847 matches found
Kerry friends of Science and technology cms upload vulnerability-vulnerability warning-the black bar safety net
The program uses the upload page uploadfile. asp not be verified, leading to the establishment of malformations directory upload image the Trojans get a shell vulnerability. Google keywords: inurl:newslist. asp? NodeCode= exp: the...
PT-2012-3382
Name of the Vulnerable Software and Affected Versions Coppermine Photo Gallery versions prior to 1.5.20 Description A cross-site scripting XSS issue exists, allowing remote authenticated users with certain privileges to inject arbitrary web script or HTML via the keywords parameter in the edit on...
CVE-2012-1613: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in editonepic.php in Coppermine Photo Gallery before 1.5.20 allows remote authenticated users with certain privileges to inject arbitrary web script or HTML via the keywords parameter...
CVE-2010-5096
Multiple SQL injection vulnerabilities in MyBB (MyBulletinBoard) before 1.6.1 allow remote attackers to execute arbitrary SQL commands via the keywords parameter in do_search (search.php) or do_stuff (private.php). Vendor disputes claim of true SQL injection, noting it may only produce general SQ...
CVE-2010-5096: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in MyBB aka MyBulletinBoard before 1.6.1 allow remote attackers to execute arbitrary SQL commands via the keywords parameter in a 1 dosearch action to search.php or 2 dostuff action to private.php. NOTE: the vendor disputes this issue, saying "Although this...
JVN#51769987: Yahoo! Toolbar (for Chrome, Safari) vulnerable to toolbar alteration
Yahoo! Toolbar for Chrome, Safari contains a vulnerability where the toolbar may be altered when visiting a specially crafted web page. Impact A remote attacker may alter the toolbar. As a result, keywords entered in the toolbar may be leaked to a third party. Solution Update the software Update ...
Social Engine 4 Cross Site Scripting
===================================================== Social Engine 4 Persistent XSS & Non-Persistent XSS ===================================================== :----------------------------------------------------------------------------------------------------------------------------------------...
CVE-2012-3805
Multiple cross-site scripting XSS vulnerabilities in the getAllPassedParams function in system/functions.php in Kajona before 3.4.2 allow remote attackers to inject arbitrary web script or HTML via the 1 absendername, 2 absenderemail, or 3 absendernachricht parameter to the content page; 4...
Supernews 2.6.1 SQL Injection
?php Exploit Title: Supernews = 2.6.1 SQL Injection Exploit Google Dork: intext:"2003 - 2004 : SuperNews : Todos os direitos reservados" Date: 2012/ Author: WhiteCollarGroup Software Link: http://phpbrasil.com/script/vT0FaOCySSH/supernews Version: 2.6.1 Tested on: Debian GNU/Linux / Exploit for...
Orion Browser Dumper v1.0 released
Orion Browser Dumper v1.0 released Jean-Pierre LESUEUR DarkCoderSc releases another Browser Forensic tool for Community called "Orion Browser Dumper v1.0". This software is an advanced local browser history extractor dumper, in less than few seconds like for Browser Forensic Tool it will extract...
Browser Forensic Tool v2.0 - Advanced browser history search engine
Browser Forensic Tool v2.0 - Advanced browser history search engine Browser Forensic Tool v2.0 , Developed by DarkCoderSc Jean-Pierre LESUEUR ,is an advanced local browser history search engine, in less than few seconds it will extract the chosen keywords of most famous web browser, actually...
Coppermine 1.5.18 Cross Site Scripting / Path Disclosure
waraxe-2012-SA081 - Multiple Vulnerabilities in Coppermine 1.5.18 ============================================================================== Author: Janek Vind "waraxe" Date: 29. March 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-81.html Affected Software: Coppermine is a...
CVE-2011-4865
The Tencent WBlog com.tencent.WBlog 3.3.1 and MicroBlogPad 1.4.0 applications for Android do not properly protect data, which allows remote attackers to read or modify message drafts and search keywords via a crafted application...
Code injection
The Tencent WBlog com.tencent.WBlog 3.3.1 and MicroBlogPad 1.4.0 applications for Android do not properly protect data, which allows remote attackers to read or modify message drafts and search keywords via a crafted application...
CVE-2011-4865
The Tencent WBlog com.tencent.WBlog 3.3.1 and MicroBlogPad 1.4.0 applications for Android do not properly protect data, which allows remote attackers to read or modify message drafts and search keywords via a crafted application...
PT-2012-1970
Name of the Vulnerable Software and Affected Versions Tencent WBlog version 3.3.1 MicroBlogPad version 1.4.0 Description The issue allows remote attackers to read or modify message drafts and search keywords via a crafted application, due to improper data protection. Recommendations For Tencent...
EspCms site system injection vulnerability-vulnerability warning-the black bar safety net
Baidu keywords: inurl:index. php? ac=article&at=read&did= The injection pointburst table prefix: index. php? ac=search&at=taglist&tagkey=%2 5 2 7,tags orselect 1 fromselect count,concatselect select concat0x7e,0x27,tablename,0x27,0x7e from informationschema. the tables where tableschema=database...
CVE-2010-4973
Cross-site scripting XSS vulnerability in the search feature in Campsite 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the fsearchkeywords parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
PT-2011-1908
Name of the Vulnerable Software and Affected Versions Campsite version 3.4.0 Description A cross-site scripting XSS issue exists in the search feature, allowing remote attackers to inject arbitrary web script or HTML via the f search keywords parameter. Recommendations For version 3.4.0, avoid...