IBM WebSphere Application Server 8.0 < Fix Pack 9 Multiple Vulnerabilities

IBM WebSphere Application Server 8.0 prior to Fix Pack 9 is running on the remote host. It is, therefore, affected by the following vulnerabilities : - A cross-site scripting flaw exists within the Administration Console, where user input is improperly validated. This could allow a remote attacke...

Profiles <= 2.0RC1 - SQL Injection

The profiles WordPress plugin was affected by a SQL Injection security vulnerability...

SOL15404 - OpenSSL vulnerability CVE-2009-3245

Recommended action You can eliminate this vulnerability by running a version listed in the Versions known to be not vulnerable column in the previous table. If the Versions known to be not vulnerable column does not list a version that is higher than the version you are running, then no upgrade...

SOL15401 - OpenSSL vulnerability CVE-2012-2333

Recommended action You can eliminate this vulnerability by running a version listed in the Versions known to be not vulnerable column in the previous table. If the Versions known to be not vulnerable column does not list a version that is higher than the version you are running, then no upgrade...

V3 Chat - Profiles/Dating Script 3.0.2 - Insecure Cookie Handling Vuln

No description provided by source. + V3 Chat - Profiles/Dating Script v3.0.2 Insecure Cookie Handling Vulnerability + Discovered By : Mountassif Moad + Greetz : All my freind Exploit: javascript:document.cookie = admin=1; path=/; milw0rm.com 2008-11-08...

Akiva WebBoard 8.x SQL Injection Vulnerability

No description provided by source. Exploit Title: Akiva Webboard 8.x SQL Injection + Plaintext Passwords in Profiles. Google Dork: /Powered by WebBoard 8/ Date: 30.12.2011 Author: Alexander Fuchs Software Link: http://www.akiva.com/default.asp?l=1&id=8 Version: 8.x Tested on: Windows, Linux. CVE ...

Hosting Controller 6.1 User Profile Unauthorized Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13816/info Hosting Controller is prone to an unauthorized access vulnerability. Reportedly an authenticated user can modify other user's profiles. This issue is due to a failure in the application to perform proper...

WordPress Profiles plugin <= 2.0 RC1 SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Profiles plugin = 2.0 RC1 SQL Injection Vulnerability Date: 2011-08-28 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/profiles.2.0.RC1.zip Version: 2.0 RC1 tested Note:...

phpBB <= 2.0.19 XSS Remote Cookie Disclosure Exploit

No description provided by source. to be used with cookie stealer located here: http://www.milw0rm.com/id.php?id=1103 Make sure you change www.milw0rm.com to your domain. thnx. /str0ke Author: threesixthousan / As long as html is ON in the latest version of phpBB forums, several XSS attack vector...

V3 Chat Profiles/Dating Script 3.0.2 - (Auth Bypass) SQL Injection Vuln

No description provided by source. V3 Chat - Profiles/Dating Script v3.0.2 Auth Bypass Vulnerability ----------------------------------------------------------------- Discovered By: d3b4g contact: bl4ckendatgmaildotcom Risk: High -------------------------------------------------------------------...

CVE-2014-3810

SQL injection vulnerability in administration/profiles.php in BoonEx Dolphin 7.1.4 and earlier allows remote authenticated administrators to execute arbitrary SQL commands via the members parameter. NOTE: this can be exploited by remote attackers by leveraging CVE-2014-4333...

openSUSE Security Update : samba (openSUSE-SU-2013:1787-1)

"the following security issues were fixed in samba : - ACLs are not checked on opening an alternate data stream on a file or directory; CVE-2013-4475; bso10229 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

CVE-2014-0929

Cross-site request forgery CSRF vulnerability in the Profiles component in IBM Connections through 3.0.1.1 CR3 allows remote authenticated users to hijack the authentication of arbitrary users for requests that trigger follow actions...

CVE-2014-0929

Cross-site request forgery CSRF vulnerability in the Profiles component in IBM Connections through 3.0.1.1 CR3 allows remote authenticated users to hijack the authentication of arbitrary users for requests that trigger follow actions...

CVE-2014-0929

IBM Connections Profiles component (through version 3.0.1.1 CR3) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability that allows remote authenticated users to hijack the authentication of arbitrary users for follow actions. Root cause: CSRF in/profile follow actions. Exploitation det...

CVE-2014-0929: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Profiles component in IBM Connections through 3.0.1.1 CR3 allows remote authenticated users to hijack the authentication of arbitrary users for requests that trigger follow actions...

PT-2014-3952

Name of the Vulnerable Software and Affected Versions IBM Connections versions prior to 3.0.1.1 CR3 Description A cross-site request forgery issue exists in the Profiles component, allowing remote authenticated users to hijack the authentication of arbitrary users for requests that trigger follow...

Persistent Cross Site Scripting Flaw in User Profiles

A persistent cross site scripting flaw exists in user profiles when the user updates his/her Homepage URL from the Atlassian ID system to contain an XSS vector which executes when inserted as a link, and clicked on by the victim. 1. Visit https://id.atlassian.com/profile/ 2. Update your Homepage...

Persistent Cross Site Scripting Flaw in User Profiles

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-46664. panel A persistent cross site scripting flaw exists in user profiles when the user updates his/her Homepage URL from the...

Persistent Cross Site Scripting Flaw in User Profiles

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Cloud. Using Confluence Server? See the corresponding bug report|http://jira.atlassian.com/browse/CONFSERVER-46664. panel A persistent cross site scripting flaw exists in user profiles when the user updates his/her Homepage URL from the...