2289 matches found
SA-2008-007 - Drupal core - Cross site scripting (register_globals)
When theme .tpl.php files are accessible via the web and the PHP setting registerglobals is set to enabled, anonymous users are able to execute cross site scripting attacks via specially crafted links. Drupals .htaccess attempts to set registerglobals to disabled and also prevents access to...
DSECRG08-001.txt
Digital Security Research Group DSecRG Advisory DSECRG08-001 Application: Tuned Studios Templates Versions Affected: All Vendor URL: http:/www.tunedstudios.com Bug: Local File Include Exploit: YES Reported: 09.01.2008 Date of Public Advisory: 09.01.2008 Authors: Alexandr Polyakov, Stas Svistunovi...
Tuned Studios Templates Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ========================================================== Tuned Studios Templates Local File Inclusion Vulnerability ========================================================== Digital Security Research Group DSecRG Advisory DSECRG08-001...
Tuned Studios Templates - Local File Inclusion
Digital Security Research Group DSecRG Advisory DSECRG08-001 Application: Tuned Studios Templates Versions Affected: All Vendor URL: http:/www.tunedstudios.com Bug: Local File Include Exploits: YES Reported: 09.01.2008 Date of Public Advisory: 09.01.2008 Authors: Alexandr Polyakov, Stas...
Tuned Studios Templates - Local File Inclusion
Tuned Studios Templates - Local File Inclusion Digital Security Research Group DSecRG Advisory DSECRG08-001 Application: Tuned Studios Templates Versions Affected: All Vendor URL: http:/www.tunedstudios.com Bug: Local File Include Exploits: YES Reported: 09.01.2008 Date of Public Advisory:...
MODx CMS 0.9.6.1 - Multiple Vulnerabilities
MODx CMS 0.9.6.1 - Multiple Vulnerabilities WwW.BugReport.ir AmnPardaz Security Research Team Title: MODx CMS Vulnerabilities Vendor: http://modxcms.com Bugs: Source code disclosure, local file inclusion Vulnerable Version: 0.9.6.1 prior versions also may be affected Exploitation: Remote with...
MODx CMS 0.9.6.1 Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ================================================ MODx CMS 0.9.6.1 Multiple Remote Vulnerabilities ================================================ AmnPardaz Security Research Team Title: MODx CMS Vulnerabilities Vendor: http://modxcms.com...
Bitweaver R2 CMS - Arbitrary File Upload / Disclosure
WwW.BugReport.ir AmnPardaz Security Research Team Title: Bitweaver R2 CMS Vendor: http://www.bitweaver.org Bugs: source code disclosure, arbitrary file upload Vulnerable Version: 2 prior versions also may be affected Exploitation: Remote with browser Fix Available: No! - Description: Bitweaver is...
runcms-sql.txt
// / RUNCMS 1.6 BLIND SQL Injection Exploit get Admin Cookie / // / exploit get admin cookie that can be used / / to login by pasting it into browser Opera / / and then get access to Admin session / / and change Admins password / / / // // / tested on RUNCMS english version 1.6 / // // / Date of...
RunCMS 1.6 Get Admin Cookie Remote Blind SQL Injection Exploit
No description provided by source. // / RUNCMS 1.6 BLIND SQL Injection Exploit get Admin Cookie / // / exploit get admin cookie that can be used / / to login by pasting it into browser Opera / / and then get access to Admin session / / and change Admins password / / / // // / tested on RUNCMS...
RunCMS 1.6 Remote Blind SQL Injection Exploit (IDS evasion)
Exploit for unknown platform in category web applications =========================================================== RunCMS 1.6 Remote Blind SQL Injection Exploit IDS evasion =========================================================== // / RUNCMS 1.6 BLIND SQL Injection Exploit + IDS evasion / /...
RunCMS 1.6 - Blind SQL Injection (IDS Evasion)
RunCMS 1.6 - Blind SQL Injection IDS Evasion // / RUNCMS 1.6 BLIND SQL Injection Exploit + IDS evasion / // / exploit get hash of admin password / / / / Exploit is invisible for / / RUNCMS sql injection detecting mechanism / // // / tested on RUNCMS english version 1.6 / // // / Date of Public...
RunCMS 1.6 - Multiple Vulnerabilities
RunCMS 1.6 - Multiple Vulnerabilities Digital Security Research Group Advisory Application: RunCMS Versions Affected: RunCMS 1.6 Vendor URL: http://www.runcms.org Bugs: SQL Injections, XSS, PHP Include, Predictable session id, etc. Exploits: Aviable Reported: 14.12.2007 Vendor response: 15.12.200...
RunCMS 1.6 - Get Admin Cookie Blind SQL Injection
RunCMS 1.6 - Get Admin Cookie Blind SQL Injection // / RUNCMS 1.6 BLIND SQL Injection Exploit get Admin Cookie / // / exploit get admin cookie that can be used / / to login by pasting it into browser Opera / / and then get access to Admin session / / and change Admins password / / / // // / teste...
RunCMS 1.6 - Get Admin Cookie Blind SQL Injection
// / RUNCMS 1.6 BLIND SQL Injection Exploit get Admin Cookie / // / exploit get admin cookie that can be used / / to login by pasting it into browser Opera / / and then get access to Admin session / / and change Admins password / / / // // / tested on RUNCMS english version 1.6 / // // / Date of...
Jupiter 1.1.5ex Privileges Escalation Exploit
No description provided by source. ?php WwW.BugReport.ir AmnPardaz Security Research & Penetration Testing Group Title: Jupiter 1.1.5ex Privileges Escalation Vendor: http://www.jupiterportal.com original advisory: http://www.bugreport.ir/?/23 ? html dir="ltr" head meta http-equiv="Content-Type"...
Unfixed XSS vulnerability at directory.searchnewz.com
Security researcher Uber0n, has submitted on 20/12/2007 a cross-site-scripting XSS vulnerability affecting directory.searchnewz.com, which at the time of submission ranked 41933 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It is...
[ISR] - Novell Groupwise client remote stack overflow silently patched.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 || ISR || || Infobyte Security Research || www.infobyte.com.ar || 12.14.2007 || .:: SUMMARY Novell GroupWise Client Remote Stack Overflow Version: GroupWise 6.5.6, It is suspected that all previous versions of Groupwise Client are vulnerable. .::...
Tftpd32 2.81 (GET Request) Format String Denial of Service PoC
No description provided by source. !/usr/bin/perl Tftpd32 Format String PoC DoS by Critical Security research http://www.critical.lt use IO::Socket; $port = "69"; $host = "127.0.0.1"; $tftpudp = IO::Socket::INET-newPeerPort = $port,PeerAddr = $host,Proto= 'udp'; $bzz = "\x00\x01" ; GET $bzz .=...
Unfixed XSS vulnerability at www.iloxx.de
Security researcher Nemessis, has submitted on 12/06/2007 a cross-site-scripting XSS vulnerability affecting www.iloxx.de, which at the time of submission ranked 139089 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/06/2007. It is currently...