Adobe - U3D CLODProgressiveMeshDeclaration Array Overrun (Metasploit) (2)

$Id: adobeu3dmeshdecl.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Code injection

phpgwapi/js/fckeditor/editor/dialog/fckspellerpages/spellerpages/serverscripts/spellchecker.php in EGroupware 1.4.001+.002; 1.6.001+.002 and possibly other versions before 1.6.003; and EPL 9.1 before 9.1.20100309 and 9.2 before 9.2.20100309; allows remote attackers to execute arbitrary commands v...

Adobe - FlateDecode Stream Predictor 02 Integer Overflow (Metasploit) (1)

$Id: adobeflatedecodepredictor02.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Ecshop2.7.2持久型XSS（可获得管理员帐号）

简要描述： 个人资料修改时，Javascript代码过滤不够严格，XSS代码直接进入数据库 详细说明： 密码保护问题这一项，没有使用正则过滤，其他的的都有正则过滤。我们可以在密码保护问题里输入XSS，但是后台查看会员资料是不显示密码保护问题的，所以这里必须要网站后台添加了新的 “会员注册项”时，后台查看资料就会显示了，此处填入一段引入外部js的代码:" 外部test.js文件内容如下 Ajax.call'privilege.php?act=update','id=1&username=heihei&[email protected]','',"POST","JSON"; 漏洞证明：...

Joomla! Component Restaurant Guide 1.0.0 - Multiple Vulnerabilities

Joomla! Component Restaurant Guide 1.0.0 - Multiple Vulnerabilities Exploit Title: Joomla Component comrestaurantguide Multiple Vulnerabilities Date: 18.09.2010 Author: Valentin Category: webapps/0day Version: 1.0.0 Tested on: Debian lenny, Apache2, MySQL 5, Joomla 1.5.x CVE : Code :...

JVN#35605523: Cross-site scripting vulnerability in Access Analyzer CGI by futomi's CGI Cafe

Access Analyzer CGI provided by futomi's CGI Cafe is a software to analyze web access logs. Access Analyzer CGI contains a cross-site scripting vulnerability. This is caused by a particular method in which tags are embedded into the web page. Impact An arbitrary script may be executed on the user...

CentOS Update for seamonkey CESA-2010:0557 centos3 i386

Check for the Version of seamonkey OpenVAS Vulnerability Test CentOS Update for seamonkey CESA-2010:0557 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

CVE-2010-2217

Adobe Flash Media Server FMS before 3.0.6, and 3.5.x before 3.5.4, allows attackers to execute arbitrary code via unspecified vectors, related to a "JS method vulnerability."...

Design/Logic Flaw

Adobe Flash Media Server FMS before 3.0.6, and 3.5.x before 3.5.4, allows attackers to execute arbitrary code via unspecified vectors, related to a "JS method vulnerability."...

Design/Logic Flaw

Adobe Flash Media Server FMS before 3.0.6, and 3.5.x before 3.5.4, allows attackers to cause a denial of service via unspecified vectors, related to a "JS method issue."...

CVE-2010-2217

Adobe Flash Media Server (FMS) is affected by CVE-2010-2217. Versions prior to 3.0.6 and 3.5.x prior to 3.5.4 are vulnerable due to a JavaScript method vulnerability that could allow arbitrary code execution. The NVD and Red Hat entries describe the impact as remote code execution with high sever...

Intellinet IP Camera MNC-L10 - Authentication Bypass

by Magnefikko Discovered: 25.01.2009 Publication: 01.08.2010 [email protected] Promhyl Studies :: http://promhyl.tk Inj3ct0r Team :: http://inj3ct0r.com Subgroup: PRekambr Name: Intellinet IP Camera Admin Access Platform: Intellinet IP Camera MNC-L10 and other ...:: Exploit ::... JS is require...

Joomla JS Jobs 1.0.5.8 SQL Injection

by r0i by r0i by r0i by r0i by r0i by r0i by r0i by r0i by r0i by r0i by r0i by r0i Exploit Title: Joomla Component comjsjobs SQL Injection Vulnerability Date: 31/05/10 Author: http://www.joomsky.com Software Link:...

Joomla! Component JS Jobs 1.0.5.8 - SQL Injection

Joomla! Component JS Jobs 1.0.5.8 - SQL Injection Exploit Title: Joomla Component comjsjobs SQL Injection Vulnerability Date: 31/05/10 Author: http://www.joomsky.com Software Link: http://www.joomsky.com/index.php?option=comrokdownloads&view=file&task=download&id=23%3Ajs-jobs&Itemid=4 Version:...

Joomla! Component JS Jobs 1.0.5.8 - SQL Injection

Exploit Title: Joomla Component comjsjobs SQL Injection Vulnerability Date: 31/05/10 Author: http://www.joomsky.com Software Link: http://www.joomsky.com/index.php?option=comrokdownloads&view=file&task=download&id=23%3Ajs-jobs&Itemid=4 Version: 1.0.5.8 Tested on: Linux ubuntu32 2.6.32-22-generic...

Ane CMS Multiple Vulnerabilities

Exploit for php platform in category web applications ================================ Ane CMS Multiple Vulnerabilities ================================ www.BugReport.ir AmnPardaz Security Research Team Title: AneCMS Multiple Vulnerabilities Vendor: http://anecms.com/ Vulnerable Version: 1.0 Late...

Directory traversal

Directory traversal vulnerability in the Highslide JS comhsconfig component 1.5 and 2.0.9 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-1314

Directory traversal vulnerability in the Highslide JS comhsconfig component 1.5 and 2.0.9 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-1314

Directory traversal vulnerability in the Highslide JS comhsconfig component 1.5 and 2.0.9 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-1314

Joomla! component Highslide JS com_hsconfig (versions 1.5 and 2.0.9) contains a Local File Inclusion via the controller parameter to index.php, enabling a directory traversal (..). This allows reading arbitrary server files. The NUCLEI template confirms the vulnerability and notes remediation as ...