CA20100222-01: Security Notice for CA Service Desk

-----BEGIN PGP SIGNED MESSAGE----- CA20100222-01: Security Notice for CA Service Desk Issued: February 22, 2010 CA's support is alerting customers to a security risk with CA Service Desk r12.1. The release of Tomcat as included with CA Service Desk r12.1 is potentially susceptible to a cross-site...

WebAdministrator Lite CMS SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================== WebAdministrator Lite CMS SQL Injection Vulnerability ===================================================== ============ Ariko-Security - Advisory 5/2/2010 ============= SQL injection...

Official Portal 2007 Multiple Vulnerabilities

Securitylab.ir Application Info: Name: Official Portal 2007 Vulnerability Info: Type: Sql Injection/XSS Risk: Medium Dork: "Official Portal 2007" Vulnerability: ======================= Sql Injection =======================...

WebAdministrator Lite CMS - SQL Injection

============ Ariko-Security - Advisory 5/2/2010 ============= SQL injection vulnerability in WebAdministrator Lite CMS Vendor's Description of Software: http://jskinternet.pl/portal/jsk/3/Oferta.html Dork: webadministrator lite Application Info: Name: WebAdministrator Lite CMS Versions: LITE...

Official Portal 2007 Sql Injection/XSS Vulnerability

Exploit for unknown platform in category web applications ==================================================== Official Portal 2007 Sql Injection/XSS Vulnerability ==================================================== Application Info: Name: Official Portal 2007 Vulnerability Info: Type: Sql...

Pixel Portal SQL Injection

Securitylab.ir Application Info: Name: Pixel Portal Vendor: http://www.pixelidea.ir Vulnerability Info: Type: Sql Injection Risk: Medium Vulnerability: http://site.ir/productslistfa.asp?id=-1001+UNION+ALL+SELECT+1,2,3,4,5,6,7,username,password,10,11,12,13+Form+admin Discoverd By: Pouya Daneshmand...

Joomla (Jw_allVideos) Remote File Download Vulnerability

Securitylab.ir Application Info: Name: Joomla jwallvideos Plugin Version: 1.0 Vulnerability Info: Type: Remote File Download Risk: Medium Vulnerability: http://site.com/plugins/content/jwallvideos/includes/download.php?file=./../.../file.php Discoverd By: Pouya Daneshmand Website:...

Joomla (Jw_allVideos) Remote File Download Vulnerability

Exploit for unknown platform in category web applications ======================================================== Joomla JwallVideos Remote File Download Vulnerability ======================================================== Application Info: Name: Joomla jwallvideos Plugin Version: 1.0...

Joomla (Jw_allVideos) Remote File Download Vulnerability

Exploit for unknown platform in category web applications ======================================================== Joomla JwallVideos Remote File Download Vulnerability ======================================================== Application Info: Name: Joomla jwallvideos Plugin Version: 1.0...

Mongoose version 2.8 source disclosure vulnerability

Exploit for unknown platform in category web applications ==================================================== Mongoose version 2.8 source disclosure vulnerability ==================================================== Application Info: Name: mongoose Version: 2.8 Download:...

Mongoose 2.8 Source Disclosure

Securitylab.ir Application Info: Name: mongoose Version: 2.8 Download: http://code.google.com/p/mongoose/downloads/list Vulnerability Info: Type: Remote Source Disclosure Risk: Medium Vulnerability: http://127.0.0.1/file.php%20%20%20 Discoverd By: Pouya Daneshmand Website: http://securitylab.ir...

eWebEditor suffers from a directory traversal vulnerability

No description provided by source. Securitylab.ir Application Info: Name: eWebeditor Version: all version Vulnerability Info: Type: Directory Traversal Risk: Medium Vulnerability: http://site.com/admin/ewebeditor/admin/upload.asp?id=16&dviewmode=&dir =./.. Discoverd By: Pouya Daneshmand Website:...

Joomla Autartitarot Directory Traversal

...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla comautartitarot Directory Traversal Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT: bhunt3ratnospamgmaildotnospamcom TESTED ON: LocalHost PRE-REQUERIMENTS:...

Joomla jVideoDirect Blind SQL Injection

...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla jVideoDirect BLIND SQL Injection Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT: bhunt3ratnospamgmaildotnospamcom TYPE: COMMERCIAL PRICE: N/A TESTED ON: Demo Sit...

Joomla CCNewsLetter Blind SQL Injection

...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla comccnewsletter BLIND SQL Injection Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT: bhunt3ratnospamgmaildotnospamcom TESTED ON: LocalHost PRE-REQUERIMENTS:...

Joomla! Component com_virtuemart - order_status_id SQL Injection

Joomla! Component comvirtuemart - orderstatusid SQL Injection ...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla comvirtuemart SQL Injection Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT:...

Joomla Component (com_virtuemart) order_status_id SQL Injection

Exploit for unknown platform in category web applications ============================================================================= Joomla Component comvirtuemart orderstatusid SQL Injection Vulnerability ============================================================================= ...BEGIN...

Microsoft IE 6&7 Crash Exploit

Securitylab.ir Application Info: Name: Microsoft IE Version: 6 & 7 Tested on : XPSP1/SP2/SP3 Vulnerability Info: Type: Crash Risk: Medium Vulnerability: IE.html scriptdocument.createElement"html".outerHTML/script Discoverd By: Pouya Daneshmand Website: http://securitylab.ir Contacts:...

MS Internet Explorer 6/7 - Local crash

Exploit for unknown platform in category local exploits ====================================== MS Internet Explorer 6/7 - Local crash ====================================== Application Info: Name: Microsoft IE Version: 6 & 7 Tested on : XPSP1/SP2/SP3 Vulnerability Info: Type: Crash Risk: Medium...

Joomla JBPublishdownfp SQL Injection

...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla comjbpublishdownfp SQL Injection Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT: bhunt3ratnospamgmaildotnospamcom TESTED ON: LocalHost PRE-REQUERIMENTS: Privileg...