PT-2012-3111

Name of the Vulnerable Software and Affected Versions mod fcgid module version 2.3.6 for the Apache HTTP Server Description The issue allows remote attackers to cause a denial of service, specifically memory consumption, by sending a series of HTTP requests. This is due to the mod fcgid module no...

PT-2012-2574

Name of the Vulnerable Software and Affected Versions Bugzilla versions 4.0.2 through 4.0.4 Bugzilla versions 4.1.1 through 4.2rc2 Description A cross-site request forgery issue affects the xmlrpc.cgi component in Bugzilla when mod perl is used. This allows remote attackers to hijack the...

Debian DSA-2415-1 : libmodplug - several vulnerabilities

Several vulnerabilities that can lead to the execution of arbitrary code have been discovered in libmodplug, a library for MOD music based on ModPlug. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2011-1761 epiphant discovered that the abc file parser is...

PT-2012-1859

Name of the Vulnerable Software and Affected Versions ejabberd versions 2.1.8 through 3.0.0-alpha-3 Description The issue allows remote authenticated users to cause a denial of service, resulting in an infinite loop. This occurs when a stanza with a publish tag lacks a node attribute, specificall...

PT-2016-3171

Name of the Vulnerable Software and Affected Versions Apache HTTP Server mod ssl versions 2.2.x through 2.2.32 Apache HTTP Server mod ssl versions 2.4.x through 2.4.25 Description The issue is related to a NULL pointer dereference error in the mod ssl module of the Apache HTTP Server. This error...

PT-2017-2867

Name of the Vulnerable Software and Affected Versions Apache httpd versions 2.2.x through 2.2.32 Apache httpd versions 2.4.x through 2.4.25 Description The issue is caused by a buffer overflow in the mod mime module when handling a malicious Content-Type response header. This can allow a remote...

PT-2012-3017

Name of the Vulnerable Software and Affected Versions D-Mack Media Currency Converter mod currencyconverter module version 1.0.0 for Joomla! Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the from...

Joomla Currency Converter Cross Site Scripting

Exploit Title: Joomla modules modcurrencyconverter XSS Vulnerability Date: 2012-02-02 GMT +7 Author: BHG Security Center Software Link: http://joomla.org Dork: inurl:/includes/convert.php?from= Tested on: ubuntu 11.04 CVE : -...

CVE-2012-0021

The logcookie function in modlogconfig.c in the modlogconfig module in the Apache HTTP Server 2.2.17 through 2.2.21, when a threaded MPM is used, does not properly handle a %C format string, which allows remote attackers to cause a denial of service daemon crash via a cookie that lacks both a nam...

mod_cluster: malicious worker nodes can register on any vhost

modcluster in JBoss Enterprise Application Platform 5.1.2 for Red Hat Linux allows worker nodes to register with arbitrary virtual hosts, which allows remote attackers to bypass intended access restrictions and provide malicious content, hijack sessions, and steal credentials by registering from ...

mod_cluster: malicious worker nodes can register on any vhost

modcluster in JBoss Enterprise Application Platform 5.1.2 for Red Hat Linux allows worker nodes to register with arbitrary virtual hosts, which allows remote attackers to bypass intended access restrictions and provide malicious content, hijack sessions, and steal credentials by registering from ...

PT-2012-5479

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.2.12 through 2.2.21 Description The issue allows remote attackers to cause a denial of service by placing a worker node into an error state upon detection of a long request-processing time. This can be achieved vi...

DIY-CMS blog mod SQL Injection

Exploit for php platform in category web applications Exploit Title: DIY-CMS blog mod SQL Injection Author: snup Contact: email protected Site: http://e-o-u.org SQL Injection: DORK: inurl:"mod.php?mod=blog" intext:"powered by DIY-CMS" inurl:"mod.php?mod=blog" BUG:...

DIY-CMS blog mod - SQL Injection

Exploit Title: DIY-CMS blog mod SQL Injection Author: snup Contact: [email protected] Site: http://e-o-u.org SQL Injection: DORK: inurl:"mod.php?mod=blog" intext:"powered by DIY-CMS" inurl:"mod.php?mod=blog" BUG: http://127.0.0.1/diy-cms/mod.php?mod=blog&modfile=tags&tag=features&start=sqli...

CVE-2007-6750

The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service daemon outage via partial HTTP requests, as demonstrated by Slowloris, related to the lack of the modreqtimeout module in versions before 2.2.15...

DEBIAN-CVE-2011-3639

The modproxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x before 2.2.18, when the Revision 1179239 patch is in place, does not properly interact with use of 1 RewriteRule and 2 ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to...

PT-2011-4928

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 1.3.x through 1.3.42 Apache HTTP Server versions 2.0.x through 2.0.64 Apache HTTP Server versions 2.2.x through 2.2.21 Description The issue arises from the mod proxy module not properly interacting with the use of...

CVE-2011-4564

Cross-site scripting XSS vulnerability in the admin script in Active CMS 1.2 allows remote attackers to inject arbitrary web script or HTML via the mod parameter in a module action...

CVE-2011-4564

Cross-site scripting XSS vulnerability in the admin script in Active CMS 1.2 allows remote attackers to inject arbitrary web script or HTML via the mod parameter in a module action...

CVE-2011-4564: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the admin script in Active CMS 1.2 allows remote attackers to inject arbitrary web script or HTML via the mod parameter in a module action...