CVE-2010-1875

CVE-2010-1875 affects the Joomla! Real Estate Property component (com_properties) 3.1.22-03. A directory traversal flaw allows unauthenticated remote attackers to read arbitrary files via a dot-dot sequence in the controller parameter to index.php. The connected Nuclei template confirms the vulne...

CVE-2010-1874: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Real Estate Property comproperties component 3.1.22-03 for Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an agentlisting action to index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-1875: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Real Estate Property comproperties component 3.1.22-03 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php. NOTE: some of these details are obtaine...

Design/Logic Flaw

The Awingsoft Awakening Winds3D Viewer plugin 3.5.0.9 allows remote attackers to execute arbitrary programs via a SceneURL property value with a URL for a .exe file...

CVE-2010-1721: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Intellectual Property aka IProperty or comiproperty component 1.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an agentproperties action to index.php...

VulnCheck KEV: CVE-2007-3147

Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the send method. NOTE: some of these details are obtained from third party information...

VulnCheck KEV: CVE-2007-3148

Buffer overflow in the Yahoo! Webcam Viewer ActiveX control in ywcvwr.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to execute arbitrary code via a long server property value to the receive method...

Joomla JE Property Finder Shell Upload

Exploit Title: Upload Vulnerability in JE Property Finder component Version: Web Application Date: 28 apr,2010 Author:Sid3^effects Code : -------------------------------------------------------------------------------------- Sid3^effects aKa HaRi Greetz to all Andhra Hackers and ICW MemebersIndia...

Joomla! Component com_jesectionfinder - Arbitrary File Upload

-------------------------------------------------------------------------------------- Sid3^effects aKa HaRi Greetz to all Andhra Hackers and ICW MemebersIndian Cyber Warriors Thanks:L0rd ÇrusAdêr,d4rk-blu™®,R45C4L idi0th4ck3r,CR4C| 008,M4n0j,MaYuR ShouTZ:kedar,dec0d3r Catch us at...

Joomla iProperty 1.5.3 SQL Injection

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- Joomla...

Joomla! Component com_manager 1.5.3 - 'id' SQL Injection

----------------------------------------------------------------------- Joomla Component commanager 1.5.3 id SQL Injection Vulnerability ----------------------------------------------------------------------- Author : Islam DefenDers Mr.HaMaDa Site : http://MiXaTy.com Date : April, 15-2010 Locati...

Joomla Manager 1.5.3 SQL Injection

----------------------------------------------------------------------- Joomla Component commanager 1.5.3 id SQL Injection Vulnerability ----------------------------------------------------------------------- Author : Islam DefenDers Mr.HaMaDa Site : http://MiXaTy.com Date : April, 15-2010 Locati...

Joomla Component com_iproperty 1.5.3 (id) SQL Injection Vulnerability

No description provided by source. ----------------------------------------------------------------------- Joomla Component comiproperty 1.5.3 id SQL Injection Vulnerability ----------------------------------------------------------------------- Author : v3n0m Site : http://yogyacarderlink.web.id...

Joomla! Component Intellectual Property 1.5.3 - id SQL Injection

Joomla! Component Intellectual Property 1.5.3 - id SQL Injection / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...

Joomla! Component Intellectual Property 1.5.3 - 'id' SQL Injection

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- Joomla...

Joomla Component com_iproperty 1.5.3 (id) SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================================================== Joomla Component comiproperty 1.5.3 id SQL Injection Vulnerability ===================================================================== / / / \ \ \ \ \ / / \\ \ \ \ \ // //...

Joomla! Component Real Estate Property 3.1.22-03 - aid SQL Injection

Joomla! Component Real Estate Property 3.1.22-03 - aid SQL Injection +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Author: c4uR [email protected] Date: April, 10-2010 INDONESIA Exploit Title: Joomla Component compropertiesaid SQL Injection Vulnerability...

Security Programs Focusing Too Much on Compliance, Study Finds

Enterprises are spending huge amounts of money on compliance programs related to PCI-DSS, HIPAA and other regulations, but those funds may be misdirected in light of the priorities of most information security programs, a new study has found. A paper by Forrester Research, commissioned by Microso...

CVE-2010-1226

The HTTP client functionality in Apple iPhone OS 3.1 on the iPhone 2G and 3.1.3 on the iPhone 3GS allows remote attackers to cause a denial of service Safari, Mail, or Springboard crash via a crafted innerHTML property of a DIV element, related to a "malformed character" issue...

CVE-2010-1226

The HTTP client functionality in Apple iPhone OS 3.1 on the iPhone 2G and 3.1.3 on the iPhone 3GS allows remote attackers to cause a denial of service Safari, Mail, or Springboard crash via a crafted innerHTML property of a DIV element, related to a "malformed character" issue...