Short URL v1.01 - Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ==================================================== Short URL v1.01 - Local File Inclusion Vulnerability ==================================================== Application Info: Name: Short URL Version: 1.01 Vendor:...

Address Book Script 1.9 Local File Inclusion

Securitylab.ir Application Info: Name: Address Book Script Version: 1.9 Vendor: http://www.phpkobo.com/scripts/AB201109/AB201109.zip Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability: http://site.com/codelib/cfg/common.inc.php?LANGCODE=../../../../../../etc/passwd%00...

eGroupWare 1.6.002 and eGroupWare premium line 9.1 - Multiple Vulnerabilities

Advisory Name: Remote Command Execution in EGroupware Vulnerability Class: Remote Command Execution Release Date: 2010-03-09 Affected Applications: Confirmed in EGroupware 1.4.001+.002 and 1.6.001+.002. EGroupware Premium Line 9.1 and 9.2 is also affected. Other versions may also be affected...

Windisc 1.3 - Local Stack Buffer Overflow

|------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | [email protected] | | |...

Multiple vulnerabilities in third party extensions

Several vulnerabilities have been found in the following third party TYPO3 extensions: Brainstorming brainstorming, Power Extension Manager chlightem, Sellector.com Widget Integration chsellector, Educator educator, MK Wastebasket mkwastebasket, myDashboard mydashboard, CleanDB nfcleandb, Diocese...

Address Book Script v 1.09 - Local File Inclusion

Exploit for unknown platform in category web applications =============================================================== Address Book Script v 1.09 - Local File Inclusion Vulnerability =============================================================== Application Info: Name: Address Book Script...

Address Book Script 1.09 - Local File Inclusion

Securitylab.ir Application Info: Name: Address Book Script Version: 1.9 Vendor: http://www.phpkobo.com/addressbook.php Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability: http://site.com/codelib/cfg/common.inc.php?LANGCODE=../../../../../../etc/passwd%00 Discoverd By: Pouya...

Address Book Script 1.09 - Local File Inclusion

Address Book Script 1.09 - Local File Inclusion Securitylab.ir Application Info: Name: Address Book Script Version: 1.9 Vendor: http://www.phpkobo.com/addressbook.php Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability:...

SQL injection vulnerability in wILD CMS

Title: SQL injection vulnerability in wILD CMS Date: 09.03.2010 Author: Ariko-Security Software Link: http://www.wildcms.com/ Version: ALL ============ Ariko-Security - Advisory 4/3/2010 ============= SQL injection vulnerability in wILD CMS Vendor's Description of Software: http://www.wildcms.com...

River CMS version 1.0 SQL Injection / Authentication Bypass Vulnerability

Exploit for unknown platform in category web applications ========================================================================= River CMS version 1.0 SQL Injection / Authentication Bypass Vulnerability ========================================================================= Application Info:...

Wild CMS SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================== Wild CMS SQL Injection Vulnerability ==================================== ============ Ariko-Security - Advisory 4/3/2010 ============= SQL injection vulnerability in wILD CMS Vendor's Description of...

River CMS 1.0 SQL Injection

Securitylab.ir Application Info: Name: River CMS Version: 1.0 Vendor: http://rivercms.ir Vulnerability Info: Type: Sql Injection Risk: Medium Dork: "Powered By River CMS" Vulnerability: http://site.ir/admin/ Username: ' or '1=1 Password: ' or '1=1 Discoverd By: Pouya Daneshmand Website:...

Natychmiast CMS Cross Site Scripting / SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== Natychmiast CMS Cross Site Scripting / SQL Injection Vulnerability ================================================================== SQL injection and XSS vulnerability in...

Blind SQL Injection vulnerability in extension Calendar Base (cal)

It has been discovered that the extension Calendar Base cal is vulnerable to Blind SQL Injection. Release Date: March 2, 2010 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.3.1 and all versions below Vulnerabilit...

LiveChatNow SQL Injection

Title: SQL injection vulnerability in LiveChatNow Date: 20.02.2010 Author: Ariko-Security Software Link: http://www.livechatnow.com/ Version: ALL Tested on: freebsd / ubuntu ============ Ariko-Security - Advisory 4/2/2010 ============= SQL injection vulnerability in LiveChatNow Vendor's Descripti...

WebAdministrator Lite CMS - SQL Injection

============ Ariko-Security - Advisory 5/2/2010 ============= SQL injection vulnerability in WebAdministrator Lite CMS Vendor's Description of Software: http://jskinternet.pl/portal/jsk/3/Oferta.html Dork: webadministrator lite Application Info: Name: WebAdministrator Lite CMS Versions: LITE...

CA20100222-01: Security Notice for CA Service Desk

-----BEGIN PGP SIGNED MESSAGE----- CA20100222-01: Security Notice for CA Service Desk Issued: February 22, 2010 CA's support is alerting customers to a security risk with CA Service Desk r12.1. The release of Tomcat as included with CA Service Desk r12.1 is potentially susceptible to a cross-site...

Official Portal 2007 Multiple Vulnerabilities

Securitylab.ir Application Info: Name: Official Portal 2007 Vulnerability Info: Type: Sql Injection/XSS Risk: Medium Dork: "Official Portal 2007" Vulnerability: ======================= Sql Injection =======================...

WebAdministrator Lite CMS SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================== WebAdministrator Lite CMS SQL Injection Vulnerability ===================================================== ============ Ariko-Security - Advisory 5/2/2010 ============= SQL injection...

Official Portal 2007 Cross Site Scripting / SQL Injection

Securitylab.ir Application Info: Name: Official Portal 2007 Vulnerability Info: Type: Sql Injection/XSS Risk: Medium Dork: "Official Portal 2007" Vulnerability: ======================= Sql Injection =======================...