httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled

Cross-site scripting XSS vulnerability in the modnegotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series allows remote authenticated users to inject arbitrary web script or HTML by...

httpd: mod_negotiation CRLF injection via untrusted file names in directories with MultiViews enabled

CRLF injection vulnerability in the modnegotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP respons...

MyBB Profile Wii Friend Code - Multiple Vulnerabilities

Exploit Title: MyBB Profile Wii Friend Code SQLi/Persistent XSS Dork: intitle:"Profile of" intext:"Wii Friend Code" inurl:member.php Date: 1/3/2013 Exploit Author: Ichi Vendor Homepage: http://mods.mybb.com/view/profile-wii-friend-code Software Link:...

PT-2012-5461

Name of the Vulnerable Software and Affected Versions mod security2 versions prior to 2.7.0 Description The issue allows remote attackers to bypass rules and deliver arbitrary POST data to a PHP application via a multipart request where an invalid part precedes the crafted data. This can be...

PT-2012-5985

Name of the Vulnerable Software and Affected Versions Portable phpMyAdmin plugin versions prior to 1.3.1 Description The issue allows remote attackers to bypass authentication and obtain phpMyAdmin console access via a direct request to the 'wp-content/plugins/portable-phpmyadmin/wp-pma-mod'...

CVE-2012-5469: Undefined Security Weakness

The Portable phpMyAdmin plugin before 1.3.1 for WordPress allows remote attackers to bypass authentication and obtain phpMyAdmin console access via a direct request to wp-content/plugins/portable-phpmyadmin/wp-pma-mod...

httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled

Multiple cross-site scripting XSS vulnerabilities in the makevariantlist function in modnegotiation.c in the modnegotiation module in the Apache HTTP Server 2.4.x before 2.4.3, when the MultiViews option is enabled, allow remote attackers to inject arbitrary web script or HTML via a crafted...

httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled

Cross-site scripting XSS vulnerability in the modnegotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series allows remote authenticated users to inject arbitrary web script or HTML by...

httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled

Cross-site scripting XSS vulnerability in the modnegotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series allows remote authenticated users to inject arbitrary web script or HTML by...

httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled

Multiple cross-site scripting XSS vulnerabilities in the makevariantlist function in modnegotiation.c in the modnegotiation module in the Apache HTTP Server 2.4.x before 2.4.3, when the MultiViews option is enabled, allow remote attackers to inject arbitrary web script or HTML via a crafted...

httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled

Multiple cross-site scripting XSS vulnerabilities in the makevariantlist function in modnegotiation.c in the modnegotiation module in the Apache HTTP Server 2.4.x before 2.4.3, when the MultiViews option is enabled, allow remote attackers to inject arbitrary web script or HTML via a crafted...

httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled

Cross-site scripting XSS vulnerability in the modnegotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series allows remote authenticated users to inject arbitrary web script or HTML by...

CVE-2012-4557

The modproxyajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node into an error state upon detection of a long request-processing time, which allows remote attackers to cause a denial of service worker consumption via an expensive request...

vBGarage Pro vBulletin Mod - SQL Injection

vBGarage Pro search parameter "modelyear" is unsanitzed, which can lead to an SQL Injection. !/bin/bash MegaManSec InterNot echo "MegaManSec @ www.internot.info" echo "White-Hat Hacker :" if -z "$1" ; then echo "Usage: $0 http://link.to/forum/" echo "Example: $0 http://f800riders.org/forum/" exit...

PT-2012-3103

Name of the Vulnerable Software and Affected Versions mod cluster versions 1.0.10 through 1.0.10 CP02 mod cluster versions 1.1.x through 1.1.3 Description The issue allows remote attackers to bypass access restrictions and gain access to applications deployed on the root context via unspecified...

PT-2012-5357

Name of the Vulnerable Software and Affected Versions Apache HTTP Server with mod pagespeed module versions 0.10.19.1 through 0.10.22.4 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. This could...

PT-2012-5128

Name of the Vulnerable Software and Affected Versions mod pagespeed versions prior to 0.10.22.6 Description The issue arises from the mod pagespeed module's failure to properly verify its host name, allowing remote attackers to trigger HTTP requests to arbitrary hosts. This can be demonstrated by...

PT-2012-4785

Name of the Vulnerable Software and Affected Versions Apache HTTP Server mod rpaf versions 0.5 through 0.6 Description The issue allows remote attackers to cause a denial of service, resulting in a server or application crash, by sending multiple X-Forwarded-For headers in a request...

PT-2012-2126

Name of the Vulnerable Software and Affected Versions Joomla! mod simplefileupload module versions prior to 1.3.5 Description The issue allows remote attackers to execute arbitrary code by uploading a file with a php5, php6, or double e.g. .php.jpg extension, then accessing it via a direct reques...

Endonesia 8.5 CMS Publisher Module SQL Injection

. \ || \ \ \ / \ /\ \ |/ \ | / \ | | / | Y Y / \ | \ \ /|| |||| / /| / / / / / Exploit Title: Endonesia 8.5 CMS Publiher Module Sql Injection Vulnerability Google Dork: Intext:"Powered by Endonesia 8.5" Date: 08/29/2012 Author: Crim3R Site : Http://Ajaxtm.com/ download Link :...