7414 matches found
Konqueror 3.5.9 - load Remote Crash
Konqueror 3.5.9 - load Remote Crash document.load''; milw0rm.com 2008-10-10...
Sql injection
Multiple SQL injection vulnerabilities in index.php in dotProject 2.1.2 allow 1 remote authenticated users to execute arbitrary SQL commands via the tab parameter in a projects action, and 2 remote authenticated administrators to execute arbitrary SQL commands via the userid parameter in a viewus...
CVE-2008-2834
SQL injection vulnerability in projects.php in Scientific Image DataBase 0.41 allows remote attackers to execute arbitrary SQL commands via the id parameter...
symfony 1.0.12 is (finally) out !
After two months and more than 30 tickets closed, the 1.0.12 comes with spring. As it fixes an important security issue and windows plugins problems, we do strongly advise you to update your projects. Here is the changelog : r8019: sfWebRequest handles multi-dimensional file input fields backport...
Unfixed XSS vulnerability at www.supinfo-projects.com
Security researcher xylitol, has submitted on 24/02/2008 a cross-site-scripting XSS vulnerability affecting www.supinfo-projects.com, which at the time of submission ranked 41348 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is...
ProjectPier <= 0.80 Cross Site Scripting and Request Forgery
====================================================================== ProjectPier = 0.80 Cross Site Scripting and Request Forgery ====================================================================== Author: L4teral l4teral 4t gmail com Impact: Cross Site Scripting Cross Site Request Forgery...
SA-2008-012 - Project issue tracking - XSS vulnerability in comment summary tables
The Project issue tracking module provides a summary table to show changes in issue states between comments. Users who have certain editing rights may be able to inject arbitrary code on pages containing these tables. Wikipedia has more information about cross site scripting XSS. Versions affecte...
wpquiz-sql.txt
Tytul: wpQuiz 2.7 Remote SQL Injection Vulnerability http://wireplastik.com/projects.php Autor: Kacper E-Mail: [email protected] Strona: devilteam.eu Irc: irc.myg0t.com devilteam Blad:...
softbix-sql.txt
!/usr/bin/perl Softbiz Freelancers Script V.1 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Dr.Crash Script Download : http://www.softbizscripts.com/ DORK: "Search Projects" intitle:"The ultimate project website" Our English Forum : http://ircrash.com/english/ XSS...
CVE-2007-5642: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in PHP Project Management 0.8.10 and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the deflang parameter to modules/files/list.php; the mpath parameter to 2 modules/projects/summary.inc.php or 3...
PHP Project Management <= 0.8.10 Multiple RFI / LFI Vulnerabilities
Exploit for unknown platform in category web applications =================================================================== PHP Project Management = 0.8.10 Multiple RFI / LFI Vulnerabilities =================================================================== PHP Project Management = 0.8.10...
Microsoft Visual Basic 6.0 VBP_Open OLE Local CodeExec Exploit
Exploit for unknown platform in category local exploits ============================================================== Microsoft Visual Basic 6.0 VBPOpen OLE Local CodeExec Exploit ============================================================== !/usr/bin/perl ' ++ Microsoft Visual Basic 6.0 Code...
"Current Assignee" on Browse Permission problem
I have created a permission scheme in Jira but I am experiencing an odd behaviour. I have 5 users in Jira and in the permission scheme, the Browse Projects is assigned to: - Project Lead - Project Role Administrators - Project Role Clients Among the 5 users, 3 fit these categories. One is a proje...
webdesproxy 0.0.1 (GET Request) Remote Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ============================================================== webdesproxy 0.0.1 GET Request Remote Buffer Overflow Exploit ============================================================== / webdesproxyv0.0.1: cygwin remote buffer overflow...
osp <= 1.2.1 (cfgPathToProjectAdmin) Remote File Include Vulnerablities
osp = 1.2.1 cfgPathToProjectAdmin Remote File Include Vulnerablities D.Script: http://nlcac.internationalstudents.asn.au/osp1.01RC1.tar http://sourceforge.net/projects/osp/ latest Discovered by: Alkomandoz Hacker Homepage: http://www.asb-may.net & TrYaG.CoM & MoHaNdKo.CoM Exploit:...
CVE-2007-1638
Multiple cross-site request forgery CSRF vulnerabilities in the checkcsrftoken function in lib/lib.inc.php in PHProjekt 5.2.0, when magicquotesgpc is disabled, allow remote attackers to perform unauthorized actions as an arbitrary user via the 1 Projects, 2 Contacts, 3 Helpdesk, 4 Notes, 5 Search...
CVE-2007-1576: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in PHProjekt 5.2.0, when magicquotesgpc is disabled, allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors to the 1 Projects, 2 Contacts, 3 Helpdesk, 4 Search only Gecko engine driven Browsers, and 5 Notes...
Interview:w00w00
w00w00 One of the first to respond to a request for an interview was w00w00 pronounced "woo-woo", their website . A group highly respected among those who are interested in security issues - they have discovered a lot of holes in security systems, many interesting tactics of hacker attacks. The...
CVE-2005-4822: Undefined Security Weakness
SQL injection vulnerability in projects/project-edit.asp in Digger Solutions Intranet Open Source IOS version 2.7.2 allows remote attackers to execute arbitrary SQL commands via the projectid parameter...
