DMXReady Registration Manager 1.1 Shell Upload

Securitylab.ir Application Info: Name: DMXReady Registration Manager Version: 1.1 Website: http://www.dmxready.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Arbitrary File Upload Vulnerability Risk...

DMXReady Registration Manager 1.1 - Arbitrary File Upload

DMXReady Registration Manager 1.1 - Arbitrary File Upload Securitylab.ir Application Info: Name: DMXReady Registration Manager Version: 1.1 Website: http://www.dmxready.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir...

DMXReady Registration Manager 1.1 - Arbitrary File Upload

Securitylab.ir Application Info: Name: DMXReady Registration Manager Version: 1.1 Website: http://www.dmxready.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Arbitrary File Upload Vulnerability Risk...

Namad (IMenAfzar) 2.0.0.0 - Remote File Disclosure

Namad IMenAfzar 2.0.0.0 - Remote File Disclosure Securitylab.ir Application Info: Name: Namad Version: 2.0.0.0 Website: http://imenafzar.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Remote File...

MoonCat Information Changer

Securitylab.ir Application Info: Name: MoonCat Website: http://olpkeps.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Remote Info Change Risk: Low Dork: "Design by OLPKEPS.COM"...

MaxCMS 2.0 - incajax.asp SQL Injection

MaxCMS 2.0 - incajax.asp SQL Injection Securitylab.ir Application Info: Name: Maxcms Version: 2.0 Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql Injection Risk: Medium...

webSPELL 4.2.0e - page Blind SQL Injection

webSPELL 4.2.0e - page Blind SQL Injection !/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; use Getopt::Long; '/ -.- ------------------oOO------OOo----------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Research Division //...

webSPELL <= 4.2.0e (page) Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; use Getopt::Long; '/ -.- ------------------oOO------OOo----------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Research Division // 2oo9 |...

Sun Glassfish Woodstock Project 4.2 XSS

Digital Security Research Group DSecRG Advisory DSECRG-09-038 Original advisory: http://dsecrg.com/pages/vul/show.php?id=138 Application: Sun Glassfish Woodstock Project part of Glassfish Enterprise Server Versions Affected: 4.2 Vendor URL: https://woodstock.dev.java.net/ Bug: Linked XSS...

[DSECRG-09-038] Sun Glassfish Woodstock Project - Linked XSS Vulnerability

Digital Security Research Group DSecRG Advisory DSECRG-09-038 Original advisory: http://dsecrg.com/pages/vul/show.php?id=138 Application: Sun Glassfish Woodstock Project part of Glassfish Enterprise Server Versions Affected: 4.2 Vendor URL: https://woodstock.dev.java.net/ Bug: Linked XSS...

ECSHOP 2.5.0 SQL Injection

Securitylab.ir Application Info: Name: ECSHOP Version: 2.5.0 Website: http://www.ecshop.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql Injection Risk: High Dork: "Powered by ECShop v2.5.0"...

ECShop 2.5.0 - 'order_sn' SQL Injection

Securitylab.ir Application Info: Name: ECSHOP Version: 2.5.0 Website: http://www.ecshop.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql Injection Risk: High Dork: "Powered by ECShop v2.5.0"...

SAP Cfolders Linked Cross Site Scripting

Digital Security Research Group DSecRG Advisory DSECRG-09-021 Original advisory: http://dsecrg.com/pages/vul/show.php?id=121 Application: SAP Cfolders SAP SRM, SAP ECC, SAP Knowledge Management and SAP NetWeaver cRooms collaboration rooms Vendor URL: http://SAP.com Bugs: Multiple Liked XSS Risk:...

Elkagroup Image Gallery 1.0 - Arbitrary File Upload

Elkagroup Image Gallery 1.0 - Arbitrary File Upload Securitylab.ir Application Info: Name: elkagroup Image Gallery Dork: elkagroup - Image Gallery v1.0 - All right reserved Discoverd By: Securitylab.ir Website: http://Securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir...

Guestbook alternative written word Trojan horse research-vulnerability warning-the black bar safety net

In the for the guestbook vulnerability discovery article I wrote a passage, that is, for writing into the database the word Trojan in the study, you can use the Request. ServerVariables didn't do the filter to bypass the written word, to be inserted into the database Trojan. But at the time just...

Apache Geronimo <= 2.1.3 Multiple Directory Traversal Vulnerabilities

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-09-018 Application: Apache Geronimo Application Server Versions Affected: 2.1 - 2.1.3 Vendor URL: http://geronimo.apache.org/ Bug: Directory Traversal File Upload Exploits: YES Reported: 10.12.2008 Vendor...

Apache Geronimo 2.1.3 - Multiple Directory Traversal Vulnerabilities

Digital Security Research Group DSecRG Advisory DSECRG-09-018 Application: Apache Geronimo Application Server Versions Affected: 2.1 - 2.1.3 Vendor URL: http://geronimo.apache.org/ Bug: Directory Traversal File Upload Exploits: YES Reported: 10.12.2008 Vendor response: 10.12.2008 Solution: YES Da...

Apache Geronimo Cross Site Scripting

Original advisory http://dsecrg.com/pages/vul/show.php?id=119 Digital Security Research Group DSecRG Advisory DSECRG-09-019 Application: Apache Geronimo Application Server Versions Affected: 2.1 - 2.1.3 Vendor URL: http://geronimo.apache.org/ Bug: Multiple XSS Vulnerabilities Exploits: YES...

Aria News XSS / SQL Injection

Securitylab.ir Application Info: Name: Aria News Web: http://www.aryalink.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql Injection & xss Risk: Medium...

ablespace 1.0 - Cross-Site Scripting / Blind SQL Injection

riginal advisory: http://dsecrg.com/pages/vul/show.php?id=137 Digital Security Research Group DSecRG Advisory DSECRG-09-037 Application: AbleSpace Versions Affected: 1.0 Vendor URL: http://abk-soft.com/ Bugs: Multiple Blind SQL Injections, Multiple XSS Exploits: YES Reported: 18.03.2009 Vendor...