Directory traversal

Directory traversal vulnerability in AFP Server in Apple Mac OS X before 10.6.3 allows remote attackers to list a share root's parent directory, and read and modify files in that directory, via unspecified vectors...

CVE-2010-0533

Directory traversal vulnerability in AFP Server in Apple Mac OS X before 10.6.3 allows remote attackers to list a share root's parent directory, and read and modify files in that directory, via unspecified vectors...

PYSEC-2010-13

MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchical ACLs, which allows remote attackers to bypass intended access restrictions by requesting an item, a different vulnerability than CVE-2008-6603...

httpd: request header information leak

The apreadrequest function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which might allow remote attackers to obtain...

DEBIAN-CVE-2010-0434

The apreadrequest function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which might allow remote attackers to obtain...

dovecot -- Insecure directory permissions

Dovecot author reports: Dovecot v1.2.x had been creating basedir and its parents if necessary with 0777 permissions. The basedir's permissions get changed to 0755 automatically at startup, but you may need to chmod the parent directories manually...

CVE-2009-3751

Cross-site scripting XSS vulnerability in home.php in Opial 1.0 allows remote attackers to inject arbitrary web script or HTML via the genresparent parameter...

CVE-2009-3215: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in IXXO Cart Standalone before 3.9.6.1, and the IXXO Cart component for Joomla! 1.0.x, allows remote attackers to execute arbitrary SQL commands via the parent parameter...

Opial 1.0 Arbitrary File Upload/XSS/SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ================================================================= Opial 1.0 Arbitrary File Upload/XSS/SQL Injection Vulnerabilities ================================================================= Opial 1.0 Arbitrary File Upload & XSS & S...

Cross site scripting

Cross-site scripting XSS vulnerability in WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to inject arbitrary web script or HTML via vectors related to parent and top objects...

CVE-2009-1724: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to inject arbitrary web script or HTML via vectors related to parent and top objects...

CVE-2009-2083: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the term data detail page in Taxonomy manager 5.x before 5.x-1.2, a module for Drupal, allows remote authenticated users, with administer taxonomy privileges or the ability to use free tagging to add taxonomy terms, to inject arbitrary web script or HTML...

Online Grades And Attendance 3.2.6 SQL Injection

!/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ Parent Register name Credentials Changer SQLi EXPLOIT | |--------------------------------------------------------------------------------------------| | | Online...

Online Grades And Attendance 3.2.6 Blind SQL Injection

!/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ 'cc' Blind SQLi EXPLOIT | |--------------------------------------------------------------------------------------------| | | Online Grades & Attendance v-3.2.6 | |...

(Post Form --> 'cc') Blind (SQLi) EXPLOIT --Online Grades & Attendance <= v-3.2.6-->

!/usr/bin/perl ----------------------------------------------------------------------------------- Post Form -- 'cc' Blind SQLi EXPLOIT --Online Grades & Attendance v-3.2.6-- ----------------------------------------------------------------------------------- CMS INFORMATION: --WEB:...

Online Grades Attendance 3.2.6 - Blind SQL Injection

Online Grades Attendance 3.2.6 - Blind SQL Injection !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

Online Grades & Attendance 3.2.6 Credentials Changer SQL Exploit

No description provided by source. !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

Online Grades & Attendance 3.2.6 - Credentials Changer SQL

!/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ----------------------------------------------------------------------------------------------...

Online Grades & Attendance 3.2.6 Multiple SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ======================================================================= Online Grades & Attendance 3.2.6 Multiple SQL Injection Vulnerabilities =======================================================================...

Online Grades & Attendance 3.2.6 Credentials Changer SQL Exploit

Exploit for unknown platform in category web applications ================================================================ Online Grades & Attendance 3.2.6 Credentials Changer SQL Exploit ================================================================ !/usr/bin/perl...