CVE-2009-0328: Undefined Security Weakness

ROBS-PROJECTS Digital Sales IPN aka DS-IPN.NET or DS-IPN Paypal Shop stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for Database/Sales.mdb...

Design/Logic Flaw

listing.php in WebSVN 2.0 and possibly 1.7 beta, when using an SVN authz file, allows remote authenticated users to read changelogs or diffs for restricted projects via a modified repname parameter...

CVE-2009-0240

listing.php in WebSVN 2.0 and possibly 1.7 beta, when using an SVN authz file, allows remote authenticated users to read changelogs or diffs for restricted projects via a modified repname parameter...

DS-IPN.NET Digital Sales IPN Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================== DS-IPN.NET Digital Sales IPN Database Disclosure Vulnerability ==============================================================...

DS-IPN.NET Digital Sales IPN Database Disclosure Vulnerability

No description provided by source. -----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

Microsoft Excel VisualBasic Object Validation Code Execution (MS08-057; CVE-2008-3477)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the way Microsoft Excel processes compiled VBA Projects. The vulnerability is due to an error in Microsoft Excel that fails to perform sufficient validation when using the Calendar...

Konqueror 3.5.9 - load Remote Crash

Konqueror 3.5.9 - load Remote Crash document.load''; milw0rm.com 2008-10-10...

Sql injection

Multiple SQL injection vulnerabilities in index.php in dotProject 2.1.2 allow 1 remote authenticated users to execute arbitrary SQL commands via the tab parameter in a projects action, and 2 remote authenticated administrators to execute arbitrary SQL commands via the userid parameter in a viewus...

CVE-2008-2834

SQL injection vulnerability in projects.php in Scientific Image DataBase 0.41 allows remote attackers to execute arbitrary SQL commands via the id parameter...

symfony 1.0.12 is (finally) out !

After two months and more than 30 tickets closed, the 1.0.12 comes with spring. As it fixes an important security issue and windows plugins problems, we do strongly advise you to update your projects. Here is the changelog : r8019: sfWebRequest handles multi-dimensional file input fields backport...

Unfixed XSS vulnerability at www.supinfo-projects.com

Security researcher xylitol, has submitted on 24/02/2008 a cross-site-scripting XSS vulnerability affecting www.supinfo-projects.com, which at the time of submission ranked 41348 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is...

ProjectPier <= 0.80 Cross Site Scripting and Request Forgery

====================================================================== ProjectPier = 0.80 Cross Site Scripting and Request Forgery ====================================================================== Author: L4teral l4teral 4t gmail com Impact: Cross Site Scripting Cross Site Request Forgery...

SA-2008-012 - Project issue tracking - XSS vulnerability in comment summary tables

The Project issue tracking module provides a summary table to show changes in issue states between comments. Users who have certain editing rights may be able to inject arbitrary code on pages containing these tables. Wikipedia has more information about cross site scripting XSS. Versions affecte...

wpquiz-sql.txt

Tytul: wpQuiz 2.7 Remote SQL Injection Vulnerability http://wireplastik.com/projects.php Autor: Kacper E-Mail: [email protected] Strona: devilteam.eu Irc: irc.myg0t.com devilteam Blad:...

softbix-sql.txt

!/usr/bin/perl Softbiz Freelancers Script V.1 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Dr.Crash Script Download : http://www.softbizscripts.com/ DORK: "Search Projects" intitle:"The ultimate project website" Our English Forum : http://ircrash.com/english/ XSS...

CVE-2007-5642: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in PHP Project Management 0.8.10 and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the deflang parameter to modules/files/list.php; the mpath parameter to 2 modules/projects/summary.inc.php or 3...

PHP Project Management <= 0.8.10 Multiple RFI / LFI Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== PHP Project Management = 0.8.10 Multiple RFI / LFI Vulnerabilities =================================================================== PHP Project Management = 0.8.10...

Microsoft Visual Basic 6.0 VBP_Open OLE Local CodeExec Exploit

Exploit for unknown platform in category local exploits ============================================================== Microsoft Visual Basic 6.0 VBPOpen OLE Local CodeExec Exploit ============================================================== !/usr/bin/perl ' ++ Microsoft Visual Basic 6.0 Code...

"Current Assignee" on Browse Permission problem

I have created a permission scheme in Jira but I am experiencing an odd behaviour. I have 5 users in Jira and in the permission scheme, the Browse Projects is assigned to: - Project Lead - Project Role Administrators - Project Role Clients Among the 5 users, 3 fit these categories. One is a proje...

webdesproxy 0.0.1 (GET Request) Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================================== webdesproxy 0.0.1 GET Request Remote Buffer Overflow Exploit ============================================================== / webdesproxyv0.0.1: cygwin remote buffer overflow...