SQL Injection Vulnerability in Webkravat Content Management System ic.php Page

Webkrava is a small cms system by php+mysql. A SQL injection vulnerability exists in the ic.php page of the Webkravat content management system. The lack of filtering of the 'id' parameter allows an attacker to exploit the vulnerability to obtain sensitive information about the database...

EasyNetSites 'name.php' Page Cross-Site Scripting Vulnerability

EasyNetSites is a WEB-based tool for managing organizational relationships on websites. A cross-site scripting vulnerability exists in the as parameter of the name.php page of EasyNetSites, which can be exploited by an attacker to steal cookie-based authentication or inject malicious script...

Remote Command Execution Vulnerability in the IG_dir Parameter in Kingsoft KingGate Firewall schedule.php Page

KingGate Firewall is a firewall product. A remote command execution vulnerability exists in the IGdir parameter in the schedule.php page of Kingsoft KingGate Firewall. It allows an attacker to execute system commands by submitting a POST request as: IGoperation=IGdelete&IGcheckbox=1...

PT-2014-8999 · Frederick Townes · W3 Total Cache

Name of the Vulnerable Software and Affected Versions: W3 Total Cache plugin versions prior to 0.9.4.1 Description: The issue allows remote attackers to conduct cross-site request forgery CSRF attacks. This is possible due to the improper handling of empty nonces, which can lead to the hijacking ...

Mozilla Firefox <= 3.6 - Denial of Service Exploit

No description provided by source. ?php / Title: Mozilla Firefox =3.6 - Remote Denial Of Service Exploit Date: 25/02/10 Author: Ale46 - ale46atparanoicidotorg Software Link: http://www.mozilla-europe.org/en/firefox/ Version: 3.6 and 3.5.8 are vulnerable so I think that all versions = 3.6 have the...

PHP Filter Wrapper Information Disclosure

An information disclosure vulnerability has been reported in the PHP filter wrapper function. A remote attacker can exploit this vulnerability by sending a specially crafted URL to an affected PHP page...

Fedora Update for tinymce-spellchecker FEDORA-2013-1341

Check for the Version of tinymce-spellchecker OpenVAS Vulnerability Test Fedora Update for tinymce-spellchecker FEDORA-2013-1341 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Fedora Update for tinymce-spellchecker FEDORA-2013-1371

Check for the Version of tinymce-spellchecker OpenVAS Vulnerability Test Fedora Update for tinymce-spellchecker FEDORA-2013-1371 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Mozilla Firefox <= 12.0 Denial Of Service Exploit

Exploit for windows platform in category dos / poc Title: Mozilla Firefox FF go away : function FTB var A1 = unescape"%u4141%u4141"; var A2 = unescape"%u4242%u4242"; var A3 = unescape"%u4343%u4343"; var A4 = unescape"%u4444%u4444"; fori=0; i 0day.today 2018-03-19...

Mozilla Firefox 3.6 - Denial of Service (2)

Mozilla Firefox 3.6 - Denial of Service 2 '; $b = ''; for $i=0;$i'; $b .= ''; echo ''; echo $a; echo "hadouken!"; echo $b; echo ''; ?...

Unfixed XSS vulnerability at www.entropy.ch

Security researcher OMEHA, has submitted on 10/05/2007 a cross-site-scripting XSS vulnerability affecting www.entropy.ch, which at the time of submission ranked 95812 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/05/2007. It is currently...

Unfixed XSS vulnerability at www.cyberspiesclub.com

Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting www.cyberspiesclub.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is...

Unfixed XSS vulnerability at www.ajda.net

Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting www.ajda.net, which at the time of submission ranked 1097337 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is...