2300 matches found
[DSECRG-08-030] Claroline 1.8.9 Multiple Security Vulnerabilities
Digital Security Research Group DSecRG Advisory DSECRG-08-030 Application: Claroline eLearning and eWorking platform Versions Affected: 1.8.9 Vendor URL: http://www.claroline.net/ Bug: Multiple XSS, Phishing Through URL Redirection, Change User Password XSRF Vulnerability Exploits: YES Reported:...
[DSECRG-08-029] Local File Include in Dokeos E-Learning System 1.8.5
Digital Security Research Group DSecRG Advisory DSECRG-08-029 Application: Dokeos E-Learning System Versions Affected: 1.8.5 Vendor URL: http://dokeos.com/ Bug: Local File Include Exploits: YES Reported: 01.07.2008 Vendor response: 05.07.2008 Solution: YES Date of Public Advisory: 17.07.2008...
AOL Instant Messenger AIM "Away" Message Local Exploit
No description provided by source. / subject: local PoC exploit for AIM 5.5.3595 vendor: http://www.aim.com cve: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0636 credits: Matt Murphy date: 10 August 2004 notes: exploits localy if an argument is supplied, otherwise prints the url...
Pluck Local File inclusion
www.BugReport.ir AmnPardaz Security Research Team Title: Pluck Local File inclusion Vendor: http://www.pluck-cms.org Bug: Local File Inclusion Vulnerable Version: 4.5.1 prior versions also may be affected Exploitation: Remote with browser Fix: N/A - Description: Pluck is a content management...
Pluck CMS 4.5.1 (Windows) - 'blogpost' Local File Inclusion
www.BugReport.ir AmnPardaz Security Research Team Title: Pluck Local File inclusion Vendor: http://www.pluck-cms.org Bug: Local File Inclusion Vulnerable Version: 4.5.1 prior versions also may be affected Exploitation: Remote with browser Fix: N/A - Description: Pluck is a content management...
Pluck CMS 4.5.1 (Windows) - blogpost Local File Inclusion
Pluck CMS 4.5.1 Windows - blogpost Local File Inclusion www.BugReport.ir AmnPardaz Security Research Team Title: Pluck Local File inclusion Vendor: http://www.pluck-cms.org Bug: Local File Inclusion Vulnerable Version: 4.5.1 prior versions also may be affected Exploitation: Remote with browser Fi...
DSECRG-08-027.txt
Digital Security Research Group DSecRG Advisory DSECRG-08-027 Application: 1024 CMS Versions Affected: 1.4.3, 1.4.4 RFC Vendor URL: http://www.1024cms.com/ Bug: Multiple Remote/Local File Include Exploits: YES Reported: 18.06.2008 Second report: 27.06.2008 Vendor Response: NONE Solution: NONE Dat...
1024 CMS 1.4.4 - Multiple Local/Remote File Inclusions
Digital Security Research Group DSecRG Advisory DSECRG-08-027 Application: 1024 CMS Versions Affected: 1.4.3, 1.4.4 RFC Vendor URL: http://www.1024cms.com/ Bug: Multiple Remote/Local File Include Exploits: YES Reported: 18.06.2008 Second report: 27.06.2008 Vendor Response: NONE Solution: NONE Dat...
1024 CMS 1.4.4 - Multiple LocalRemote File Inclusions
1024 CMS 1.4.4 - Multiple LocalRemote File Inclusions Digital Security Research Group DSecRG Advisory DSECRG-08-027 Application: 1024 CMS Versions Affected: 1.4.3, 1.4.4 RFC Vendor URL: http://www.1024cms.com/ Bug: Multiple Remote/Local File Include Exploits: YES Reported: 18.06.2008 Second repor...
Vuln name: Ruby rb_ary_fill() DOS
The advisory could be found here: http://securenetwork.it/ricerca/advisory/download/SN-2008-02.txt Secure Network - Security Research Advisory Vuln name: Ruby rbaryfill DOS Systems affected: ruby 1.8.x, 1.9.x Systems not affected: - Severity: Medium Local/Remote: Local/Remote Vendor URL:...
Unfixed XSS vulnerability at www.webmasterforhire.us
Security researcher BackDoor, has submitted on 21/06/2008 a cross-site-scripting XSS vulnerability affecting www.webmasterforhire.us, which at the time of submission ranked 1661909 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2008. It ...
glshdeaf-multi.txt
www.BugReport.ir AmnPardaz Security Research Team Title: GL-SH Deaf Forum =6.5.5 Multiple Vulnerabilities Vendor: www.frank-karau.de Vulnerable Version: 6.5.5 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: www.bugreport.ir/?/46 1. Description: Gl-SH Deaf board is...
DSECRG-08-026.txt
Digital Security Research Group DSecRG Advisory DSECRG-08-026 Application: Open Azimyt CMS Versions Affected: 0.22 minimal, 0.21 stable Vendor URL: http://azimyt.net/ Bug: Local File Include Exploits: YES Reported: 07.06.2008 Vendor Response: 08.06.2008 Solution: YES Date of Public Advisory:...
Open Azimyt CMS <= 0.22 (lang) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================= Open Azimyt CMS adminfolder."/lang/lang-system-".$SESSION'lang'.".php"; if!fileexists$SystemLangFile exitErrorLang::LangFilenotload; require$SystemLangFile; Example:...
Open Azimyt CMS 0.22 - 'lang' Local File Inclusion
Digital Security Research Group DSecRG Advisory DSECRG-08-026 Application: Open Azimyt CMS Versions Affected: 0.22 minimal, 0.21 stable Vendor URL: http://azimyt.net/ Bug: Local File Include Exploits: YES Reported: 07.06.2008 Vendor Response: 08.06.2008 Solution: YES Date of Public Advisory:...
Open Azimyt CMS <= 0.22 (lang) Local File Inclusion Vulnerability
No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-026 Application: Open Azimyt CMS Versions Affected: 0.22 minimal, 0.21 stable Vendor URL: http://azimyt.net/ Bug: Local File Include Exploits: YES Reported: 07.06.2008 Vendor Response: 08.06.2008 Solution...
CA-ArcServe
CA ArcServe is prone to a remote buffer overflow because it fails to perform adequate boundary-checks on user-supplied data. Successfully exploiting will allow an attacker to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a...
Pooya Site Builder (PSB) 6.0 - Multiple SQL Injections
Pooya Site Builder PSB 6.0 - Multiple SQL Injections www.BugReport.ir AmnPardaz Security Research Team Title: Pooya Site Builder PSB SQL Injection Vulnerabilities Vendor: www.paridel.com Vulnerable Version: 6.0 Assembly Version Exploit: Available Impact: High Fix: N/A Original Advisory:...
Unfixed XSS vulnerability at www.stgeorgehomes.com
Security researcher mckt, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.stgeorgehomes.com, which at the time of submission ranked 14548973 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/08/2009. It is...
Unfixed XSS vulnerability at www.tickco.com
Security researcher mckt, has submitted on 06/08/2008 a cross-site-scripting XSS vulnerability affecting www.tickco.com, which at the time of submission ranked 29940 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/08/2008. It is currently...