4227 matches found
BitWeaver Framework v2.8.1 - Multiple Web Vulnerabilities
Document Title: =============== BitWeaver Framework v2.8.1 - Multiple Web Vulnerabilities Release Date: ============= 2011-07-31 Vulnerability Laboratory ID VL-ID: ==================================== 71 Product & Service Introduction: =============================== bitweaver is an application...
osCommerce v2.3.x - Multiple Cross Site Vulnerabilities
Document Title: =============== osCommerce v2.3.x - Multiple Cross Site Vulnerabilities Release Date: ============= 2011-07-31 Vulnerability Laboratory ID VL-ID: ==================================== 241 Product & Service Introduction: =============================== osCommerce has attracted a lar...
GBook PHP Guestbook 1.7 Cross Site Scripting
Vulnerability ID: HTB23028 Reference: http://www.htbridge.ch/advisory/multiplexssingbookphpguestbook.html Product: GBook PHP guestbook Vendor: PHPJunkyar http://www.phpjunkyard.com Vulnerable Version: 1.7 and probably prior Tested on: 1.7 Vendor Notification: 06 July 2011 Vulnerability Type: XSS...
iCube Lab SQL Injection
IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability iCube Lab productdetails.php?catid AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.icubelab.com/ Persian Gulf 4 Ever! Dork : "Powered by iCube Lab"...
Module DevicePowerOn power on failed
Challenge Cause Veeam B&R creates the new adaptor with settings specified in Virtual Lab properties, however it also forces the old MAC address to be used as you see in the vmx file of a restored machine, that's why VM fails to power on as it's expecting to see mac address from VMware range. When...
Online Grades 3.2.5 Multiple XSS Vulnerabilities
Summary Online Grades is the leading free-software project that allows K-12+ student grades attendance information to be posted onto a dynamic web site. Description Online Grades suffers from multiple cross-site scripting vulns. The issue is triggered when input passed via multiple parameters to...
SolveDirect SDcall v5.6.x - Multiple Web Vulnerabilities
Document Title: =============== SolveDirect SDcall v5.6.x - Multiple Web Vulnerabilities Release Date: ============= 2011-07-24 Vulnerability Laboratory ID VL-ID: ==================================== 122 Product & Service Introduction: =============================== ITIL konformes best practice...
SmartFTP v4.0.1190/4 - Local Buffer Overflow Vulnerability
Document Title: =============== SmartFTP v4.0.1190/4 - Local Buffer Overflow Vulnerability Release Date: ============= 2011-07-21 Vulnerability Laboratory ID VL-ID: ==================================== 127 Product & Service Introduction: =============================== SmartFTP is an FTP File...
SmartFTP v4.0.1190/4 - Local Buffer Overflow Vulnerability
Document Title: =============== SmartFTP v4.0.1190/4 - Local Buffer Overflow Vulnerability Release Date: ============= 2011-07-21 Vulnerability Laboratory ID VL-ID: ==================================== 127 Product & Service Introduction: =============================== SmartFTP is an FTP File...
SQL injection in Social Slider
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Social Slider, which can be exploited to perform SQL injection attacks. 1 SQL Injection Vulnerability in Social Slider Input passed via the "rA" POST parameter to /wp-content/plugins/social-slider-2/ajax.php is not properly...
AlegroCart 1.2.6 - SQL Injection Vulnerability
Document Title: =============== AlegroCart 1.2.6 - SQL Injection Vulnerability Release Date: ============= 2011-07-19 Vulnerability Laboratory ID VL-ID: ==================================== 3 Product & Service Introduction: =============================== AlegroCart v1.2.1 is a shop cms what is...
Manageengine Opmanager v8.8 - SQL Injection Vulnerability
Document Title: =============== Manageengine Opmanager v8.8 - SQL Injection Vulnerability Release Date: ============= 2011-07-19 Vulnerability Laboratory ID VL-ID: ==================================== 200 Product & Service Introduction: =============================== Network performance...
Tugux CMS 1.2 (pid) arbitrary file deletion defect and repair-vulnerability warning-the black bar safety net
Tugux CMS 1.2 pid Remote Arbitrary File Deletion Vulnerability Vendor: Tugux Studios Product web page: http://www.tugux.com Affected version: 1.2 Summary: Tugux CMS is a free open source content management system CMS and application that powers the entire web. Desc: Input passed to the 'pid'...
OmniSecure v7.x DLX - Multiple SQL Injection Vulnerabilities
Document Title: =============== OmniSecure v7.x DLX - Multiple SQL Injection Vulnerabilities Release Date: ============= 2011-07-15 Vulnerability Laboratory ID VL-ID: ==================================== 101 Product & Service Introduction: =============================== One Click Folder Protecti...
PG eLms Pro vDEC_2007_01 - Multiple Blind SQL Injections
PG eLms Pro vDEC200701 - Multiple Blind SQL Injections PG eLMS Pro vDEC200701 Multiple Blind SQL Injection Vulnerabilities Vendor: PilotGroup Ltd Product web page: http://www.elmspro.com Affected version: DEC200701 Summary: eLMS Pro solution is an outstanding and yet simple Learning Management...
PG eLms Pro vDEC_2007_01 - contact_us.php Multiple POST Cross-Site Scripting Vulnerabilities
PG eLms Pro vDEC200701 - contactus.php Multiple POST Cross-Site Scripting Vulnerabilities PG eLMS Pro vDEC200701 contactus.php Multiple POST XSS Vulnerabilities scrip...
PG eLMS Pro vDEC_2007_01 (contact_us.php) Multiple POST XSS
Exploit for php platform in category web applications PG eLMS Pro vDEC200701 contactus.php Multiple POST XSS Vulnerabilities body bgcolo...
PG eLMS Pro DEC_2007_01 Cross Site Scripting
PG eLMS Pro vDEC200701 contactus.php Multiple POST XSS Vulnerabilities function xss1document.forms"xss".submit; form ac...
TCExam 11.2.011 SQL Injection
TCExam =11.2.011 Multiple SQL Injection Vulnerabilities Vendor: Tecnik.com s.r.l. Product web page: http://www.tcexam.org Affected version: 11.2.009, 11.2.010 and 11.2.011 Summary: TCExam is a FLOSS system for electronic exams also know as CBA - Computer-Based Assessment, CBT - Computer-Based...
