CVE-2010-1720

SQL injection vulnerability in the Q-Personel comqpersonel component 1.0.2 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the katid parameter in a qpListele action to index.php...

CVE-2010-1720

CVE-2010-1720 describes a SQL injection vulnerability in Joomla! component Q-Personel (com_qpersonel) 1.0.2 and earlier. The flaw allows remote attackers to execute arbitrary SQL commands via the katid parameter in a qpListele action to index.php. Documents confirm affected software and root caus...

Flex File Manager Shell Upload Vulnerability

Exploit for php platform in category web applications ============================================ Flex File Manager Shell Upload Vulnerability ============================================ Flex File Manager Shell Upload Vulnerability Author: Mr.MLL Published: 2010-04-19 Verified: yes Download...

Joomla QPersonal SQL Injection

Exploit Title: Joomla Component QPersonel SQL Injection Vulnerability Date: 13.04.2010 Author: Valentin Category: webapps/0day Version: XSS security fix from 31.12.2009, 1.02 and before Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: |::...

Joomla Component QPersonel SQL Injection Vulnerability

No description provided by source. Exploit Title: Joomla Component QPersonel SQL Injection Vulnerability Date: 13.04.2010 Author: Valentin Category: webapps/0day Version: XSS security fix from 31.12.2009, 1.02 and before Tested on: Debian Lenny, MySQL 5 CVE : Code :...

Joomla! Component QPersonel 1.0.2 - SQL Injection

Joomla! Component QPersonel 1.0.2 - SQL Injection Exploit Title: Joomla Component QPersonel SQL Injection Vulnerability Date: 13.04.2010 Author: Valentin Category: webapps/0day Version: XSS security fix from 31.12.2009, 1.02 and before Tested on: Debian Lenny, MySQL 5 CVE : Code :...

Joomla! Component QPersonel 1.0.2 - SQL Injection

Exploit Title: Joomla Component QPersonel SQL Injection Vulnerability Date: 13.04.2010 Author: Valentin Category: webapps/0day Version: XSS security fix from 31.12.2009, 1.02 and before Tested on: Debian Lenny, MySQL 5 CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1...

CVE-2009-4736

Cross-site scripting XSS vulnerability in search.php in CommonSense CMS 5.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2010-1072

Cross-site scripting XSS vulnerability in search.php in Sniggabo CMS 2.21 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

Dan Geer, In-Q-Tel

Anyone who has ever had a single conversation with Dan, or even seen him speak, will understand immediately why he’s on this list. Dan’s as smart as they come he has a Ph.D. in biostatistics! and his widely varied background gives him a truly unique perspective on security issues. His talks and...

CVE-2009-4575

Cross-site scripting XSS vulnerability in the Q-Personel comqpersonel component 1.0.2 RC2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the personelsira parameter in a sirala action to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the Q-Personel comqpersonel component 1.0.2 RC2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the personelsira parameter in a sirala action to index.php...

CVE-2009-4575

Cross-site scripting XSS vulnerability in the Q-Personel comqpersonel component 1.0.2 RC2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the personelsira parameter in a sirala action to index.php...

Sql injection

SQL injection vulnerability in the Q-Proje Siirler Bileseni comsiirler component 1.2 RC for Joomla! allows remote attackers to execute arbitrary SQL commands via the sid parameter in an sdetay action to index.php...

CVE-2009-3972

CVE-2009-3972 describes an SQL injection in the Q-Proje Siirler Bileseni (com_siirler) component for Joomla! version 1.2 RC, allowing remote attackers to inject arbitrary SQL via the sid parameter in the sdetay action of index.php. Affected software: com_siirler 1.2 RC on Joomla!. Root cause: imp...

CVE-2009-3972

SQL injection vulnerability in the Q-Proje Siirler Bileseni comsiirler component 1.2 RC for Joomla! allows remote attackers to execute arbitrary SQL commands via the sid parameter in an sdetay action to index.php...

Q&A: Bruce Schneier

CNet’s Elinor Mills has produced an interesting Q&A interview with security guru Bruce Schneier where the cryptographer pokes fun at the National Cyber Security Month, talks about his background in crypto and working for the U.S. Defense Department, and says he fears privacy invasion more from...

AdaptBB <= 1.0 xss

Exploit for unknown platform in category web applications ================== AdaptBB = 1.0 xss ================== | D R U N K E N | || || || D A N I S H | || || |' R E D N E C K S '--''--''--' RESEARCH AND FUCKING HACKING: | DRUNKEN DANISH REDNECKS | || || || !!!!!!! | || || |' '--''--''--' =...

SuSE9 Security Update : ethereal (YOU Patch Number 12323)

This update fixes problems that could crash wireshark when processing compressed data CVE-2008-3933 and Q.931 packets. CVE-2008-4685 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

CVE-2009-3061

SQL injection vulnerability in lesson.php in Alqatari Q R Script 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...