ASP-DEV XM Forum RC3 IMG Tag Script Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12958/info XM Forum is reported prone to a script injection vulnerability. An attacker can supply arbitrary HTML and script code through the BBCode IMG tag to trigger this issue and execute arbitrary script code in a user...

aoop cms 0.3.6 - Multiple Vulnerabilities

No description provided by source. Inshell Security Advisory http://www.inshell.net 1. ADVISORY INFORMATION ----------------------- Product: Aoop CMS Vendor URL: www.annonyme.de Type: Cross-site Scripting CWE-79, SQL-Injection CWE-89 Date found: 2012-04-07 Date published: 2012-08-24 CVSSv2 Score:...

Linux Kernel 2.6.x 'splice(2)' Double Lock Local Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/35143/info The Linux kernel is prone to a local denial-of-service vulnerability. Attackers can exploit this issue to cause an affected process to hang, denying service to legitimate users. Other denial-of-service attacks...

PostNuke 0.72/0.75 Reviews Module Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10802/info PostNuke is reported prone to a cross-site scripting vulnerability. This issue affects the 'title' parameter of 'Reviews' script. Exploitation of this issue could allow for theft of cookie-based authentication...

phpBP <= RC3 (2.204) (sql/cmd) Remote Code Execution Exploit

No description provided by source. ? // //Kacper & str0ke Settings $exploitname = phpBP = RC3 2.204 sql/cmd Remote Code Execution Exploit; $scriptname = phpBP RC3 2.204; $scriptsite = http://www.phpbp.com/; $dork = 'Silnik strony jest chroniony prawami autorskimi PHP BP Team'; //to work exploit y...

phpBP <= RC3 (2.204) FIX4 Remote SQL Injection Vulnerability

No description provided by source. .-----------------------------------------------------------------------------. | vuln.: phpBP = RC3 2.204 FIX4 Remote SQL Injection Vulnerability | | download: http://www.phpbp.com/ | | dork: PHP BP Team | | | | author: [email protected] | | homepage:...

Mediacoder 2011 RC3 m3u Buffer Overflow Exploit

No description provided by source. Exploit Title: Mediacoder 2011 RC3 0-days Exploit Google Dork: -- Date: 20 / 3 / 2011 Author: Oh Yaw Theng Software Link: http://www.mediacoderhq.com/getfile.htm?site=filemirror.s7icky.com&file=MediaCoder2011-RC3-5072.exe Version: 2011 RC3 Tested on: Windows XP...

Fedora 20 : libgadu-1.12.0-0.5.rc3.fc20 (2014-6687)

Security bug fix: remote Gadu-Gadu file relay servers could cause a denial of service memory overwrite or possibly execute arbitrary code via a crafted message CVE-2014-3775. - Fixes related to image transfers. - Regression test reliability fixes. Note that Tenable Network Security has extracted...

CVE-2014-3775

libgadu before 1.11.4 and 1.12.0 before 1.12.0-rc3, as used in Pidgin and other products, allows remote Gadu-Gadu file relay servers to cause a denial of service memory overwrite or possibly execute arbitrary code via a crafted message...

Demandware Store Cross Site Scripting

Exploit Title: Demandware Store XSS Vulnerability Date: 2013-02-10 Author: Cyb3rgh0st aka Rajat Vendor or Software Link: http://www.demandware.com/ Version: n/a Category: webapps/php Google Keywords: inurl:on/demandware.store/ or inurl:default/Search-Show?q= Tested on: Windows 7 and Backtrack rc3...

SA-CONTRIB-2012-123 - Shibboleth authentication - Access Bypass

The Shibboleth authentication module provides user authentication with Shibboleth single sign-on systems both v1.3 and v2.0 as well as some authorization features automatic role assignment based on Shibboleth attributes. The module doesn't sufficiently confirm the user's active status in Drupal...

CVE-2012-4060

Multiple SQL injection vulnerabilities in ASP-DEv XM Forums RC3 allow remote attackers to execute arbitrary SQL commands via the id parameter to profile.asp, forum.asp, or topic.asp. The connected records confirm the affected component and vectors, but no exploitation details or patch/remediation...

WordPress < 3.1.4 / 3.2-RC3 Multiple Blind SQL Injection Vulnerabilities

The remote web server hosts a version of WordPress prior to 3.1.4 / 3.2-RC3. It is reportedly affected by multiple SQL injection vulnerabilities due to a failure to adequately sanitize user-supplied input prior to using it in database queries. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

PT-2011-4187 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.1-rc3 Description: The issue is related to the befs follow link function in fs/befs/linuxvfs.c, which does not validate the length attribute of long symlinks. This allows local users to cause a denial of servi...

WordPress 3.1.3 injection vulnerability-vulnerability warning-the black bar safety net

First: getterms（）过滤器 文件 中声 明 taxonomy.php not properly validate user input, allowing an attacker to construct arbitrary sql commands can be used to blind. The following URL can be used to perform SQL blind injection attack SQL injection sql-injection...

Mediacoder 2011 RC3 m3u Buffer Overflow Exploit

Exploit for windows platform in category local exploits view source print? Exploit Title: Mediacoder 2011 RC3 0-days Exploit Google Dork: -- Date: 20 / 3 / 2011 Author: Oh Yaw Theng Software Link: http://www.mediacoderhq.com/getfile.htm?site=filemirror.s7icky.com&file=MediaCoder2011-RC3-5072.exe...

Mediacoder 2011 RC3 - .m3u Local Buffer Overflow

Mediacoder 2011 RC3 - .m3u Local Buffer Overflow Exploit Title: Mediacoder 2011 RC3 0-days Exploit Google Dork: -- Date: 20 / 3 / 2011 Author: Oh Yaw Theng Software Link: http://www.mediacoderhq.com/getfile.htm?site=filemirror.s7icky.com&file=MediaCoder2011-RC3-5072.exe Version: 2011 RC3 Tested o...

Mediacoder 2011 RC3 - '.m3u' Local Buffer Overflow

Exploit Title: Mediacoder 2011 RC3 0-days Exploit Google Dork: -- Date: 20 / 3 / 2011 Author: Oh Yaw Theng Software Link: http://www.mediacoderhq.com/getfile.htm?site=filemirror.s7icky.com&file=MediaCoder2011-RC3-5072.exe Version: 2011 RC3 Tested on: Windows XP SP2 CVE : -- !/usr/bin/python...

FCKEditor Version 2.0 (Release Candidate 3) Shell Upload Exploit

Exploit for unknown platform in category web applications ================================================================ FCKEditor Version 2.0 Release Candidate 3 Shell Upload Exploit ================================================================ FCKEditor Shell Upload Exploit...

FCKEditor 2.0 RC3 Shell Upload

FCKEditor Shell Upload Exploit ------------------------------ Web-App: FCKEditor. Version: Version 2.0 RC3 Release Candidate 3. Link : http://sourceforge.net/projects/fckeditor/files/FCKeditor/ Author : Aodrulez. Email : [email protected] Vulnerable File : -----------------...