SA-CONTRIB-2012-011 - Panels - Cross Site Scripting (XSS)

CVE: CVE-2012-0914 The Panels module allows a site administrator to create customized layouts for multiple uses. The module doesn't sufficiently sanitize administrator supplied data. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "administer pane...

SA-CONTRIB-2012-009 - Revisioning - Access bypass

CVE: CVE-2012-1635 This module enables you to create moderation publication workflows, allowing authors to create content that isn't visible to the public until it has been approved by a moderator/publisher. The module's implementation of hooknodeaccess assumes that access is to granted/denied...

Joomla Discussions Component (com_discussions) SQL Injection

No description provided by source. Title : Joomla Discussions Component comdiscussions SQL Injection Vulnerability Author : Red Security TEAM Date : 17/01/2012 Risk : High Software : http://extensions.joomla.org/extensions/communication/forum/13560 Tested On : CentOS Contact : Info 4t RedSecurity...

Joomla Discussions Component (com_discussions) SQL Injection

Exploit for php platform in category web applications Title : Joomla Discussions Component comdiscussions SQL Injection Vulnerability Author : Red Security TEAM Date : 17/01/2012 Risk : High Software : http://extensions.joomla.org/extensions/communication/forum/13560 Tested On : CentOS Contact :...

SA-CONTRIB-2012-010 - stickynote - Multiple vulnerabilities

CVE: CVE-2012-1636 This module enables you to add textual notes in a block to perform quality assurance of your site. Previously it did not sufficiently protect against Cross Site Scripting XSS or Cross Site Request Forgery CSRF. This vulnerability is mitigated by the fact that an attacker must...

Joomla! Component com_discussions - SQL Injection

Joomla! Component comdiscussions - SQL Injection Title : Joomla Discussions Component comdiscussions SQL Injection Vulnerability Author : Red Security TEAM Date : 17/01/2012 Risk : High Software : http://extensions.joomla.org/extensions/communication/forum/13560 Tested On : CentOS Contact : Info ...

Joomla! Component com_discussions - SQL Injection

Title : Joomla Discussions Component comdiscussions SQL Injection Vulnerability Author : Red Security TEAM Date : 17/01/2012 Risk : High Software : http://extensions.joomla.org/extensions/communication/forum/13560 Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home :...

SA-CONTRIB-2013-004 - Live CSS - Arbitrary Code Execution

This module enables you to save CSS and LESS files on the server via your browser. The module doesn't check that the file being saved isn't a script or executable. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "administer CSS". CVE identifiers...

RedHat Update for libxml2 RHSA-2012:0017-01

Check for the Version of libxml2 OpenVAS Vulnerability Test RedHat Update for libxml2 RHSA-2012:0017-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

WordPress Count-Per-Day File Download / Cross Site Scripting

Exploit Title: Count-per-day Wordpress plugin Arbitrary file download and XSS Version: '...

x3cms 0.4.3 Cross Site Scripting

Advisory: Multiple Cross-Site-Scripting vulnerabilities in x3cms Advisory ID: INFOSERVE-ADV2011-04 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on x3cms 0.4.3 other versions may also be affected Vendor URL: http://www.x3cms.net/ Vendor Status: Parti...

Wordpress Count-per-day plugin Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Count-per-day Wordpress plugin Arbitrary file download and XSS Version: ' 0day.today 2018-03-03...

Important: Red Hat Security Advisory: libxml2 security update

Updated libxml2 packages that fix several security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Giveaway Manager 3 Cross Site Scripting

Exploit Title: Giveaway Manager 3 Cross Site Scripting Vulnerabilitiy Google Dork: intext:"Powered By: Giveaway Manager 3" Date: 10/1/2012 Author: H4ckCity Security Team & IrIsT Discovered By: Am!r Home: WwW.H4ckCity.Org Software Link: www.bigb-trading.com Version: All Version Category:: webapps...

SA-CONTRIB-2012-007 - Password Policy - Multiple vulnerabilities

This module enables you to specify a certain level of password complexity aka. "password hardening" for user passwords on a system by defining a policy. Cross Site Request Forgery CSRF CVE: CVE-2012-1633 Unblocking a user does not require sufficient confirmation by administrative users and can be...

PHP-Fusion 7.02.04 Cross Site Scripting

ISlamic Republic Of IRan Security Team http://irist.ir/forum/ PHP-Fusion V.7.02.04 Cross-Site Scripting Vulnerabilities Download......: http://www.php-fusion.co.uk/ Exploit.......: http://www.site.com/path/downloads.php?catid=Xss Google Search.: "Powered by PHP-Fusion" Bug Found.....: IrIsT.Ir...

Big B Trading CMS Cross Site Scripting

Exploit Title:Big B Trading CMS Cross Site Scripting Vulnerabilitiy Google Dork: intext:"Website by Big B Trading" Date: 10/1/2012 Author: H4ckCity Security Team & IrIsT Discovered By: Am!r Home: WwW.H4ckCity.Org Software Link: www.bigb-trading.com Version: All Version Category:: webapps Security...

Ggb Guestbook - XSS Vulnerabilities

Title: Ggb Guestbook - XSS Vulnerabilities Software : Ggb Guestbook Software Version : 0.3.1 Vendor: http://gelin.ru/soft/project/ggb/ http://code.google.com/p/ggbook/ Vulnerability Published : 2012-01-05 Vulnerability Update Time : Status : Impact : Medium Bug Description : Ggb Guestbookversion...

HServer webserver - Directory Traversal Vulnerability

Title: HServer webserver - Directory Traversal Vulnerability Software : HServer webserver Software Version : 0.1.1 Vendor: http://www.luizpicanco.com/index.php?s=hserver http://code.google.com/p/hserver/ Vulnerability Published : 2012-01-05 Vulnerability Update Time : Status : Impact : High Bug...

AiDesign SQL Injection

Exploit Title: AiDesign SQL Injection Vulnerability Google Dork: "Powered by: AiDesign" Date: 8/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Vendor Software: www.adx.hk Version: All Version Category:: webapps Security Risk:: High Tested on: GNU/Linux...