmed Aboul-Ela Contact: Ahmed.Aboul3laatgmaildotcom Date: 14/5/2013 Vendor: http://www.whmcs.com Version: 4.5.2 and perior versions should be affected too Teste...

CVE-2012-4932

Multiple cross-site scripting XSS vulnerabilities in SimpleInvoices before stable-2012-1-CIS3000 allow remote attackers to inject arbitrary web script or HTML via 1 the having parameter in a manage action to index.php; 2 the Email field in an Add User action; 3 the Customer Name field in an Add...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in SimpleInvoices before stable-2012-1-CIS3000 allow remote attackers to inject arbitrary web script or HTML via 1 the having parameter in a manage action to index.php; 2 the Email field in an Add User action; 3 the Customer Name field in an Add...

CVE-2012-4932

Multiple cross-site scripting XSS vulnerabilities in SimpleInvoices before stable-2012-1-CIS3000 allow remote attackers to inject arbitrary web script or HTML via 1 the having parameter in a manage action to index.php; 2 the Email field in an Add User action; 3 the Customer Name field in an Add...

SimpleInvoices 2011.1 Cross-Site-Scripting (XSS) Vulnerabilities CVE-2012-4932

Overview SimpleInvoices 2011.1 is vulnerable to Cross-site Scripting XSS. Software Description Simple Invoices is a free, open source, web based invoicing system that you can install on your server/pc or have hosted by one of our services providers. Vulnerability Overview The vulnerabilities POC...

SimpleInvoices 2011.1 Cross Site Scripting

Overview SimpleInvoices 2011.1 is vulnerable to Cross-site Scripting XSS. Software Description Simple Invoices is a free, open source, web based invoicing system that you can install on your server/pc or have hosted by one of our services providers. Vulnerability Overview The vulnerabilities POC...

Threat Outbreak Alert: Fake Invoice Statement Attachment Email Messages on April 15, 2014

Medium Alert ID: 27077 First Published: 2012 October 1 21:39 GMT Last Updated: 2014 April 16 11:23 GMT Version: 78 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an invoice statement for the recipient. The text in the email message...

Sql injection

Multiple SQL injection vulnerabilities in application/core/MYModel.php in MyClientBase 0.12 allow remote attackers to execute arbitrary SQL commands via the 1 invoicenumber or 2 tags parameter to index.php/invoicesearch...

MyClientBase v0.12 - Multiple Vulnerabilities

Exploit for php platform in category web applications Title: ====== MyClientBase v0.12 - Multiple Web Vulnerabilities Introduction: ============= MyClientBase is a simple, intuitive, free and open source web based invoice management system developed with freelancers in mind. MCB is and always wil...

MyClientBase 0.12 - Multiple Vulnerabilities

Title: ====== MyClientBase v0.12 - Multiple Web Vulnerabilities Date: ===== 2012-04-30 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=511 VL-ID: ===== 511 Introduction: ============= MyClientBase is a simple, intuitive, free and open source web based invoice management...

MyClientBase v0.12 - Multiple Web Vulnerabilities

Document Title: =============== MyClientBase v0.12 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=511 Release Date: ============= 2012-04-29 Vulnerability Laboratory ID VL-ID: ==================================== 511 Commo...

MyClientBase v0.12 - Multiple Web Vulnerabilities

Document Title: =============== MyClientBase v0.12 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=511 Release Date: ============= 2012-04-29 Vulnerability Laboratory ID VL-ID: ==================================== 511 Commo...

PicoPublisher 2.0 - SQL Injection

Exploit Title : PicoPublisher v2.0 Remote SQL injection Date : 29/03/2012 Author : ZeTH Contact : zeth/at/hacktheplan8/dot/com http://www.hacktheplan8.com Vendor : Pico Software Site : http://pico.no/ Version : 2.0 Price : $29,00 Dork : intext:"Drives med PicoPublisher"...

Invoice Manager CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: Invoice Manager CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/invoice-manager-by-stivasoft/31738/ Category:: webapps Demo : http://www.phpjabbers.com/demo/im15/admin.php Greetz: Inj3ct0r Explo...

Booking System for Planyo Multiple VUlnerabilty

Exploit for php platform in category web applications =============================================== Booking System for Planyo Multiple VUlnerabilty =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 ...

Netartmedia iBoutique.MALL - SQL Injection

Netartmedia iBoutique.MALL - SQL Injection Name : Netartmedia iBoutique.MALL SQLi Vulnerability Date : june, 28 2010 Critical Level : HIGH Vendor Url : http://www.netartmedia.net/mall/ Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd...