1262 matches found
Multiple vulnerabilities in PHPShop CMS Free
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in PHPShop CMS Free, which can be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-Site Scripting in PHPShop CMS Free 1.1 Input appended to the URL after multiple files is not properly...
Multiple Vulnerabilities in OrangeHRM
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in OrangeHRM, which can be exploited to perform Cross-Site Scripting XSS and SQL Injection attacks. 1 Cross-Site Scripting XSS vulnerabilities in OrangeHRM 1.1 Input passed via the "uniqcode" GET parameter to...
WordPress Theme classipress 3.1.4 - Persistent Cross-Site Scripting
WordPress Theme classipress 3.1.4 - Persistent Cross-Site Scripting Exploit Title: WordPress Classipress Theme = 3.1.4 Stored XSS Date: 2011-09-26 Author: Paul Loftness Contact:http://attackvectorlabs.blogspot.com Vendor: Appthemes LLc. Product Web Page: http://www.appthemes.com/themes/classipres...
Debian DSA-2333-1 : phpldapadmin - several vulnerabilities
Two vulnerabilities have been discovered in phpLDAPadmin, a web-based interface for administering LDAP servers. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2011-4074 Input appended to the URL in cmd.php when 'cmd' is set to 'debug' is not properly...
WordPress Classipress Theme 3.1.4 Cross Site Scripting
Exploit Title: WordPress Classipress Theme = 3.1.4 Stored XSS Date: 2011-09-26 Author: Paul Loftness Contact:http://attackvectorlabs.blogspot.com Vendor: Appthemes LLc. Product Web Page: http://www.appthemes.com/themes/classipress/ Version: =3.1.4 Tested Versions: 3.1.4, 3.0.5.3 Summary:...
MyBB MyStatus Plugin process-mystatus.php 'statid' Parameter SQLi Vulnerability
MyBB with MyStatus Plugin is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Traq 2.2 Cross Site Scripting / SQL Injection
Vulnerability ID: HTB23046 Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesintraq.html Product: Traq Vendor: Jack Polgar http://traqproject.org/ Vulnerable Version: 2.2 and probably prior Tested Version: 2.2 Vendor Notification: 07 September 2011 Vulnerability Type: XSS, SQL...
ASAS Server End User Self Service (EUSS) SQL Injection Vulnerability
The host is running Authenex ASAS and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: secpodauthenexasasserversqlinjvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ ASAS Server End User Self Service EUSS SQL Injection Vulnerability Authors: Antu Sanadi Copyright: Copyright c...
dotProject 'index.php' SQL Injection Vulnerability
The host is running dotProject and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: secpoddotprojectsqlinjvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ dotProject 'index.php' SQL Injection Vulnerability. Authors: Madhuri D Copyright: Copyright c 2011 SecPod,...
Pentaho BI Server Multiple Vulnerabilities
Pentaho BI Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
HP SiteScope Cross-Site Scripting and Session Fixation Vulnerabilities
This host is running HP SiteScope and is prone to cross-site scripting and session fixation vulnerabilities. OpenVAS Vulnerability Test $Id: gbhpsitescopexssnsessionfixationvuln.nasl 5390 2017-02-21 18:39:27Z mime $ HP SiteScope Cross-Site Scripting and Session Fixation Vulnerabilities Authors:...
EIN-SOF Solutions Blind SQL Injection
========================================================================= EIN-SOF Solutions BLIND SQL-i Vulnerability ========================================================================== +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= +=+=+= +=+=+= +=+=+= /\ |...
ATutor 2.0.2 HTTP Response Splitting
ATutor 2.0.2 lang HTTP Response Splitting Vulnerability Vendor: ATutor Inclusive Design Institute Product web page: http://www.atutor.ca Affected version: 2.0.2 build r10589 Summary: ATutor is an Open Source Web-based Learning Content Management System LCMS designed with accessibility and...
Joomla Component 'com_astra' SQLi Vulnerability
Joomla Astra component is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Multiple XSS in HESK
Vulnerability ID: HTB23030 Reference: http://www.htbridge.ch/advisory/multiplexssinhesk.html Product: HESK Vendor: Klemen Stirn http://www.hesk.com/ Vulnerable Version: 2.2 and probably prior Tested on: 2.2 Vendor Notification: 06 July 2011 Vulnerability Type: XSS Cross Site Scripting Risk level:...
ICQ Cross Site Scripting Vulnerability
This host is installed with ICQ and is prone to cross-site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodicqxssvuln.nasl 7029 2017-08-31 11:51:40Z teissa $ ICQ Cross Site Scripting Vulnerability Authors: Madhuri D Copyright: Copyright c 2011 SecPod, http://www.secpod.com This...
ICQ Cross Site Scripting Vulnerability
ICQ is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Chyrp < 2.1.1 Multiple Vulnerabilities
Chyrp is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PG eLms Pro vDEC_2007_01 - contact_us.php Multiple POST Cross-Site Scripting Vulnerabilities
PG eLms Pro vDEC200701 - contactus.php Multiple POST Cross-Site Scripting Vulnerabilities PG eLMS Pro vDEC200701 contactus.php Multiple POST XSS Vulnerabilities scrip...
