ViArt Shop <= 3.5 (category_id) Remote SQL Injection Vulnerability

No description provided by source. GulfTech Security Research July 28, 2008 Vendor : ViArt, Ltd URL : http://www.viart.com/ Version : ViArt Shop = 3.5 Risk : SQL Injection Description: ViArt Shop is a full featured online ecommerce solution written in php. There is a high risk SQL Injection in...

DSECRG-08-034.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-034 Application: Minishowcase Image Gallery Versions Affected: v09b136 Vendor URL: http://minishowcase.frwrd.net Bug: Local File Include Exploits: YES Reported: 14.07.2008 Second report: 22.07.2008 Vendor response: NONE Solution: NONE Date...

viart-sql.txt

GulfTech Security Research July 28, 2008 Vendor : ViArt, Ltd URL : http://www.viart.com/ Version : ViArt Shop = 3.5 Risk : SQL Injection Description: ViArt Shop is a full featured online ecommerce solution written in php. There is a high risk SQL Injection in ViArt that allows for an attacker to...

Gregarius <= 0.5.4 rsargs[] Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== Gregarius populate" noti.unread & ". RSSMODEUNREADSTATE ." and i.cid= $cid", "", 0, 2, ITEMSORTHINTR...

Velocity web-server 1.0 Directory Traversal File Download Vulnerability

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-028 Application: Velocity web-server a part of Velocity Security Management System Versions Affected: Old version 1.0 Vendor URL: http://hirschelectronics.com Bugs: Directory traversal File Download...

Dokeos E-Learning System 1.8.5 Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= Dokeos E-Learning System 1.8.5 Local File Inclusion Vulnerability ================================================================= Digital Security Research Group DSecRG...

ViArt Shop 3.5 - category_id SQL Injection

ViArt Shop 3.5 - categoryid SQL Injection GulfTech Security Research July 28, 2008 Vendor : ViArt, Ltd URL : http://www.viart.com/ Version : ViArt Shop = 3.5 Risk : SQL Injection Description: ViArt Shop is a full featured online ecommerce solution written in php. There is a high risk SQL Injectio...

Velocity Web-Server 1.0 - Directory Traversal

Digital Security Research Group DSecRG Advisory DSECRG-08-028 Application: Velocity web-server a part of Velocity Security Management System Versions Affected: Old version 1.0 Vendor URL: http://hirschelectronics.com Bugs: Directory traversal File Download Exploits: YES Reported: 03.03.2008 Secon...

ViArt Shop <= 3.5 (category_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== ViArt Shop = 3.5 categoryid Remote SQL Injection Vulnerability ================================================================== GulfTech Security Research July 28, 2008...

DSECRG-08-033.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-033 Application: Pixelpost photoblog Versions Affected: 1.7.1 Vendor URL: http://www.pixelpost.org/ Bug: Local File Include Exploits: YES Reported: 22.07.2008 Vendor response: 23.07.2008 Solution: YES Date of Public Advisory: 28.07.2008...

PixelPost 1.7.1 - 'language_full' Local File Inclusion

Digital Security Research Group DSecRG Advisory DSECRG-08-033 Application: Pixelpost photoblog Versions Affected: 1.7.1 Vendor URL: http://www.pixelpost.org/ Bug: Local File Include Exploits: YES Reported: 22.07.2008 Vendor response: 23.07.2008 Solution: YES Date of Public Advisory: 28.07.2008...

PixelPost 1.7.1 - language_full Local File Inclusion

PixelPost 1.7.1 - languagefull Local File Inclusion Digital Security Research Group DSecRG Advisory DSECRG-08-033 Application: Pixelpost photoblog Versions Affected: 1.7.1 Vendor URL: http://www.pixelpost.org/ Bug: Local File Include Exploits: YES Reported: 22.07.2008 Vendor response: 23.07.2008...

PixelPost 1.7.1 (language_full) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== PixelPost 1.7.1 languagefull Local File Inclusion Vulnerability ================================================================== Digital Security Research Group DSecRG...

Dokeos E-Learning System 1.8.5 - Local File Inclusion

Digital Security Research Group DSecRG Advisory DSECRG-08-029 Application: Dokeos E-Learning System Versions Affected: 1.8.5 Vendor URL: http://dokeos.com/ Bug: Local File Include Exploits: YES Reported: 01.07.2008 Vendor response: 05.07.2008 Solution: YES Date of Public Advisory: 17.07.2008...

DSECRG-08-032.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-032 Application: Claroline eLearning and eWorking platform Versions Affected: 1.8.10 Vendor URL: http://www.claroline.net/ Bug: Multiple Linked XSS Exploits: YES Reported: 18.07.2008 Vendor Response: 22.07.2008 Solution: YES Date of Public...

FGA-2008-16: EMC Dantz Retrospect 7 backup Client 7.5.116 Remote Memory corruption Vulnerability

FGA-2008-16: EMC Dantz Retrospect 7 backup Client 7.5.116 Remote Memory corruption Vulnerability http://www.fortiguardcenter.com/advisory/FGA-2008-16.html July 20, 2008 -- Affected Vendors: EMC -- Affected Products: EMC Dantz Retrospect 7 backup Client 7.5.116 -- Vulnerability Details: The...

Interact E-Learning System 2.4.1 (help.php) LFI Vulnerabilities

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-31 Application: Interact E-Learning System Versions Affected: 2.4.1 Vendor URL: http://sourceforge.net/projects/cce-interact Bug: Local File Include Exploits: YES Reported: 03.07.2008 Vendor response:...

Interact 2.4.1 - 'help.php' Local File Inclusion

Digital Security Research Group DSecRG Advisory DSECRG-08-31 Application: Interact E-Learning System Versions Affected: 2.4.1 Vendor URL: http://sourceforge.net/projects/cce-interact Bug: Local File Include Exploits: YES Reported: 03.07.2008 Vendor response: 04.07.2008 Solution: YES Date of Publi...

DSEGRG-08-31.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-31 Application: Interact E-Learning System Versions Affected: 2.4.1 Vendor URL: http://sourceforge.net/projects/cce-interact Bug: Local File Include Exploits: YES Reported: 03.07.2008 Vendor response: 04.07.2008 Solution: YES Date of Publi...

Interact E-Learning System 2.4.1 (help.php) LFI Vulnerabilities

Exploit for unknown platform in category web applications =============================================================== Interact E-Learning System 2.4.1 help.php LFI Vulnerabilities =============================================================== Application: Interact E-Learning System Versions...