[InterN0T] Pivot 1.40.4-7 - Multiple Vulnerabilities

Pivot - XSS and HTML Injection Vulnerabilities Versions Affected: 1.40.4 and 1.40.7 22nd March 2009 newest Info: Pivot is a web-based tool to help you maintain dynamic sites, like weblogs or online journals. Pivot is released under the GPL so it is completely free to use. It is written in PHP, an...

Pivot 1.40.4-7 XSS / HTML Injection

Pivot - XSS and HTML Injection Vulnerabilities Versions Affected: 1.40.4 and 1.40.7 22nd March 2009 newest Info: Pivot is a web-based tool to help you maintain dynamic sites, like weblogs or online journals. Pivot is released under the GPL so it is completely free to use. It is written in PHP, an...

Pivot 1.40.4-7 Multiple Remote Vulnerabilities

No description provided by source. Pivot - XSS and HTML Injection Vulnerabilities Versions Affected: 1.40.4 and 1.40.7 22nd March 2009 newest Info: Pivot is a web-based tool to help you maintain dynamic sites, like weblogs or online journals. Pivot is released under the GPL so it is completely fr...

pivot 1.40.4-7 - Multiple Vulnerabilities

Pivot - XSS and HTML Injection Vulnerabilities Versions Affected: 1.40.4 and 1.40.7 22nd March 2009 newest Info: Pivot is a web-based tool to help you maintain dynamic sites, like weblogs or online journals. Pivot is released under the GPL so it is completely free to use. It is written in PHP, an...

CVE-2009-1949

importwbb1.php in Unclassified NewsBoard UNB 1.6.4 allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message...

[InterN0T] Geeklog 1.5 - Pre-Installation Vulnerabilities

Geeklog - Pre-Installation Vulnerabilities Version Affected: 1.5.2sr4 18th April 2009 newest Info: See website for more details. Opinion: The system seems to be more secure than most web application systems on the Internet these days. Credits: InterN0T External Links: http://www.geeklog.net/ -::...

Unclassified NewsBoard 1.6.4 SQL Injection / Disclosure

Author girex Homepage girex.altervista.org Date 31/05/2009 CMS Unclassified NewsBoard 1.6.4 and maybe lower Dork "This board is powered by the Unclassified NewsBoard software, 1.6.4" Multiple remote vulnerabilities 1 Remote SQL Injection php.ini regardless 2 Logs File Disclosure registerglobals =...

unclassified NewsBoard 1.6.4 - Multiple Vulnerabilities

unclassified NewsBoard 1.6.4 - Multiple Vulnerabilities Author girex Homepage girex.altervista.org Date 31/05/2009 CMS Unclassified NewsBoard 1.6.4 and maybe lower Dork "This board is powered by the Unclassified NewsBoard software, 1.6.4" Multiple remote vulnerabilities 1 Remote SQL Injection...

Unclassified NewsBoard 1.6.4 Multiple Remote Vulnerabilities

No description provided by source. Author girex Homepage girex.altervista.org Date 31/05/2009 CMS Unclassified NewsBoard 1.6.4 and maybe lower Dork "This board is powered by the Unclassified NewsBoard software, 1.6.4" Multiple remote vulnerabilities 1 Remote SQL Injection php.ini regardless 2 Log...

Unclassified NewsBoard 1.6.4 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ Unclassified NewsBoard 1.6.4 Multiple Remote Vulnerabilities ============================================================ Author girex Date 31/05/2009 CMS Unclassified NewsBoard...

unclassified NewsBoard 1.6.4 - Multiple Vulnerabilities

Author girex Homepage girex.altervista.org Date 31/05/2009 CMS Unclassified NewsBoard 1.6.4 and maybe lower Dork "This board is powered by the Unclassified NewsBoard software, 1.6.4" Multiple remote vulnerabilities 1 Remote SQL Injection php.ini regardless 2 Logs File Disclosure registerglobals =...

Design/Logic Flaw

activeCollab 2.1 Corporate allows remote attackers to obtain sensitive information via an invalid reroute parameter to the login script, which reveals the installation path in an error message...

DOURAN Portal <= 3.9.0.23 Multiple Remote Vulnerabilities

No description provided by source. Abysssec Inc Public Advisory Description : these vulnerabilites found one year ago and new version of this portal "is not" affect whith these vulnerabilites anymore but still lots of web site uses of old version and are vulnerable and also new version is not...

DOURAN Portal 3.9.0.23 File Up/Download Issues

Abysssec Inc Public Advisory Description : these vulnerabilites found one year ago and new version of this portal "is not" affect whith these vulnerabilites anymore but still lots of web site uses of old version and are vulnerable and also new version is not "fully secure" . so because of patchin...

douran portal 3.9.0.23 - Multiple Vulnerabilities

douran portal 3.9.0.23 - Multiple Vulnerabilities Abysssec Inc Public Advisory Description : these vulnerabilites found one year ago and new version of this portal "is not" affect whith these vulnerabilites anymore but still lots of web site uses of old version and are vulnerable and also new...

Multiple vulnerabilities in YaBook

Здравствуйте 3APA3A! Сообщаю вам о найденных мною SQL Injection, Redirector, HTTP Response Splitting, Information Leakage и Full path disclosure уязвимостях в YaBook. SQL Injection: http://site/guestbook/index.php?action=jump&id=-120union20select20version Redirector через SQL Injection:...

DOURAN Portal <= 3.9.0.23 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================= DOURAN Portal = 3.9.0.23 Multiple Remote Vulnerabilities ========================================================= Abysssec Inc Public Advisory Description : these vulnerabilites...

douran portal 3.9.0.23 - Multiple Vulnerabilities

Abysssec Inc Public Advisory Description : these vulnerabilites found one year ago and new version of this portal "is not" affect whith these vulnerabilites anymore but still lots of web site uses of old version and are vulnerable and also new version is not "fully secure" . so because of patchin...

activeCollab XSS and Full Path Disclosure

activeCollab XSS and Full Path Disclosure Vuln. discovered by : r0t Date: 17 May 2009 Vendor:http://www.activecollab.com/ affected versions:2.1, corporate other versions also can be affected. orginal advisory: http://pridels-team.blogspot.com/2009/05/activecollab-xss-and-full-path.html 1.Cross-Si...

Vulnerabilities in OpenX

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Full path disclosure, Cross-Site Scripting и Redirector уязвимостях в OpenX. Full path disclosure: http://site/openx/www/delivery/fc.php?MAXtype=1 XSS: http://site/openx/www/delivery/fc.php?MAXtype=3Cscript3Ealertdocument.cookie3C/script3E XSS обх...