9974 matches found
CVE-2009-3257
vtiger CRM before 5.1.0 allows remote authenticated users to bypass the permissions on the 1 Account Billing Address and 2 Shipping Address fields in a profile by creating a Sales Order SO associated with that profile...
rgmanager security update
CentOS Errata and Security Advisory CESA-2009:1339 An updated rgmanager package that fixes multiple security issues, various bugs, and adds enhancements is now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team...
Information disclosure
OXID eShop 4.x before 4.1.4-21266, 3.x, and 2.x allows remote attackers to obtain sensitive information session details and order history of other users via a crafted cookie...
CVE-2009-2266
OXID eShop (Community/CE) 4.x up to 4.1.3 and earlier 3.x/2.x is affected by CVE-2009-2266: a crafted cookie can disclose sensitive information—session details and other users’ order history. Root cause is an information-disclosure flaw via cookie handling. Impact is partial confidentiality loss ...
Online Work Order Suite Lite Edition - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/42535/info Online Work Order Suite Lite Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of a...
Online Work Order Suite ASP 3.10 XSS
/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || Online Work Order Suite ASP 3.10 Remote XSS Vulnerabilities Discovered By : Moudi Contact : Download :...
WordPress My Category Order 2.8 SQL Injection
Source: WordPress Plugin: My Category Order = 2.8 mycategoryorder.php / SQL Injection Vulnerability Download: http://wordpress.org/extend/plugins/my-category-order/ No Dork Author: ManhLuat93 at hcegroupdotnet Errors appears only when you have admin control Open mycategoryorder.php Line 47-48: if...
WordPress My Category Order Plugin <= 2.8 - SQL Injection Vulnerability
An SQL injection vulnerability found in mycategoryorder.php Line 47-48. The attacker can exploit this vulnerability via a browser using 'parentID' parameter. Solution Fix manually in mycategoryorder.php: Find this line: $parentID = intval$GET'parentID'; Replace to: $parentID = intval$GET'parentID...
WordPress Plugin My Category Order 2.8 - SQL Injection
Source: WordPress Plugin: My Category Order = 2.8 mycategoryorder.php / SQL Injection Vulnerability Download: http://wordpress.org/extend/plugins/my-category-order/ No Dork Author: ManhLuat93 at hcegroupdotnet Errors appears only when you have admin control Open mycategoryorder.php Line 47-48: if...
WordPress Plugin My Category Order <= 2.8 SQL Injection Vulnerability
No description provided by source. Source: WordPress Plugin: My Category Order = 2.8 mycategoryorder.php / SQL Injection Vulnerability Download: http://wordpress.org/extend/plugins/my-category-order/ No Dork Author: ManhLuat93 at hcegroupdotnet Errors appears only when you have admin control Open...
CVE-2009-2242
SQL injection vulnerability in activeappointments.asp in ASP Inline Corporate Calendar allows remote attackers to execute arbitrary SQL commands via the order parameter...
Sql injection
SQL injection vulnerability in activeappointments.asp in ASP Inline Corporate Calendar allows remote attackers to execute arbitrary SQL commands via the order parameter...
util security update
CentOS Errata and Security Advisory CESA-2009:0981 An updated util-linux package that fixes one security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The util-linux package contains a collection of basic...
shopex4. 7. 2 The use of the program-vulnerability warning-the black bar safety net
by nameless I am nameless, and this time write a shopex4. 7. 2 vulnerability Has been notified of the official, today it is issued to, First syssite/shopadmin/orderservice. php background this document does not verify the identity of the user, It is important$vid parameter is not filtered...
glFusion 1.1.2 SQL Injection
= 4.1 php.ini independent our site: http://retrogod.altervista.org/ software site: http://www.glfusion.org/ google dork: "Page created in" "seconds by glFusion" +RSS Vulnerability, sql injection in 'order' and 'direction' arguments: look ExecuteQueries function in...
glFusion <= 1.1.2 COM_applyFilter()/order SQL Injection Exploit
No description provided by source. ?php / glFusion = 1.1.2 COMapplyFilter/order sql injection exploit by Nine:Situations:Group::bookoo working against Mysql = 4.1 php.ini independent our site: http://retrogod.altervista.org/ software site: http://www.glfusion.org/ google dork: "Page created in"...
glFusion 1.1.2 - COM_applyFilter()order SQL Injection
glFusion 1.1.2 - COMapplyFilterorder SQL Injection = 4.1 php.ini independent our site: http://retrogod.altervista.org/ software site: http://www.glfusion.org/ google dork: "Page created in" "seconds by glFusion" +RSS Vulnerability, sql injection in 'order' and 'direction' arguments: look...
glFusion <= 1.1.2 COM_applyFilter()/order SQL Injection Exploit
Exploit for unknown platform in category web applications =============================================================== glFusion = 4.1 php.ini independent google dork: "Page created in" "seconds by glFusion" +RSS Vulnerability, sql injection in 'order' and 'direction' arguments: look...