CVE-2009-4859

Multiple cross-site scripting XSS vulnerabilities in Online Work Order Suite OWOS Lite Edition 3.10 allow remote attackers to inject arbitrary web script or HTML via the show parameter to 1 default.asp and 2 report.asp, and the 3 go parameter to login.asp...

CVE-2009-4859

CVE-2009-4859 affects Online Work Order Suite (OWOS) Lite Edition 3.10. The connected documents confirm multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via the show parameter to default.asp and report.asp, and via the go param...

Burning Board Lite 1.0.2 Shell Upload Vulnerability

Exploit for php platform in category web applications =================================================== Burning Board Lite 1.0.2 Shell Upload Vulnerability =================================================== =======================================================================================...

Burning Board Lite 1.0.2 - Arbitrary File Upload

Burning Board Lite 1.0.2 - Arbitrary File Upload ======================================================================================== | Title : Burning Board Lite 1.0.2 Upload Shell Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Script : Power...

Burning Board Lite 1.0.2 - Arbitrary File Upload

======================================================================================== | Title : Burning Board Lite 1.0.2 Upload Shell Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Script : Powered by Burning Board Lite 1.0.2 | Tested on: windo...

CVE-2010-1529

SQL injection vulnerability in the Freestyle FAQs Lite comfsf component, possibly 1.3, for Joomla! allows remote attackers to execute arbitrary SQL commands via the faqid parameter in an faq action to index.php...

Sql injection

SQL injection vulnerability in the Freestyle FAQs Lite comfsf component, possibly 1.3, for Joomla! allows remote attackers to execute arbitrary SQL commands via the faqid parameter in an faq action to index.php...

CVE-2010-1529

The CVE-2010-1529 issue affects the Freestyle FAQs Lite (com_fsf) Joomla! extension, specifically versions around 1.3. The vulnerability is a SQL injection in the FAQ action when handling the faqid parameter in index.php, allowing remote attackers to execute arbitrary SQL commands. The connected ...

Multiple vulnerabilities in AdaptCMS Lite

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in AdaptCMS Lite which could be exploited to perform cross-site request forgery and cross-site scripting attacks. 1 Cross-site request forgery CSRF in AdaptCMS Lite The vulnerability exists due to insufficient...

Joomla Freestyle FAQ Lite 1.3 SQL Injection

--------------------------------------------------------------------------------- Joomla Freestyle FAQ Lite Component 1.3 faqid SQL Injection --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group : LatinHackTeam Email & msn :...

Joomla! Component Freestyle FAQ Lite 1.3 - 'faqid' SQL Injection

--------------------------------------------------------------------------------- Joomla Freestyle FAQ Lite Component 1.3 faqid SQL Injection --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group : LatinHackTeam Email & msn :...

Joomla Freestyle FAQ Lite Component 1.3 com_fss (faqid) SQL Injection

Exploit for php platform in category web applications =================================================================================== Joomla Freestyle FAQ Lite Component 1.3 comfss faqid SQL Injection Vulnerability...

Joomla! Component Freestyle FAQ Lite 1.3 - faqid SQL Injection

Joomla! Component Freestyle FAQ Lite 1.3 - faqid SQL Injection --------------------------------------------------------------------------------- Joomla Freestyle FAQ Lite Component 1.3 faqid SQL Injection --------------------------------------------------------------------------------- Author :...

Remember Aurora–and Other Botnets

Last night my attention was drawn to a couple of blog entries relating to Google and the attacks they fell victim to earlier this year. These attacks were eventually labeled as “Operation Aurora” by McAfee based upon the presence of the “aurora” keyword embedded within some of the malware. First...

AdaptCMS Lite 1.5 Cross Site Request Forgery

=========================================================================== Topic : AdaptCMSLite1.5 2009-07-07 Bug type : change admin user,passwd & add new admin user exploit Download : http://sourceforge.net/projects/adaptcms/files/AdaptCMS%20Lite%20v1/1.5/AdaptCMSLite1.5.zip/download Advisory ...

AdaptCMS Lite 1.5 - Arbitrary Add Admin

AdaptCMS Lite 1.5 - Arbitrary Add Admin =========================================================================== Topic : AdaptCMSLite1.5 2009-07-07 Bug type : change admin user,passwd & add new admin user exploit Download :...

Woltlab Burning Board Lite Addon SQL Injection

.-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-. Woltlab Burning Board Lite Addon lexikon.php SQL Injection Vulnerability .-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-. + Autor: n3w7u + Vulnerabilities SQL Injection + Page:...

Woltlab Burning Board Lite Addon - 'lexikon.php' SQL Injection

.-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-. Woltlab Burning Board Lite Addon lexikon.php SQL Injection Vulnerability .-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-. + Autor: n3w7u + Vulnerabilities SQL Injection + Page:...

Media Player 6.4.9.1 Denial Of Service

Exploit Title: Media Player V6.4.9.1 with K-Lite Codec Pack DoS/Crash .avi file Date: 14/3/2010 Author: En|gma7 Software Link: http://www.free-codecs.com/Klitecodecpackdownload.htm Version: Media Player V6.4.9.1 with K-Lite Codec Pack 5.8.0 Tested on: WinXP/Vista CVE : if exists Code :...

Embedthis Appweb 3.1.2 Denial Of Service

!/usr/bin/perl +------------------------------------------------------------------------+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | | .'xxxxxxxxxxxxxxxxxxxxx''...... ... .....