Plow 0.0.5 Buffer Overflow

plow 0.0.5 Vendor information: "plow is a command line playlist generator." Vendor URI: http://developer.berlios.de/projects/plow/ Risk-level: Medium The application is prone to a local buffer overflow vulnerability. ------------------------------------- IniParser.cpp, line 26: 26: char...

Cross-site scripting vulnerability in extension Seminars (seminars)

It has been discovered that the extension "Seminars" seminars is vulnerable to cross-site scripting. Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 0.9.3 and below Vulnerability Type: Cross-site scripting Severity:...

Lepton v1.2.0 CMS - Multiple Web Vulnerabilities

Document Title: =============== Lepton v1.2.0 CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=626 Release Date: ============= 2012-06-22 Vulnerability Laboratory ID VL-ID: ==================================== 626 Common...

WebTitan v 3.62 - Multiple Cross Site Vulnerabilities

Document Title: =============== WebTitan v 3.62 - Multiple Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=589 Release Date: ============= 2012-06-19 Vulnerability Laboratory ID VL-ID: ==================================== 589...

Squiz CMS 4.6.3 XXE Injection / Cross Site Scripting

Sense of Security - Security Advisory - SOS-12-007 Release Date. 14-Jun-2012 Last Update. - Vendor Notification Date. 02-Apr-2012 Product. Squiz CMS Platform. Independent Affected versions. Squiz 4.6.3 verified and possibly others Severity Rating. Medium Impact. Exposure of session information...

PHP Jobsite v1.36 - Cross Site Scripting Vulnerabilities

Document Title: =============== PHP Jobsite v1.36 - Cross Site Scripting Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=616 Release Date: ============= 2012-06-16 Vulnerability Laboratory ID VL-ID: ==================================== 61...

Microsoft Fitbie Service - Multiple Cross Site Vulnerabilities

Document Title: =============== Microsoft Fitbie Service - Multiple Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=573 Release Date: ============= 2012-06-16 Vulnerability Laboratory ID VL-ID:...

Interspire Shopping Cart 6 Cross Site Scripting

Title: ====== Interspire Shopping Cart v6 - Multiple Web Vulnerabilities Date: ===== 2012-06-03 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=593 VL-ID: ===== 593 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: =============...

Freeside SelfService CGI|API 2.3.3 - Multiple Vulnerabilities

Document Title: =============== Freeside SelfService CGI|API 2.3.3 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=614 Release Date: ============= 2012-06-13 Vulnerability Laboratory ID VL-ID: ==================================...

Freeside SelfService CGI|API 2.3.3 - Multiple Vulnerabilities

Document Title: =============== Freeside SelfService CGI|API 2.3.3 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=614 Release Date: ============= 2012-06-13 Vulnerability Laboratory ID VL-ID: ==================================...

Cross-site scripting vulnerability in extension Ameos Formidable (ameos_formidable)

It has been discovered that the extension "Ameos Formidable" ameosformidable is vulnerable to cross-site scripting. Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.1.373 and below Vulnerability Type: Cross-site...

TFTPD32 DNS Server 4.00 - Denial of Service

Title: Tftpd32 DNS Server Denial Of Service Vulnerability Software : Tftpd32 Software Version : v4.00 Vendor: http://tftpd32.jounin.net/ Vulnerability Published : 2012-05-26 Vulnerability Update Time : Status : Impact : MediumCVSS2 Base : 5.0, AV:N/AC:L/Au:N/C:N/I:N/A:P Bug Description : Tftpd32 ...

WinRadius Server 2009 Denial Of Service

Exploit for windows platform in category dos / poc Title: WinRadius Server Denial Of Service Vulnerability Software : WinRadius Software Version : v2009 Vendor: http://www.elite-school.com/saas/WinRadius/ Vulnerability Published : 2012-05-27 Vulnerability Update Time : Status : Impact : MediumCVS...

Tftpd32 DHCP Serve 4.00 Denial Of Service

Exploit for windows platform in category dos / poc Title: Tftpd32 DHCP Server Denial Of Service Vulnerability Software : Tftpd32 Software Version : v4.00 Vendor: http://tftpd32.jounin.net/ Vulnerability Published : 2012-05-21 Vulnerability Update Time : Status : Impact : MediumCVSS2 Base : 5.0,...

Igaware UTM WAF v9.2.0-2 - Multiple Vulnerabilities

Document Title: =============== Igaware UTM WAF v9.2.0-2 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=569 Release Date: ============= 2012-05-17 Vulnerability Laboratory ID VL-ID: ==================================== 569...

MobileSpy Android|iPhone|W7P|sOS - Web Vulnerabilities

Exploit for hardware platform in category web applications Title: ====== MobileSpy Android|iPhone|W7P|sOS - Web Vulnerabilities Common Vulnerability Scoring System: ==================================== 7.3 Introduction: ============= Mobile Spy defines the latest in high-tech cell phone...

QuickBlog v0.8 CMS - Multiple Web Vulnerabilities

Document Title: =============== QuickBlog v0.8 CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=567 Release Date: ============= 2012-05-11 Vulnerability Laboratory ID VL-ID: ==================================== 567 Commo...

EnjoyGraph Communication SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

EnjoyGraph Communication SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Estudioayllon Blind SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...