MCFileManager Plugin for TinyMCE 3.2.2.3 - Arbitrary File Upload

MCFileManager Plugin for TinyMCE 3.2.2.3 - Arbitrary File Upload ============================================== File Upload Vulnerability Plugins tinymce ============================================== http://tinymce.moxiecode.com/pluginsfilemanager.php Major version 3 Minor version 2.2.3 Author :...

Joomla Lyftenbloggie Cross Site Scripting

Joomla Component comlyftenbloggie XSS/HTML Vulnerability =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-= /\ \ /\ \ \ \ \L\ \ \ \ \ /\ \ \ \ /',\ \ /\ /\ /\ \ /'\ /' \ /'\ \ \ /\ /, \ \ \ \ \ \ \ \ \ /\ \L./\ /\ /\ / \ \ \// \ \ \ \/ \ /.\ \ \ \...

Unfixed XSS vulnerability at mci.ir

Security researcher Hacked by Montazer313 Digital Security Team, has submitted on 16/12/2010 a cross-site-scripting XSS vulnerability affecting mci.ir, which at the time of submission ranked 3580 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

PhpMyAdmin Client Side 0Day Code Injection and Link Falsification

Exploit for php platform in category web applications ================================================================= PhpMyAdmin Client Side 0Day Code Injection and Link Falsification ================================================================= Credits: Emanuele 'emgent' Gentili Marco...

Unvalidated input on error page.

PMASA-2010-9 Announcement-ID: PMASA-2010-9 Date: 2010-12-07 Updated: 2010-02-16 Summary Unvalidated input on error page. Description It was possible to display arbitrary text and link to external site using parameters passed to particular script. Severity This issue is considered minor, because t...

ESG CMS (section.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================= ESG CMS section.php SQL Injection Vulnerability ================================================= 010101010101010101010101010101010101010101010101010101010 0 0 1 Iranian Datacoders Security Tea...

phpMyAdmin - Client-Side Code Injection Redirect Link Falsification

phpMyAdmin - Client-Side Code Injection Redirect Link Falsification PhpMyAdmin Client Side 0Day Code Injection and Redirect Link Falsification Credits: Emanuele 'emgent' Gentili Marco 'whitesheep' Rondini Alessandro 'scox' Scoscia In error.php, PhpMyAdmin permit to insert text and restricted tag,...

Joomla Component (com_annuaire) SQL Injection Vulnerability

Exploit for php platform in category web applications =========================================================== Joomla Component comannuaire SQL Injection Vulnerability ===========================================================...

Alibaba Clone B2B 3.4 - SQL Injection

Exploit Title:Alibaba v3.4 clone b2bcountrydetails.php SQL Injection Vulnerability Date: 29.11.2010 Author: Dr.0rYX and Cr3w-DZ Category: webapps/0day . . \ \ /| | \ /|| / / /\ \ | | | | \ \ \ | \ \ |/ \ \ | | \ / \ | /| | | Y \ // / | \ | | / \ \ / \ || /\ /| || || / /\ / || ||\ / / / /...

Joomla Component (com_catalogue) SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================ Joomla Component comcatalogue SQL Injection Vulnerability ============================================================...

Joomla Component (com_storedirectory) SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================================= Joomla Component comstoredirectory SQL Injection Vulnerability =================================================================...

Joomla Component (com_catalogue) LFI Vulnerability

Exploit for php platform in category web applications ================================================== Joomla Component comcatalogue LFI Vulnerability ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /...

Haibo Network cart SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================== Haibo Network cart SQL Injection Vulnerability ============================================== Author: Dr.0rYX AND Cr3w-DZ Category: webapps/0day . . \ \ /| | \ /|| / / /\ \ | | | | \ \ \ | \ \ |/...

FozzCom shopping<= 7.94+8.04 Multiple Remote Vulnerabilities

Exploit for php platform in category web applications ============================================================ FozzCom shopping / / / / / / / / . ||/ | .. / | / // / | | \ \ \ \ \ / || |||| /...

Moderate: Red Hat Security Advisory: pam security update

Updated pam packages that fix three security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Foxit Reader 4.1.1 Stack Buffer Overflow Exploit

Exploit for windows platform in category local exploits ================================================ Foxit Reader 4.1.1 Stack Buffer Overflow Exploit ================================================ Exploit Title : Foxit 4.1.1 Author : Sud0 Bug found by : dookie Software Link :...

Foxit Reader 4.1.1 - Local Stack Buffer Overflow

Exploit Title : Foxit 4.1.1 Date : 13/11/2010 Author : Sud0 Bug found by : dookie Original POC : https://www.exploit-db.com/exploits/15514/ Software Link : http://www.foxitsoftware.com/downloads/index.php Version : 4.1.1 OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : EIP / SEH Thank...

Foxit Reader 4.1.1 - Local Stack Buffer Overflow

Foxit Reader 4.1.1 - Local Stack Buffer Overflow Exploit Title : Foxit 4.1.1 Date : 13/11/2010 Author : Sud0 Bug found by : dookie Original POC : https://www.exploit-db.com/exploits/15514/ Software Link : http://www.foxitsoftware.com/downloads/index.php Version : 4.1.1 OS : Windows Tested on : XP...

Foxit Reader 4.1.1 Buffer Overflow

Exploit Title : Foxit 4.1.1 Date : 13/11/2010 Author : Sud0 Bug found by : dookie Original POC : https://www.exploit-db.com/exploits/15514/ Software Link : http://www.foxitsoftware.com/downloads/index.php Version : 4.1.1 OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : EIP / SEH Thank...

SA-CONTRIB-2010-101 - Watcher - Multiple Vulnerabilities

The Watcher module lets users subscribe to nodes so they receive email notifications when comments are posted or nodes are changed. The Watcher module did not sanitize some of the user supplied data before displaying it, leading to a Cross Site Scripting XSS vulnerability which can be used by a...