Persistent XSS in Kayako Support Suite

Comodo Group Vendor : Kayako Infotech Ltd. URL : http://www.kayako.com/ Version : Kayako SupportSuite 3.04.10 We've discovered a persistent XSS vulnerability in Kayako Support Suite Version 3.04.10. Although other similar XSS and SQL injection vectors such GET requests/URLs and other vulnerable...

webstudioehotel-sql.txt

Application: WebStudio eHotel Vendor Name: BDigital Media Ltd Vendors Url: http://www.bdigital.biz Bug Type: WebStudio eHotel pageid Blind SQL Injection Vulnerability Exploitation: Remote Severity: Critical Solution Status: Unpatched Google Dork: "Powered by WebStudio" eHotel Description: WebStud...

webstudioecat-sql.txt

Application: WebStudio eCatalogue Vendor Name: BDigital Media Ltd Vendors Url: http://www.bdigital.biz Bug Type: WebStudio eCatalogue pageid Blind SQL Injection Vulnerability Exploitation: Remote Severity: Critical Solution Status: Unpatched Google Dork: "Powered by WebStudio" eCatalogue...

WebStudio CMS (index.php pageid) Blind SQL Injection Vulnerability

No description provided by source. Application: WebStudio CMS Vendor Name: BDigital Media Ltd Vendors Url: http://www.bdigital.biz Bug Type: WebStudio CMS pageid Blind SQL Injection Vulnerability Exploitation: Remote Severity: Critical Solution Status: Unpatched Introduction: WebStudio CMS is a...

WebStudio CMS - Blind SQL Injection

WebStudio CMS - Blind SQL Injection Application: WebStudio CMS Vendor Name: BDigital Media Ltd Vendors Url: http://www.bdigital.biz Bug Type: WebStudio CMS pageid Blind SQL Injection Vulnerability Exploitation: Remote Severity: Critical Solution Status: Unpatched Introduction: WebStudio CMS is a...

WebStudio CMS - Blind SQL Injection

Application: WebStudio CMS Vendor Name: BDigital Media Ltd Vendors Url: http://www.bdigital.biz Bug Type: WebStudio CMS pageid Blind SQL Injection Vulnerability Exploitation: Remote Severity: Critical Solution Status: Unpatched Introduction: WebStudio CMS is a modular Web Content Management Syste...

PR07-11: Cross-site Request Forgery (CSRF) on Sun Java System Identity Manager

PR07-11: Cross-site Request Forgery CSRF on Sun Java System Identity Manager Date Found: 11th June 2007 Vendor Contacted: 18th June 2007 Date Public: 10th November 2008 Severity: Medium/High Credits: Adrian Pastor and Jan Fry of ProCheckUp Ltd www.procheckup.com. ProCheckUp thanks Sun for working...

CVE-2008-4991

SQL injection vulnerability in LOCKON CO.,LTD. EC-CUBE 2.3.0 and earlier, 1.4.7 and earlier, and 1.5.0-beta2 and earlier; and Community Edition 1.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the parameter...

CVE-2008-4991

EC-CUBE (LOCKON CO.,LTD.) contains an SQL injection vulnerability (CVE-2008-4991) affecting EC-CUBE 2.3.0 and earlier, 1.4.7 and earlier, 1.5.0-beta2 and earlier, and Community Edition 1.3.5 and earlier. The flaw allows a remote attacker to execute arbitrary SQL commands via a parameter, potentia...

JVN#19072922 EC-CUBE vulnerable to SQL injection

EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a SQL injection vulnerability. This vulnerability is different from JVN81111541. Impact A remote attacker could obtain the website administrator's privilege which was created using EC-CUBE...

CVE-2008-4635

The CVE affects the XOOPS module hisa_cart (versions 1.29 and earlier) from Hisanaga Electric Co. Ltd. A vulnerability exists that allows remote attackers to disclose information of registered users. The JVN entry confirms an information-disclosure flaw with a remote-execution pathway implied by ...

opennms-xss.txt

OpenNMS Multiple Vulnerabilities BugSec | Security Advisory Moshe Ben-Abu | Security Expert Advisory URL PDF: http://www.bugsec.com/upfiles/OpenNMSMultipleVulnerabilities.pdf - Table of Contents - OPENNMS MULTIPLE VULNERABILITIES 1 Vendor 3 Application Description 3 OpenNMS HTTP Response Splittin...

VBA32 Personal Antivirus 3.12.8.x (malformed archive) DoS Exploit

Summary Antivirus program for personal computers running Windows which is a reliable and, it is crucial, quick tool to detect and neutralize computer viruses, mail worms, trojan programs and other malware backdoors, adware, spyware, etc in real time and by request. Description Vba32 Personal...

JVN#99916563 EC-CUBE cross-site scripting vulnerability

EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a cross-site scripting vulnerability. This vulnerability is different from JVN61543834, JVN26621646, and JVN36085487. Impact An arbitrary script could be executed on the user's web browser...

a4deskphp-rfi.txt

================================================================= ========A4Desk PHP Event Calendar Remote File Inclusion======== ================================================================= Vendor: WebUnion Media Ltd Vendor Site: http://php.a4desk.com/calendar/ Date Discovered: 9-29-08...

CVE-2008-4322

Stack-based buffer overflow in RealFlex Technologies Ltd. RealWin Server 2.0, as distributed by DATAC, allows remote attackers to execute arbitrary code via a crafted FCINFOTAG/SETCONTROL packet...

Gentoo Security Advisory GLSA 200403-03 (OpenSSL)

The remote host is missing updates announced in advisory GLSA 200403-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

deslockvldptokn-dos.txt

//////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | Data Encryption Systems Ltd. - http://www.deslock.com/ | // // | Data Encryption Systems DESlock+ - 3.2.7 | // /...

DESlock+ 3.2.7 - 'vdlptokn.sys' Local Denial of Service

//////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | Data Encryption Systems Ltd. - http://www.deslock.com/ | // // | Data Encryption Systems DESlock+ - 3.2.7 | // /...

[oCERT-2008-014] WordNet stack and heap overflows

2008/08/25 2008-014 WordNet stack and heap overflows Description: The WordNet 3.0 Unix library and command-line interface suffer from a number of stack overflows due to their handling of command line arguments, environment variables and data read from user supplied dictionaries. The oCERT team wa...