XRms 1.99.2 - Remote File Inclusion / Cross-Site Scripting / Information Gathering

XMRS Multiple Vulnerabilities ZeroDay at 25-07-2008 Author: AzzCoder [email protected] Product: http://www.xrms.org/ Product Type: CRM Thanks: coresecurity.com Remote File Inclusion File: activities/workflow-activities.php Variable: $includedirectory Required registerglobals: Yes XSS Multiple...

sispletcms-sql.txt

================================================================= Sisplet CMS index.php id Remote SQL Injection Vulnerability ================================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Sisplet CMS (index.php id) Remote SQL Injection Vulnerability

No description provided by source. ================================================================= Sisplet CMS index.php id Remote SQL Injection Vulnerability ================================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O...

Sisplet CMS 2008-01-24 - id SQL Injection

Sisplet CMS 2008-01-24 - id SQL Injection ================================================================= Sisplet CMS index.php id Remote SQL Injection Vulnerability ================================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------'...

Sisplet CMS 2008-01-24 - 'id' SQL Injection

================================================================= Sisplet CMS index.php id Remote SQL Injection Vulnerability ================================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Sisplet CMS (index.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Sisplet CMS index.php id Remote SQL Injection Vulnerability ============================================================= ,--^----------,--------,-----,-------^--, | |||||||||...

tomcat handling of cookies

Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes "'" as delimiters in cookies, which might cause sensitive information such as session IDs to be leaked and allow remote attackers to conduct session hijacking attacks...

tomcat handling of cookie values

Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the " character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks...

MyPHP CMS 0.3.1 - 'pid' SQL Injection

=============================================================== MyPHP CMS page.php pid Remote SQL Injection Vulnerability =============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

myphpcms-sql.txt

=============================================================== MyPHP CMS page.php pid Remote SQL Injection Vulnerability =============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

MyPHP CMS 0.3.1 - pid SQL Injection

MyPHP CMS 0.3.1 - pid SQL Injection =============================================================== MyPHP CMS page.php pid Remote SQL Injection Vulnerability =============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

MyBlog: PHP and MySQL Blog/CMS software - SQL Injection / Cross-Site Scripting

===================================================================================== MyBlog: PHP and MySQL Blog/CMS software SQL/XSS Multiple Remote Vulnerabilities ===================================================================================== ,--^----------,--------,-----,-------^--, |...

MyBlog: PHP and MySQL BlogCMS software - SQL Injection Cross-Site Scripting

MyBlog: PHP and MySQL BlogCMS software - SQL Injection Cross-Site Scripting ===================================================================================== MyBlog: PHP and MySQL Blog/CMS software SQL/XSS Multiple Remote Vulnerabilities...

smeweb-sqlxss.txt

======================================================= SMEweb 1.4b SQL/XSS Multiple Remote Vulnerabilities ======================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

CVE-2007-5333: Exposure of Sensitive Information to an Unauthorized Actor

Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle 1 double quote " characters or 2 %5C encoded backslash sequences in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable...

Apache Tomcat 6.0.15 - Cookie Quote Handling Remote Information Disclosure

source: https://www.securityfocus.com/bid/27706/info Apache Tomcat is prone to an information-disclosure vulnerability because it fails to adequately sanitize user-supplied data. Attackers can exploit this issue to access potentially sensitive data that may aid in further attacks. Versions prior ...

PT-2008-1472 · Apache +1 · Apache Tomcat +1

Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 4.1.0 through 4.1.36 Apache Tomcat versions 5.5.0 through 5.5.25 Apache Tomcat versions 6.0.0 through 6.0.14 Description: The issue arises from improper handling of double quote " characters or %5C encoded backslash...

Anon Proxy Server buffer overflow

Buffer overflow on oversized username with double quote characters...

phpShop 0.8.1 - SQL Injection / Filter Bypass

Vendor : PHPShop Webiste : http://www.phpshop.org Version : v0.8.1 Author: the redc0ders / theredc0dersatgmaildotcom Condition: magicquotegpc = off , in php.ini setting Details : ========== Vulnerable Code in index.php near lines 98 - 128 code // basic SQL inject detection $myinsecurearray =...

Project name that contains double-quote is not properly escaped on Issue Navigator page

If a project has a double-quote in its name, it's not xml-escaped when used in "title" attribute. For example, if we have a project named 14" monitors, the html will look like: 14" monitors This causes JIRA Client to hiccup on this page and lose a lot of functionality. On web browser, the title i...