PT-2026-43445

Name of the Vulnerable Software and Affected Versions FUXA versions 1.2.11 through 1.3.0 Description A path confusion flaw in the authentication middleware allows an unauthenticated remote attacker to achieve full remote code execution as root. The issue occurs because the server uses a substring...

OneForum (topic.php) SQL Injection Vulnerability

No description provided by source. Title : OneForum SQL Injection Vulnerability Author : Red Security TEAM Date : 22/02/2012 Risk : High Software : http://www.onescripts.de/ Download : http://www.onescripts.de/download/oneforum.zip Tested On : CentOS Contact : Info at RedSecurity . COM Home :...

phpShowtime Directory Traversal

No description provided by source. Title : phpShowtime Directory Travel Author : Red Security TEAM Date : 31/01/2012 Download : http://phpshowtime.kybernetika.de/ Demo : http://phpshowtime.kybernetika.de/demo/ Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM...

swDesk Multiple Vulnerabilities

No description provided by source. Title : swDesk Multi Vulnerability Author : Red Security TEAM Date : 01/02/2012 Risk : High Vendor : http://www.swdesk.com/ Tested On : Apache Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM Exploit : I. Arbitrary File Upload Vulnerability 1...

Ez Album Blind SQL Injection Vulnerability

No description provided by source. Title : Ez Album Blind SQL Injection Vulnerability Author : Red Security TEAM Date : 31/01/2012 Risk : High Demo : http://www.scriptsez.com Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM Exploit :...

EasyPage SQL Injection Vulnerability

No description provided by source. Title : EasyPage SQL Injection Vulnerability Author : Red Security TEAM Date : 19/01/2012 Risk : High Vendor : http://karait.com/ Tested On : Windows Server 2008 Microsoft-IIS/7.5 Dork : inurl:default.aspx?page=Document&app=Documents&docId= Contact : Info 4t...

OneForum - topic.php SQL Injection

OneForum - topic.php SQL Injection Title : OneForum SQL Injection Vulnerability Author : Red Security TEAM Date : 22/02/2012 Risk : High Software : http://www.onescripts.de/ Download : http://www.onescripts.de/download/oneforum.zip Tested On : CentOS Contact : Info at RedSecurity . COM Home :...

OneForum - 'topic.php' SQL Injection

Title : OneForum SQL Injection Vulnerability Author : Red Security TEAM Date : 22/02/2012 Risk : High Software : http://www.onescripts.de/ Download : http://www.onescripts.de/download/oneforum.zip Tested On : CentOS Contact : Info at RedSecurity . COM Home : http://RedSecurity.COM Exploit :...

MyJobList 0.1.3 SQL Injection

Title : MyJobList v0.1.3 SQL Injection Vulnerability Author : Red Security TEAM Date : 25/02/2012 Risk : High Download : http://www.oddnormality.com/programs/php/MyJobList.v0.1.3.zip Demo : http://www.oddnormality.com/demos/myjoblist/ Tested On : CentOS Contact : Info at RedSecurity . COM Home :...

idev-BusinessDirectory 3.0 Cross Site Scripting

Title : idev-BusinessDirectory 3.0 Vulnerability Author : Red Security TEAM Date : 25/02/2012 Demo : http://www.idevspot.com/demos/idev-businessdirectory/ Dork : "Business Directory Software :: idev-BusinessDirectory 3.0" Tested On : CentOS Contact : Info at RedSecurity . COM Home :...

OneForum SQL Injection

Title : OneForum SQL Injection Vulnerability Author : Red Security TEAM Date : 22/02/2012 Risk : High Software : http://www.onescripts.de/ Download : http://www.onescripts.de/download/oneforum.zip Tested On : CentOS Contact : Info at RedSecurity . COM Home : http://RedSecurity.COM Exploit :...

swDesk Shell Upload / Code Injection / XSS

Title : swDesk Multi Vulnerability Author : Red Security TEAM Date : 01/02/2012 Risk : High Vendor : http://www.swdesk.com/ Demo : http://www.swdesk.com/demo/swdesk/ Tested On : Apache Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM Exploit : I. Arbitrary File Upload...

iknSupport Cross Site Scripting

Title : lknSupport XSS Vulnerability Author : Red Security TEAM Date : 01/02/2012 Vendor : http://www.instantphp.com/store/details/16/lknsupport.html demo : http://www.instantphp.com/demo/lknsupport/ Tested On : Apache/2.2.21 Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM...

swDesk Multi Vulnerability

Exploit for php platform in category web applications Title : swDesk Multi Vulnerability Author : Red Security TEAM Date : 01/02/2012 Risk : High Vendor : http://www.swdesk.com/ Tested On : Apache Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM Exploit : I. Arbitrary File Uplo...

phpShowtime - Directory Traversal

phpShowtime - Directory Traversal Title : phpShowtime Directory Travel Author : Red Security TEAM Date : 31/01/2012 Download : http://phpshowtime.kybernetika.de/ Demo : http://phpshowtime.kybernetika.de/demo/ Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM...

Ez Album - Blind SQL Injection

Ez Album - Blind SQL Injection Title : Ez Album Blind SQL Injection Vulnerability Author : Red Security TEAM Date : 31/01/2012 Risk : High Demo : http://www.scriptsez.com Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM Exploit :...

Ez Album - Blind SQL Injection

Title : Ez Album Blind SQL Injection Vulnerability Author : Red Security TEAM Date : 31/01/2012 Risk : High Demo : http://www.scriptsez.com Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM Exploit : http://server/album/index.php?action=view&id=BlindSQLi...

phpShowtime Directory Traversal

Exploit for php platform in category web applications Title : phpShowtime Directory Travel Author : Red Security TEAM Date : 31/01/2012 Download : http://phpshowtime.kybernetika.de/ Demo : http://phpshowtime.kybernetika.de/demo/ Tested On : CentOS Dork : Copyright ©2005-2011 by Nova CMS. Contact ...

Ez Album Blind SQL Injection

Title : Ez Album Blind SQL Injection Vulnerability Author : Red Security TEAM Date : 31/01/2012 Risk : High Demo : http://www.scriptsez.com/album/demo.php Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM Exploit :...

Ez Album Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Title : Ez Album Blind SQL Injection Vulnerability Author : Red Security TEAM Date : 31/01/2012 Risk : High Demo : http://www.scriptsez.com Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM Exploit :...