4355 matches found
Open Auto Classifieds 1.5.9 - Multiple Vulnerabilities
MorningStar Security - Advisory http://www.morningstarsecurity.com/ Multiple security issues in Open Auto Classifieds 1. Advisory Information ---------------------------------------------------------------------------------------------- Title: Multiple security issues in Open Auto Classifieds...
CVE-2008-6981
index.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to obtain the full installation path via an invalid resultsperpage parameter, which leaks the path in an error message. NOTE: this issue might be resultant from a separate SQL injection vulnerability...
3CX Phone System login.php Multiple Parameter XSS
3CX Phone System for Windows, a software-based IP PBX, is installed on the remote host. The installed version fails to sanitize input to the 'fName' and 'fPassword' parameters in 'login.php' before using it to generate an HTML response dynamically. An unauthenticated remote attacker may be able t...
Vulnerabilities in Dumb math captcha for WordPress
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Anti-automation и Full path disclosure уязвимостях в плагине Dumb math captcha для WordPress. Insufficient Anti-automation: Капча на страницах записей уязвима к Constant values bypass method, который я описал в проекте Month of Bugs i...
CSRF, SQL Injection and Full path disclosure vulnerabilities in XAMPP
Hello 3APA3A! I want to warn you about new security vulnerabilities in XAMPP. These are Cross-Site Request Forgery, SQL Injection and Full path disclosure vulnerabilities. CSRF: http://site/xampp/cds-fpdf.php It's possible to delete or add data in test table as via CSRF, and as via Insufficient...
Cross-Site Scripting, CSRF, SQL Injection and Full path disclosure vulnerabilities in XAMPP
Hello 3APA3A! I want to warn you about new security vulnerabilities in XAMPP which I found at 23.06.2009. These are Cross-Site Scripting, Cross-Site Request Forgery, SQL Injection and Full path disclosure vulnerabilities. XSS:...
[ISecAuditors Security Advisories] Joomla! < 1.5.12 Multiple Full Path Disclosure vulnerabilities
============================================= INTERNET SECURITY AUDITORS ALERT 2009-009 - Original release date: July 21st, 2009 - Last revised: July 23rd, 2009 - Discovered by: Juan Galiana Lara - Severity: 5/10 CVSS Base Score ============================================= I. VULNERABILITY...
phpBMS 0.96 XSS / SQL Injection
phpBMS v0.96 phpbms.org eLwauxc2009, uasc.org.ua http://phpbms.org/trial/ SQL Inj ------------------------------------------------------------------------------------------------------------------------------------------------------------------------- $querystatement="SELECT...
phpbms 0.96 - Multiple Vulnerabilities
phpbms 0.96 - Multiple Vulnerabilities phpBMS v0.96 phpbms.org eLwauxc2009, uasc.org.ua http://phpbms.org/trial/ SQL Inj -------------------------------------------------------------------------------------------------------------------------------------------------------------------------...
phpBMS 0.96 Multiple Remote Vulnerabilities
No description provided by source. phpBMS v0.96 phpbms.org eLwauxc2009, uasc.org.ua http://phpbms.org/trial/ SQL Inj -------------------------------------------------------------------------------------------------------------------------------------------------------------------------...
phpBMS 0.96 Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications =========================================== phpBMS 0.96 Multiple Remote Vulnerabilities =========================================== phpBMS v0.96 phpbms.org eLwauxc2009, uasc.org.ua http://phpbms.org/trial/ SQL Inj...
phpbms 0.96 - Multiple Vulnerabilities
phpBMS v0.96 phpbms.org eLwauxc2009, uasc.org.ua http://phpbms.org/trial/ SQL Inj ------------------------------------------------------------------------------------------------------------------------------------------------------------------------- $querystatement="SELECT...
KerviNet Forum 1.1 SQL Injection / XSS
dork: "Copyright KerviNet" eLwauxc 20.06.2009 Blind SQLinj /index.php ------------------------------------------------------------------------------------------------- if$COOKIE'userenter'=="auto" $enterlogin=$COOKIE'enterlogin'; $enterparol=$COOKIE'enterparol'; $mysql-query"SELECT name, pass,...
KerviNet Forum <= 1.1 Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ===================================================== KerviNet Forum query"SELECT name, pass, status FROM users WHERE name = '".$enterlogin."' AND pass = '".$enterparol."'";...
kervinet forum 1.1 - Multiple Vulnerabilities
kervinet forum 1.1 - Multiple Vulnerabilities dork: "Copyright KerviNet" eLwauxc 20.06.2009 Blind SQLinj /index.php ------------------------------------------------------------------------------------------------- if$COOKIE'userenter'=="auto" $enterlogin=$COOKIE'enterlogin';...
KerviNet Forum <= 1.1 Multiple Remote Vulnerabilities
No description provided by source. dork: "Copyright KerviNet" eLwauxc 20.06.2009 Blind SQLinj /index.php ------------------------------------------------------------------------------------------------- if$COOKIE'userenter'=="auto" $enterlogin=$COOKIE'enterlogin'; $enterparol=$COOKIE'enterparol';...
CMS chainuk 1.2 - Multiple Vulnerabilities
CMS chainuk 1.2 - Multiple Vulnerabilities CMS Chainuk = v.1.2 Vulns Home: Cms.tut.su Dork: "Cms.tut.su, 2009 g." eLwauxc 14.06.2 LFI /index.php --------------------------------------------------------------------------- 6: if isset$GET 'id' 7: 8: color=white$id = $GET 'id';/color 9: 10: else 11:...
kervinet forum 1.1 - Multiple Vulnerabilities
dork: "Copyright KerviNet" eLwauxc 20.06.2009 Blind SQLinj /index.php ------------------------------------------------------------------------------------------------- if$COOKIE'userenter'=="auto" $enterlogin=$COOKIE'enterlogin'; $enterparol=$COOKIE'enterparol'; $mysql-query"SELECT name, pass,...
CMS chainuk 1.2 - Multiple Vulnerabilities
CMS Chainuk = v.1.2 Vulns Home: Cms.tut.su Dork: "Cms.tut.su, 2009 g." eLwauxc 14.06.2 LFI /index.php --------------------------------------------------------------------------- 6: if isset$GET 'id' 7: 8: color=white$id = $GET 'id';/color 9: 10: else 11: 12: $id = $index; 13: 14: if fileexists...
Vulnerabilities in CMS SiteLogic
Здравствуйте 3APA3A! Сообщаю вам о найденных мною SQL Injection, Full path disclosure и Cross-Site Scripting уязвимостях в CMS SiteLogic. SQL Injection: http://site/index.php?mid=-120union20select201,1,version,1,1,1,1,1 Full path disclosure: http://site/index.php?mid=’ http://site/includes/stat.p...