Miniweb 2.0 - Full Path Disclosure

Miniweb 2.0 - Full Path Disclosure Miniweb 2.0 Full Path Disclosure Name Miniweb 2.0 Vendor http://www.miniweb2.com Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2009-12-12 X. INDEX I. ABOUT THE APPLICATION II...

FrontAccounting Multiple SQL Injection Vulnerabilities

This host is running FrontAccounting and is prone to multiple SQL Injection vulnerabilities. OpenVAS Vulnerability Test $Id: secpodfrontaccountingmultsqlinjvuln2.nasl 5055 2017-01-20 14:08:39Z teissa $ FrontAccounting Multiple SQL Injection Vulnerabilities Authors: Maneesh KB Copyright: Copyright...

OXID eShop Community Edition Unauthorized Access Vulnerability

This host is installed with OXID eShop and is prone to unauthorized access vulnerability. OpenVAS Vulnerability Test $Id: secpodoxideshopunauthaccessvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ OXID eShop Community Edition Unauthorized Access Vulnerability Authors: Nikita MR Copyright: Copyright ...

SineCMS Remote File Inclusion Vulnerability

This host is installed with SineCMS and is prone to Remote File Inclusion vulnerability. OpenVAS Vulnerability Test $Id: gbsinecmsfileinclvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ SineCMS Remote File Inclusion Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH...

nagios -- Command Injection Vulnerability

Secunia reports: A vulnerability has been reported in Nagios, which can be exploited by malicious users to potentially compromise a vulnerable system. Input passed to the "ping" parameter in statuswml.cgi is not properly sanitised before being used to invoke the ping command. This can be exploite...

FreeBSD : pivot-weblog -- file deletion vulnerability (0fe73a4a-1b18-11de-8226-0030843d3802)

Secunia reports : A vulnerability has been discovered in Pivot, which can be exploited by malicious people to delete certain files. Input passed to the 'refkey' parameter in extensions/bbclonetools/count.php is not properly sanitised before being used to delete files. This can be exploited to...

[SA34410] PHP Classifieds Cross-Site Scripting and File Upload Vulnerabilities

---------------------------------------------------------------------- Secunia is pleased to announce the release of the annual Secunia report for 2008. Highlights from the 2008 report: Vulnerability Research Software Inspection Results Secunia Research Highlights Secunia Advisory Statistics...

Secunia Research: OpenX Multiple Vulnerabilities

====================================================================== Secunia Research 27/01/2009 - OpenX Multiple Vulnerabilities - ====================================================================== Table of Contents Affected Software....................................................1...

KTorrent PHP Code Injection And Security Bypass Vulnerability

KTorrent is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PHPX news_id SQL Injection Vulnerability (Nov 2008)

PHPX is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

gallery -- multiple vulnerabilities

Secunia reports: An error in the handing of ZIP archives with symbolic links can be exploited to disclose the contents of arbitrary files. Input from uploaded Flash animations is not properly sanitised before being used. This can be exploited to insert arbitrary HTML and script code, which is...

MegaBBS Forum 2.2 (SQL/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== MegaBBS Forum 2.2 SQL/XSS Multiple Remote Vulnerabilities =========================================================== AmnPardaz Security Research Team Title: MegaBBS Forum Multipl...

mailman -- script insertion vulnerability

Secunia reports: A vulnerability has been reported in Mailman, which can be exploited by malicious users to conduct script insertion attacks. Certain input when editing the list templates and the list info attribute is not properly sanitised before being stored. This can be exploited to insert...

Web Wiz Forums Directory traversal

WwW.BugReport.ir AmnPardaz Security Research Team Title: Web Wiz ForumsTM Vendor: http://www.webwizguide.com/ Bug: Directory traversal Vulnerable Version: 9.07 Exploit: Available Fix Available: No! Fast Solution is available. - Description: Web Wiz Forums bulletin board system is the ideal forum...

wordpress -- cross-site scripting

A Secunia Advisory report: Input passed to the "postscolumns" parameter in wp-admin/edit-post-rows.php is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site...

Wikepage XSS vuln

Sunday, 7 October 2007 Wikepage XSS vuln. Vuln. discovered by : r0t Date: 7 October 2007 Vendor:http://www.wikepage.org/ affected versions:Wikepage Opus 13 2007.2 other versions also can be affected. Wikepage contains a flaw that allows a remote Cross-Site Scripting attacks.Input passed to the...

Minki XSS vuln.

Sunday, 7 October 2007 Minki XSS vuln. Vuln. discovered by : r0t Date: 7 October 2007 Vendor:http://minki.theprawn.com/ affected versions:Minki 1.30 other versions also can be affected. Minki contains a flaw that allows a remote Cross-Site Scripting attacks.Input passed to the "page" parameter in...

Urchin Multiple XSS vuln.

Urchin Multiple XSS vuln. Vuln. discovered by : r0t Date: 1 September 2007 vendor:www.roirevolution.com/urchin/ orginal advisory: http://pridels-team.blogspot.com/2007/09/urchin-5x-multiple-xss-vuln.html affected versions:tested on Urchin v5.6.00r2 other versions also can be affected. Urchin...

Storesprite XSS vuln.

Storesprite XSS vuln. Vuln. discovered by : r0t Date: 10 August 2007 vendor:http://www.storesprite.com/ orginal advisory: http://pridels-team.blogspot.com/2007/08/storesprite-xss-vuln.html affected versions:Storesprite 7 and previous Storesprite contains a flaw that allows a remote Cross-Site...

VisionProject Multiple XSS vuln.

VisionProject Multiple XSS vuln. Vuln. discovered by : r0t Date: 7 August 2007 vendor:www.visionproject.se orginal advsiory: http://pridels-team.blogspot.com/2007/08/visionproject-multiple-xss-vuln.html affected versions:VisionProject 3.1 and previous VisionProject contains a flaw that allows a...