Critical: php

Issue Overview: The asn1timetotimet function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse 1 notBefore and 2 notAfter timestamps in X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of...

[FoxOne] Free OSINT Tool - Server Reconnaissance Scanner

FoxOne is a free OSINT tool, described by the author th3j35t3r as a Non-Invasive and Non-Detectable Server Reconnaissance Scanner. Bypassing API limitations and currently detecting 6500+ vulnerable server paths/files – without ever touching the target server. Very good for getting hold of intel o...

Oracle Linux 5 : php (ELSA-2009-0338)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0338 advisory. - ext/gd: fix overflow2 usage for CVE-2007-3996, CVE-2008-3658 Tenable has extracted the preceding description block directly from the Oracle Linux...

phpcms-2 0 0 8-pass to kill the injection-vulnerability warning-the black bar safety net

0×0 1 leading edge Phpcms2008 is a paragraph based on PHP+Mysql architecture of the web content management system, it is an open-source PHP development platform. Phpcms uses a modular approach to the development, functional and easy to use to facilitate the expansion, for medium to large sites...

Calendar Scripts A.M.Y. Ad Management Software 1.4 Persistent XSS Vulnerability

Exploit for php platform in category web applications Advisory:Calendar Scripts A.M.Y. Ad Management Software 1.4 Persistent XSS Vulnerability Version:1.4 Vendor URL: http://calendarscripts.info/ Demo Link:http://demo.pimteam.net/amy/admin.php Author: Viknesvaran Sittaramane Category: Webapp...

Calendar Scripts A.M.Y 1.4 Cross Site Scripting

Advisory:Calendar Scripts A.M.Y. Ad Management Software 1.4 Persistent XSS Vulnerability Version:1.4 Vendor URL: http://calendarscripts.info/ Demo Link:http://demo.pimteam.net/amy/admin.php Author: Viknesvaran Sittaramane Category: Webapp Twiiter: https://twitter.com/csvsn ........... Product...

Ad Rotator AdPeeps 8.6.9 Cross Site Scripting

Advisory: Ad Rotator AdPeeps 8.6.9 Persistent XSS Vulnerability Version:8.6.9 Vendor URL: http://adpeeps.com/ Demo Link:http://demo.adpeeps.com/ Author: Viknesvaran Sittaramane Category: Webapp Twiiter: https://twitter.com/csvsn ........... Product Description ........... Ad Peeps is a banner...

CubeCart 4.4.6 and lower | Cross Site Request Forgery (CSRF) Vulnerability

OVERVIEW CubeCart 4.4.6 and lower versions are vulnerable to Cross Site Request Forgery CSRF. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that have PHP & MySQL support. With CubeCart you can quickly setup a...

CubeCart 4.4.6 Cross Site Scripting

OVERVIEW CubeCart 4.4.6 and lower versions are vulnerable to Cross Site Scripting. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that have PHP & MySQL support. With CubeCart you can quickly setup a powerful online...

BananaDance Wiki b2.2 - Multiple Web Vulnerabilities

Title: ====== BananaDance Wiki b2.2 - Multiple Web Vulnerabilities Date: ===== 2012-11-10 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=745 VL-ID: ===== 745 Common Vulnerability Scoring System: ==================================== 7.1 Introduction: ============= Banan...

BananaDance Wiki b2.2 - Multiple Web Vulnerabilities

Document Title: =============== BananaDance Wiki b2.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=745 Release Date: ============= 2012-11-09 Vulnerability Laboratory ID VL-ID: ==================================== 745...

MetInfo m topology enterprise website management system 5. 0. 2 code auditing exploit and repair summary-vulnerability warning-the black bar safety net

MetInfo enterprise website management system using PHP+Mysql schema, full Station built-in SEO search engine optimization mechanism, support user since defined interface languageglobal various language, has enterprise website common of module features corporate profile module, news module, produc...

TorrentTrader 2.08 XSS / Directory Traversal / Bypass Vulnerabilities

Exploit for php platform in category web applications waraxe-2012-SA089 - Multiple Vulnerabilities in TorrentTrader 2.08 =============================================================================== Author: Janek Vind "waraxe" Date: 17. September 2012 Location: Estonia, Tartu Web:...

Banana Dance Wiki b2.2 Multiple Vulnerabilities

Exploit for php platform in category web applications BananaDance Wiki b2.2 - Multiple Web Vulnerabilities Banana Dance is an open-source PHP/MySQL-based program. It is designed to combine the simplicity of wiki-publishing software with the versatility of a CMS. The program also promotes...

webid 1.0.4 - Multiple Vulnerabilities

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com 2012-08-17 WeBid = 1.0.4 Multiple Vulnerabilities Script: "Open source php/mysql fully featured auction script" Vendor:...

webid 1.0.4 - Multiple Vulnerabilities

webid 1.0.4 - Multiple Vulnerabilities :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com 2012-08-17 WeBid = 1.0.4 Multiple Vulnerabilities Script: "Open source php/mysql fully...

phpmoneybooks 1.03 - Persistent Cross-Site Scripting

Exploit Title: phpmoneybooks 1.03 Stored XSS Date: Jun 28, 2012 Exploit Author: chap0 - chap0.blogspot.com - @chap0 Vendor Homepage: http://phpmoneybooks.com/ Software Link: http://sourceforge.net/projects/phpmoneybooks/files/phpMoneyBooks103.zip/download Version: 1.03 Patch: Upgrade to 1.04 Vend...

Agora Project 2.13.1 Cross Site Scripting / SQL Injection

Agora Project 2.13.1 Multiple Vulnerabilities Release Date Bug. 15-06-2012 Vendor Notification Date. Never Product. Agora project Affected versions. 2.13.1 and less Type. No Commercial Attack Vector. XSS, SQLi, BSQLi Solution Status. unpublished CVE reference. Not yet assigned Download...

agora project 2.13.1 - Multiple Vulnerabilities

agora project 2.13.1 - Multiple Vulnerabilities Agora Project 2.13.1 Multiple Vulnerabilities Release Date Bug. 15-06-2012 Vendor Notification Date. Never Product. Agora project Affected versions. 2.13.1 and less Type. No Commercial Attack Vector. XSS, SQLi, BSQLi Solution Status. unpublished CVE...

Simple Forum PHP 2.1 SQL Injection

Title: ====== Simple Forum PHP 2.1 - SQL Injection Vulnerabilities Date: ===== 2012-06-10 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=599 VL-ID: ===== 599 Common Vulnerability Scoring System: ==================================== 7.5 Introduction: ============= Simpl...