661 matches found
Stoneware WebNetwork6 Cross Site Request Forgery / Cross Site Scripting
Stoneware WebNetwork6 Vulnerability Assessment Conducted by: Leland Public Schools Stoneware Customer Jacob Holcomb Network Engineer for LPS Conducted for: Leland Public Schools Purchaser of WebNetwork product. Test was to assure cloud security Stoneware INC. Discovered Zero Day vulnerabilities...
stoneware webnetwork6 - Multiple Vulnerabilities
Stoneware WebNetwork6 Vulnerability Assessment CVE-2012-0285 – XSS CVE-2012-0286 - CSRF Conducted by: Leland Public Schools Stoneware Customer Jacob Holcomb Network Engineer for LPS Conducted for: Leland Public Schools Purchaser of WebNetwork product. Test was to assure cloud security Stoneware...
stoneware webnetwork6 - Multiple Vulnerabilities
stoneware webnetwork6 - Multiple Vulnerabilities Stoneware WebNetwork6 Vulnerability Assessment CVE-2012-0285 – XSS CVE-2012-0286 - CSRF Conducted by: Leland Public Schools Stoneware Customer Jacob Holcomb Network Engineer for LPS Conducted for: Leland Public Schools Purchaser of WebNetwork...
SA-CONTRIB-2012-005 - Vote up/down - Cross Site Scripting
CVE: CVE-2012-1627 This module enables you to add voting widgets to nodes, terms and comments. The vudterm sub-module doesn't sufficiently sanitize taxonomy terms before display. In order to execute arbitrary script injection malicious users must have the ability to create or edit taxonomy terms...
KLA10113 ACE vulnerability in Citrix Program Neighborhood
An unspecified vulnerability was found in the Citrix Program Neighborhood. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed associated file. Original advisories Citrix bulletin Related products...
20 Famous websites vulnerable to Cross Site Scripting (XSS) Attack
20 Famous websites vulnerable to Cross Site Scripting XSS Attack Most of the biggest and Famous sites are found to be Vulnerable to XSS attack . Cross-site scripting XSS is a type of computer security vulnerability typically found in web applications which allow code injection by malicious web...
KLINK SQL Injection Vulnerability
Exploit for php platform in category web applications Dork : "allinurl:.php?txtCodiInfo=" An attacker may execute arbitrary SQL statements on the vulnerable system. This may compromise the integrity of your database and/or expose sensitive information. Example 1:...
KLINK - SQL Injection
Andr�s G�mez Exploit Title : KLINK Sql Injection Vulnerability Date : 2010-12-31 Author : Andr�s G�mez Software Developed by : http://www.contacto.com Contact : [email protected] Dork : "allinurl:.php?txtCodiInfo=" An attacker may execute arbitrary SQL statements on the vulnerable system...
FreeBSD : Mailman -- XSS in web interface (4ab29e12-e787-11df-adfa-00e0815b8da8)
Secunia reports : Two vulnerabilities have been reported in Mailman, which can be exploited by malicious users to conduct script insertion attacks. Certain input passed via the list descriptions is not properly sanitised before being displayed to the user. This can be exploited to insert arbitrar...
Debian: Security Advisory (DSA-2096-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ecshop modify any user password vulnerability-vulnerability warning-the black bar safety net
ecshop in the design of the authentication mechanism when there is a problem, resulting in malicious users can steal other user's password In ecshop permissions mechanisms which modify a password is needed to know the original password, but modified to retrieve the password of the Email without t...
Mandriva Update for squirrelmail MDVSA-2010:120 (squirrelmail)
Check for the Version of squirrelmail OpenVAS Vulnerability Test Mandriva Update for squirrelmail MDVSA-2010:120 squirrelmail Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
CMS Ariadna 2009 - SQL Injection
CMS Ariadna 2009 - SQL Injection Exploit Title : CMS Ariadna 2009 SQL Injection Date : 2010-04-19 Author : Andrés Gómez Contact : [email protected] Dork : "allinurl: detResolucion.php?tipodocid=" Exploit in Perl Start In Next Line: use LWP::Simple; Malicious users may inject SQL querys in...
CMS Ariadna 2009 - SQL Injection
Exploit Title : CMS Ariadna 2009 SQL Injection Date : 2010-04-19 Author : Andrés Gómez Contact : [email protected] Dork : "allinurl: detResolucion.php?tipodocid=" Exploit in Perl Start In Next Line: use LWP::Simple; Malicious users may inject SQL querys into a vulnerable application to fo...
INVOhost SQL Injection Vulnerability
Exploit for php platform in category web applications ==================================== INVOhost SQL Injection Vulnerability ==================================== Andr?s G?mez Exploit Title : INVOhost SQL Injection Author : Andres Gomez Software Link : http://www.invohost.com/ Contact :...
INVOhost - SQL Injection
INVOhost - SQL Injection Andrés Gómez Exploit Title : INVOhost SQL Injection Date : 2010-04-24 Author : Andrés Gómez Software Link : http://www.invohost.com/ Contact : [email protected] Dork : "Powered by INVOhost" An attacker may execute arbitrary SQL statements on the vulnerable system...
New Advisore Stack 1.1 - Directory Traversal
New Advisore Stack 1.1 - Directory Traversal =============================================================================================== L.F.ISTACK version 1.1L.F.I =============================================================================================== Author : R3VANBASTARD Download:...
360 Security Guard breg device drivers Privilege Escalation Vulnerabilitie
Vendor : Qihoo 360 Affected Software : 360 Security Guard 6.1.5.1009 Description: Qihoo 360 Security Guard is very famous in China. Some vulnerabilities have been reported in Qihoo 360 Security Guard, which can be exploited by malicious, local users to gain escalated privileges. An error in the...
PPVChat Mulitiple Vulnerabilities
Exploit for unknown platform in category web applications ================================= PPVChat Mulitiple Vulnerabilities ================================= andresg888 Exploit Title : Exotic-Cams --LFI & XSS-- Date : 2010-01-09 Author : andresg888 Dork : No DoRk f0R ScRipT KiDDieS Example LFI:...