DVD-Lab Studio 1.25 - .DAL File Open Crash

DVD-Lab Studio 1.25 - .DAL File Open Crash DVD-Lab Studio 1.25 DAL File Open Crash =================================================================================== Exploit Title:DVD-Lab Studio 1.25 Malicious DAL File Denial of service Download...

DVD-Lab Studio 1.25 - '.DAL' File Open Crash

DVD-Lab Studio 1.25 DAL File Open Crash =================================================================================== Exploit Title:DVD-Lab Studio 1.25 Malicious DAL File Denial of service Download link:http://download.cnet.com/DVD-Lab-Studio/3000-79704-10391372.html Author: Ahmed Elhady...

DVD-Lab Studio 1.25 Crash

DVD-Lab Studio 1.25 DAL File Open Crash =================================================================================== Exploit Title:DVD-Lab Studio 1.25 Malicious DAL File Denial of service Download link:http://download.cnet.com/DVD-Lab-Studio/3000-79704-10391372.html Author: Ahmed Elhady...

backupDB() v1.2.7a (onlyDB) Remote XSS Vulnerability

Summary backupDB is a PHP script that backs up MySQL tables and databases to a file uncompressed, gzip, bzip2 for easy daily backup. Description backupDB is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to...

CLscript CMS v3.0 - Multiple Web Vulnerabilities

Document Title: =============== CLscript CMS v3.0 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=574 Release Date: ============= 2012-05-15 Vulnerability Laboratory ID VL-ID: ==================================== 574 Common...

Coupon Script v6.0 - SQL Injection Vulnerability

Document Title: =============== Coupon Script v6.0 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=572 Release Date: ============= 2012-05-15 Vulnerability Laboratory ID VL-ID: ==================================== 572 Common...

XSS in PrestaShop

High-Tech Bridge SA Security Research Lab has discovered vulnerability in PrestaShop, which can be exploited to perform Cross-Site Scripting XSS attacks. 1 Cross-Site Scripting XSS in PrestaShop Input passed via the "product" POST parameter to ajax.php is not properly sanitised before being...

Andromeda Streaming MP3 Server v1.9.3.6 (s param) Remote XSS Vulnerability

Summary Turn your MP3 collection into an MP3 server. Simply add a single PHP or ASP script to any folder within your site. Now you can browse and play the contents of that folder - over the Web, or over your local network. Description Andromeda is prone to a cross-site scripting vulnerability. Th...

AnvSoft Any Video Converter 4.3.6 Stack Overflow

!/usr/bin/python Exploit Title: AnvSoft Any Video Converter 4.3.6 Stack Overflow Author: cikumel @mhxx and y0k @riy0wid from @spentera research Website: http://www.spentera.com Platform: Windows Tested on: Windows XP SP3 Based on POC by Vulnerability-Lab http://www.exploit-db.com/exploits/18717/...

AnvSoft Any Video Converter 4.3.6 - Local Stack Overflow

AnvSoft Any Video Converter 4.3.6 - Local Stack Overflow !/usr/bin/python Exploit Title: AnvSoft Any Video Converter 4.3.6 Stack Overflow Author: cikumel @mhxx and y0k @riy0wid from @spentera research Website: http://www.spentera.com Platform: Windows Tested on: Windows XP SP3 Based on POC by...

Baby Gekko CMS v1.1.5c Multiple Stored XSS Vulnerabilities

Exploit for php platform in category web applications Baby Gekko CMS v1.1.5c Multiple Stored Cross-Site Scripting Vulnerabilities Vendor: Baby Gekko, Inc. Product web page: http://www.babygekko.com Affected version: 1.1.5c Summary: BabyGekko strives to deliver high quality websites and other web...

Baby Gekko CMS 1.1.5c - Multiple Persistent Cross-Site Scripting Vulnerabilities

Baby Gekko CMS 1.1.5c - Multiple Persistent Cross-Site Scripting Vulnerabilities Baby Gekko CMS v1.1.5c Multiple Stored Cross-Site Scripting Vulnerabilities Vendor: Baby Gekko, Inc. Product web page: http://www.babygekko.com Affected version: 1.1.5c Summary: BabyGekko strives to deliver high...

AnvSoft Any Video Converter 4.3.6 Stack Overflow Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: AnvSoft Any Video Converter 4.3.6 Stack Overflow Author: cikumel @mhxx and y0k @riy0wid from @spentera research Website: http://www.spentera.com Platform: Windows Tested on: Windows XP SP3 Based on POC by...

Baby Gekko CMS 1.1.5c - Multiple Persistent Cross-Site Scripting Vulnerabilities

Baby Gekko CMS v1.1.5c Multiple Stored Cross-Site Scripting Vulnerabilities Vendor: Baby Gekko, Inc. Product web page: http://www.babygekko.com Affected version: 1.1.5c Summary: BabyGekko strives to deliver high quality websites and other web content fast and easy for all end users. It is a...

China Ministry Of Commerce SQL Injection

Title: ====== China Ministry of Commerce - SQL Injection Vulnerability Date: ===== 2012-05-01 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=321 VL-ID: ===== 321 Introduction: ============= The Ministry of Commerce MOFCOM; Chinese: 商务部 Pinyin: shāngwù bù of the People ...

C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability

Title: ====== C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability Date: ===== 2012-04-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=484 VL-ID: ===== 484 Introduction: ============= XPhone Unified Communications 2011 ist die leistungsstarkste Telefonie- und...

GENU CMS 2012.3 - Multiple SQL Injections

GENU CMS 2012.3 - Multiple SQL Injections Title: ====== GENU CMS 2012.3 - Multiple SQL Injection Vulnerabilities Date: ===== 2012-04-30 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=538 VL-ID: ===== 538 Introduction: ============= GENU is a Content Management System...

Format Factory - Multiple Buffer Overflow Vulnerabilities

Document Title: =============== Format Factory - Multiple Buffer Overflow Vulnerabilities References: =========== Download: http://www.vulnerability-lab.com/resources/videos/539.wmv View: http://www.youtube.com/watch?v=AttylUIjY Article: http://www.vulnerability-lab.com/getcontent.php?id=539...

DIY CMS 1.0 Poll - Multiple Vulnerabilities

DIY CMS 1.0 Poll - Multiple Vulnerabilities Title: ====== DIY CMS v1.0 Poll - Multiple Web Vulnerabilities Date: ===== 2012-04-26 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=518 VL-ID: ===== 518 Introduction: ============= Do It Yourslef Content Management System is...

C4B XPhone UC Web 4.1.890S R1 - Cross-Site Scripting

Title: ====== C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability Date: ===== 2012-04-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=484 VL-ID: ===== 484 Introduction: ============= XPhone Unified Communications 2011 ist die leistungsstärkste Telefonie- und...