e107 User Journals Menu SQL Injection

e107 Plugin userjournalsmenu blog.id SQL injection vulnerability Author : boom3rang Greetz : H!tm@N, KHG, chs, redc00de Vulnerability : Remote SQL-injection Google Dork : inurl:"userjournals.php?blog." -------------------------------------------------- ! Product Site : http://www.bugrain.com !...

Unfixed XSS vulnerability at medwelljournals.com

Security researcher Stacker, has submitted on 30/10/2008 a cross-site-scripting XSS vulnerability affecting medwelljournals.com, which at the time of submission ranked 233067 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is...

Unfixed XSS vulnerability at www.traveljournals.net

Security researcher xylitol, has submitted on 20/06/2008 a cross-site-scripting XSS vulnerability affecting www.traveljournals.net, which at the time of submission ranked 34549 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2008. It is...

Yektaweb Academic Web Tools CMS 1.4.2.8 - Multiple Vulnerabilities

Yektaweb Academic Web Tools CMS 1.4.2.8 - Multiple Vulnerabilities www.BugReport.ir AmnPardaz Security Research Team Title: Academic Web Tools CMS Multiple Vulnerabilities Vendor: www.yektaweb.com Vulnerable Version: 1.4.2.8 and prior versions Exploit: Available Impact: Medium Fix: N/A Original...

academic-sqlxss.txt

www.BugReport.ir AmnPardaz Security Research Team Title: Academic Web Tools CMS Multiple Vulnerabilities Vendor: www.yektaweb.com Vulnerable Version: 1.4.2.8 and prior versions Exploit: Available Impact: Medium Fix: N/A Original Advisory: www.bugreport.ir/?/44 1. Description: ACADEMIC WEB TOOLS A...

CVE-2006-5741

Multiple cross-site scripting XSS vulnerabilities in AirMagnet Enterprise before 7.5 build 6307 allow remote attackers to inject arbitrary web script or HTML via 1 the 404 error page of the Smart Sensor Edge Sensor; 2 the user name for a failed logon, when displayed in the audit journals reviewin...

CVE-2006-5741

Multiple cross-site scripting XSS vulnerabilities in AirMagnet Enterprise before 7.5 build 6307 allow remote attackers to inject arbitrary web script or HTML via 1 the 404 error page of the Smart Sensor Edge Sensor; 2 the user name for a failed logon, when displayed in the audit journals reviewin...

CVE-2006-5306

Multiple PHP remote file inclusion vulnerabilities in the Journals System module 1.0.2 RC2 and earlier for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter in 1 includes/journalsdelete.php, 2 includes/journalspost.php, or 3...

CVE-2006-5306

The CVE-2006-5306 entry concerns multiple PHP remote file inclusion flaws in the Journals System module for phpBB (version 1.0.2 RC2 and earlier). The vulnerability allows remote code execution by supplying a URL to the phpbb_root_path parameter in includes/journals_delete.php, includes/journals_...

phpBB Journals System Mod 1.0.2 RC2 - Remote File Inclusion

phpBB Journals System Mod 1.0.2 RC2 - Remote File Inclusion !/usr/bin/perl Journals System Independant Journals System for phpBB Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://projects.nbishop.name/phpbb/files/journalssystem1.0.2.z...

phpBB Journals System Mod 1.0.2 [RC2] Remote File Include Exploit

No description provided by source. !/usr/bin/perl Journals System Independant Journals System for phpBB Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://projects.nbishop.name/phpbb/files/journalssystem1.0.2.zip use IO::Socket; use...

phpBB Journals System Mod 1.0.2 RC2 - Remote File Inclusion

!/usr/bin/perl Journals System Independant Journals System for phpBB Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://projects.nbishop.name/phpbb/files/journalssystem1.0.2.zip use IO::Socket; use LWP::Simple;...

phpBB Journals System Mod 1.0.2 [RC2] Remote File Include Exploit

Exploit for unknown platform in category web applications ================================================================= phpBB Journals System Mod 1.0.2 RC2 Remote File Include Exploit ================================================================= !/usr/bin/perl Journals System Independant...

CVE-2006-4086

Cross-site scripting XSS vulnerability in index.php in Elaine Aquino Online Zone Journals OZJournals 1.5 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party...

AOL Journals BlogID敏感信息泄露漏洞

AOL Journals是一款美国在线的BLOG系统 AOL Journals的Atom/RSS feed选项存在问题，远程攻击者可以利用这个漏洞获得用户帐户及相关EMAIL地址信息。 AOL Journals包含一个连接允许用户获得Atom或者RSS Feed，其中包含用户feed的全部路径，攻击者可以通过连接，增加 BlogID号码，短时间获得大量用户的EMAIL帐户信息 AOL Journals 厂商补丁： AOL --- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://journals.aol.com/...