Webit CMS - SQL Injection

Webit CMS - SQL Injection ------------------------------------------------------------------------------------------- Webit Cms SQL Injection Vulnerability ------------------------------------------------------------------------------------------- Author: CoBRa21 Script Home: http://www.webitcms....

CVE-2009-4839

Multiple cross-site scripting XSS vulnerabilities in Basic Analysis and Security Engine BASE, possibly 1.4.4 and earlier, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 admin/baseroleadmin.php, 2 admin/baseuseradmin.php, 3 baseconfcontents.php, 4...

CVE-2009-4839

Multiple cross-site scripting XSS vulnerabilities in Basic Analysis and Security Engine BASE, possibly 1.4.4 and earlier, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 admin/baseroleadmin.php, 2 admin/baseuseradmin.php, 3 baseconfcontents.php, 4...

Police Municipale Open Main Courante 1.01beta (RFI/LFI) Multiple File Include Vulnerability

=========================================================================================== Police Municipale Open Main Courante 1.01beta RFI/LFI Multiple File Include Vulnerability =========================================================================================== + Police Municipale Ope...

Police Municipale Open Main Courante 1.01beta Local File Inclusion / Remote File Inclusion

=========================================================================================== Police Municipale Open Main Courante 1.01beta RFI/LFI Multiple File Include Vulnerability =========================================================================================== + Police Municipale Ope...

Police Municipale Open Main Courante 1.01beta - Local File Inclusion Remote File Inclusion

Police Municipale Open Main Courante 1.01beta - Local File Inclusion Remote File Inclusion =========================================================================================== Police Municipale Open Main Courante 1.01beta RFI/LFI Multiple File Include Vulnerability...

Police Municipale Open Main Courante 1.01beta (RFI/LFI) File Inc Vuln

Exploit for php platform in category web applications =========================================================================================== Police Municipale Open Main Courante 1.01beta RFI/LFI Multiple File Include Vulnerability...

Police Municipale Open Main Courante 1.01beta - Local File Inclusion / Remote File Inclusion

=========================================================================================== Police Municipale Open Main Courante 1.01beta RFI/LFI Multiple File Include Vulnerability =========================================================================================== + Police Municipale Ope...

Jevon CMS Local File Inclusion / Remote File Inclusion

jevoncms LFI/RFI Multiple Vulnerabilities +Title : jevoncms libdir Multiple Vulnerability +Version: - +Download: http://sourceforge.net/projects/jevoncms/files/ +Author: eidelweiss +Contact: eidelweissatcyberservicesdotcom !Thanks To: all friends -= Vuln C0de =- - jevoncms/php/main/jevoncms.php...

68kb Knowledge Base v1.0.0rc3 edit main settings CSRF

Exploit for php platform in category web applications ===================================================== 68kb Knowledge Base v1.0.0rc3 edit main settings CSRF ===================================================== Exploit Title: 68kb Knowledge Base v1.0.0rc3 edit main settings CSRF Date:...

68KB Knowledge Base 1.0.0rc3 - Cross-Site Request Forgery (Edit Main Settings)

68KB Knowledge Base 1.0.0rc3 - Cross-Site Request Forgery Edit Main Settings Exploit Title: 68kb Knowledge Base v1.0.0rc3 edit main settings CSRF Date: 2010-04-02 Author: Jelmer de Hen Software Link: http://68kb.googlecode.com/files/68kb-v1.0.0rc3.zip Version: v1.0.0rc3 escapable'...

openSUSE Security Update : compiz-fusion-plugins-main (compiz-fusion-plugins-main-1990)

The expo plugin in Compiz Fusion allowed local users with physical access to bypass the screen-saver by just dragging it aside. CVE-2008-6514: CVSS v2 Base Score: 6.2 %NASLMINLEVEL 70300 if !definedfunc"nasllevel" || nasllevel = 70000 && nasllevel = 70200 && nasllevel = 80000 && nasllevel 80502...

openSUSE Security Update : compiz-fusion-plugins-main (compiz-fusion-plugins-main-1990)

The expo plugin in Compiz Fusion allowed local users with physical access to bypass the screen-saver by just dragging it aside. CVE-2008-6514: CVSS v2 Base Score: 6.2 %NASLMINLEVEL 70300 if !definedfunc"nasllevel" || nasllevel = 70000 && nasllevel = 70200 && nasllevel = 80000 && nasllevel 80502...

vBulletin Blog 4.0.2 - Title Cross-Site Scripting

vBulletin Blog 4.0.2 - Title Cross-Site Scripting Vbulletin Blog 4.0.2 XSS Vulnerability Author: FormatXformat Version: Vbulletin 4.0.2 Dork: Powered by vBulletin™ Version 4.0.2 Copyright © 2010 vBulletin Solutions, Inc. All rights reserved. The script is affected by Permanent XSS vulnerability, ...

eGroupWare 1.6.002 and eGroupWare premium line 9.1 - Multiple Vulnerabilities

Advisory Name: Remote Command Execution in EGroupware Vulnerability Class: Remote Command Execution Release Date: 2010-03-09 Affected Applications: Confirmed in EGroupware 1.4.001+.002 and 1.6.001+.002. EGroupware Premium Line 9.1 and 9.2 is also affected. Other versions may also be affected...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php/Special/Main/Templates in WikyBlog 1.7.2 and 1.7.3 rc2 allows remote attackers to inject arbitrary web script or HTML via the which parameter in a copy action...

Mandriva Update for phonon-gstreamer MDVA-2010:034 (phonon-gstreamer)

Check for the Version of phonon-gstreamer OpenVAS Vulnerability Test Mandriva Update for phonon-gstreamer MDVA-2010:034 phonon-gstreamer Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...

DZOIC ClipHouse - Authentication Bypass

DZOIC ClipHouse - Authentication Bypass ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: DZOIC ClipHouse suffer from auth bypass remote sql injection Vendor: www.dzoic.com ? Software: DZOIC ClipHouse - PR!CE : $149.00 ? author: R3d-D3v!L ? TEAM: ArAB!AN...

Miniweb 2.0 Full Path Disclosure

Exploit for unknown platform in category web applications ================================ Miniweb 2.0 Full Path Disclosure ================================ Miniweb 2.0 Full Path Disclosure Name Miniweb 2.0 Vendor http://www.miniweb2.com X. INDEX I. ABOUT THE APPLICATION II. DESCRIPTION III...

PHP MultiPart Form-Data Denial of Service PoC

Exploit for unknown platform in category web applications ============================================= PHP MultiPart Form-Data Denial of Service PoC ============================================= !/usr/bin/python PHP MultiPart Form-Data Denial of Service proof of concept, 23-10-2009 Bogdan Calin...