622 matches found
Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities
Document Title: =============== Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1120 Release Date: ============= 2013-10-25 Vulnerability Laboratory ID VL-ID: ==================================...
Ubuntu 11.10 / 12.04 LTS / 12.10 : haproxy vulnerabilities (USN-1800-1)
It was discovered that HAProxy incorrectly handled configurations where global.tune.bufsize was set to a value higher than the default. A remote attacker could use this issue to cause a denial of service, or possibly execute arbitrary code. CVE-2012-2942 Yves Lafon discovered that HAProxy...
Cross site scripting
Cross-site scripting XSS vulnerability in Final Beta Laboratory MyWebSearch before 1.23 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...
CVE-2012-4018
Cross-site scripting XSS vulnerability in Final Beta Laboratory MyWebSearch before 1.23 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...
Worry-free shopping system ASP professional version injection vulnerability-vulnerability warning-the black bar safety net
Dark clouds to see, and edit it.. Google keywords: inurl:views. asp? hwid= Injection point: www.myhack58.com/views.asp?hwid=512 ! POST injection vulnerability !...
Kerry friends of Science and technology cms upload vulnerability-vulnerability warning-the black bar safety net
The program uses the upload page uploadfile. asp not be verified, leading to the establishment of malformations directory upload image the Trojans get a shell vulnerability. Google keywords: inurl:newslist. asp? NodeCode= exp: the...
CVE-2010-5096
Multiple SQL injection vulnerabilities in MyBB (MyBulletinBoard) before 1.6.1 allow remote attackers to execute arbitrary SQL commands via the keywords parameter in do_search (search.php) or do_stuff (private.php). Vendor disputes claim of true SQL injection, noting it may only produce general SQ...
JVN#51769987: Yahoo! Toolbar (for Chrome, Safari) vulnerable to toolbar alteration
Yahoo! Toolbar for Chrome, Safari contains a vulnerability where the toolbar may be altered when visiting a specially crafted web page. Impact A remote attacker may alter the toolbar. As a result, keywords entered in the toolbar may be leaked to a third party. Solution Update the software Update ...
Social Engine 4 Cross Site Scripting
===================================================== Social Engine 4 Persistent XSS & Non-Persistent XSS ===================================================== :----------------------------------------------------------------------------------------------------------------------------------------...
CVE-2012-3805
Multiple cross-site scripting XSS vulnerabilities in the getAllPassedParams function in system/functions.php in Kajona before 3.4.2 allow remote attackers to inject arbitrary web script or HTML via the 1 absendername, 2 absenderemail, or 3 absendernachricht parameter to the content page; 4...
Supernews 2.6.1 SQL Injection
?php Exploit Title: Supernews = 2.6.1 SQL Injection Exploit Google Dork: intext:"2003 - 2004 : SuperNews : Todos os direitos reservados" Date: 2012/ Author: WhiteCollarGroup Software Link: http://phpbrasil.com/script/vT0FaOCySSH/supernews Version: 2.6.1 Tested on: Debian GNU/Linux / Exploit for...
Orion Browser Dumper v1.0 released
Orion Browser Dumper v1.0 released Jean-Pierre LESUEUR DarkCoderSc releases another Browser Forensic tool for Community called "Orion Browser Dumper v1.0". This software is an advanced local browser history extractor dumper, in less than few seconds like for Browser Forensic Tool it will extract...
Browser Forensic Tool v2.0 - Advanced browser history search engine
Browser Forensic Tool v2.0 - Advanced browser history search engine Browser Forensic Tool v2.0 , Developed by DarkCoderSc Jean-Pierre LESUEUR ,is an advanced local browser history search engine, in less than few seconds it will extract the chosen keywords of most famous web browser, actually...
Coppermine 1.5.18 Cross Site Scripting / Path Disclosure
waraxe-2012-SA081 - Multiple Vulnerabilities in Coppermine 1.5.18 ============================================================================== Author: Janek Vind "waraxe" Date: 29. March 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-81.html Affected Software: Coppermine is a...
CVE-2011-4865
The Tencent WBlog com.tencent.WBlog 3.3.1 and MicroBlogPad 1.4.0 applications for Android do not properly protect data, which allows remote attackers to read or modify message drafts and search keywords via a crafted application...
Code injection
The Tencent WBlog com.tencent.WBlog 3.3.1 and MicroBlogPad 1.4.0 applications for Android do not properly protect data, which allows remote attackers to read or modify message drafts and search keywords via a crafted application...
CVE-2011-4865
The Tencent WBlog com.tencent.WBlog 3.3.1 and MicroBlogPad 1.4.0 applications for Android do not properly protect data, which allows remote attackers to read or modify message drafts and search keywords via a crafted application...
EspCms site system injection vulnerability-vulnerability warning-the black bar safety net
Baidu keywords: inurl:index. php? ac=article&at=read&did= The injection pointburst table prefix: index. php? ac=search&at=taglist&tagkey=%2 5 2 7,tags orselect 1 fromselect count,concatselect select concat0x7e,0x27,tablename,0x27,0x7e from informationschema. the tables where tableschema=database...
CVE-2010-4973
Cross-site scripting XSS vulnerability in the search feature in Campsite 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the fsearchkeywords parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...