3565 matches found
[SECURITY] Fedora 17 Update: drupal6-og-2.3-1.fc17
Enable users to create and manage their own 'groups'...
Pritlog CMS 0.821 Cross Site Scripting
Title: ====== Pritlog v0.821 CMS - Multiple Web Vulnerabilities Date: ===== 2012-04-29 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=534 VL-ID: ===== 534 Introduction: ============= PRITLOG is an extremely simple, small 500K uncompressed and powerful blog system. It...
PicoPublisher 2.0 SQL Injection
Exploit Title : PicoPublisher v2.0 Remote SQL injection Date : 29/03/2012 Author : ZeTH Contact : zeth/at/hacktheplan8/dot/com http://www.hacktheplan8.com Vendor : Pico Software Site : http://pico.no/ Version : 2.0 Price : $29,00 Demo : http://picopublisher.com/demo/ Dork : intext:"Drives med...
PicoPublisher v2.0 Remote SQL injection
Exploit for php platform in category web applications Exploit Title : PicoPublisher v2.0 Remote SQL injection Date : 29/03/2012 Author : ZeTH Contact : zeth/at/hacktheplan8/dot/com http://www.hacktheplan8.com Vendor : Pico Software Site : http://pico.no/ Version : 2.0 Price : $29,00 Dork :...
Fedora Update for openstack-nova FEDORA-2012-0682
Check for the Version of openstack-nova OpenVAS Vulnerability Test Fedora Update for openstack-nova FEDORA-2012-0682 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...
CVE-2012-0994
SQL injection vulnerability in the Manage Albums feature in zp-core/admin-albumsort.php in ZENphoto 1.4.2 allows remote authenticated users to execute arbitrary SQL commands via the sortableList parameter...
Sql injection
SQL injection vulnerability in the Manage Albums feature in zp-core/admin-albumsort.php in ZENphoto 1.4.2 allows remote authenticated users to execute arbitrary SQL commands via the sortableList parameter...
CVE-2012-0994
SQL injection vulnerability in the Manage Albums feature in zp-core/admin-albumsort.php in ZENphoto 1.4.2 allows remote authenticated users to execute arbitrary SQL commands via the sortableList parameter...
CVE-2011-5078
The web administration interface in the server in Sybase M-Business Anywhere 6.7 before ESD 3 and 7.0 before ESD 7 does not require admin authentication for unspecified scripts, which allows remote authenticated users to list or delete user accounts, modify passwords, or read log files via HTTP...
DreamHost Hacked - Change Your Passwords Now !
DreamHost Hacked - Change Your Passwords Now ! All Dreamhost customers should read this post immediately and change all related passwords including WordPress ones. Dreamhost said "Last night we detected some unauthorized activity within one of our databases." They say there's "no evidence that...
CVE-2010-5025
Cross-site scripting XSS vulnerability in manage/main.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote attackers to inject arbitrary web script or HTML via the fldpath parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-5024
SQL injection vulnerability in manage/adduser.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote authenticated users, with Read privileges, to execute arbitrary SQL commands via the userid parameter. NOTE: some of these details are obtained from third party information...
ecshop 4 8 leak site path vulnerability-vulnerability warning-the black bar safety net
http:// 网站 /shop/api/cron.php http:// 网站 /shop/wap/goods.php http:// 网站 /shop/temp/compiled/urhere.lbi.php http:// 网站 /shop/temp/compiled/pages.lbi.php http:// 网站 /shop/temp/compiled/usertransaction.dwt.php http:// 网站 /shop/temp/compiled/history.lbi.php http:// 网站...
Windows Manage Certificate Authority Removal
This module allows the attacker to remove an arbitrary CA certificate from the victim's Trusted Root store. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Manage Certificate Authority...
MantisBT Multiple Local File Include and Cross Site Scripting Vulnerabilities
This host is running MantisBT and is prone to multiple local file include and cross-site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmantismultlfinxssvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ MantisBT Multiple Local File Include and Cross Site Scripting Vulnerabilities...
CVE-2010-4834
Multiple SQL injection vulnerabilities in index.php in OneOrZero AIMS 2.6.0 Members Edition and 2.7.0 Trial Edition allow remote authenticated users to execute arbitrary SQL commands via the 1 id parameter in a savedsearch action and 2 itemtypes parameter in a showitemsearch action in the...
ME Central Desktop v7.x - Multiple Persistent Vulnerabilities
Document Title: =============== ME Central Desktop v7.x - Multiple Persistent Vulnerabilities Release Date: ============= 2011-09-06 Vulnerability Laboratory ID VL-ID: ==================================== 36 Product & Service Introduction: =============================== Desktop Central is a...
ME Firewall Analyzer v7.1 - Multiple Web Vulnerabilities
Document Title: =============== ME Firewall Analyzer v7.1 - Multiple Web Vulnerabilities Release Date: ============= 2011-09-06 Vulnerability Laboratory ID VL-ID: ==================================== 264 Product & Service Introduction: =============================== ManageEngine Firewall Analyze...
ME Central Desktop v7.x - Multiple Persistent Vulnerabilities
Document Title: =============== ME Central Desktop v7.x - Multiple Persistent Vulnerabilities Release Date: ============= 2011-09-06 Vulnerability Laboratory ID VL-ID: ==================================== 36 Product & Service Introduction: =============================== Desktop Central is a...
ME Firewall Analyzer v7.1 - Multiple Web Vulnerabilities
Document Title: =============== ME Firewall Analyzer v7.1 - Multiple Web Vulnerabilities Release Date: ============= 2011-09-06 Vulnerability Laboratory ID VL-ID: ==================================== 264 Product & Service Introduction: =============================== ManageEngine Firewall Analyze...