Google Picasa JPEG Image Processing Remote Code Execution Vulnerability - Windows

google picasa is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MyBB MyTabs Plugin 'tab' Parameter SQLi Vulnerability

MyBB with MyTabs Plugin is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Surge Media CMS SQL Injection

.. . || | | | | | | | | / | | \ | \ \ / | |/ // \ \ | | || Y Y \ | / Y / \ | | \ | / / / / / / .org Archieve an Resource About Hacking Exploit Title: Surgemedia Cms Sql Injection Vulnerability Author: Netrondoank Aka netron home Page: http://www.ilmuhacker.org Forum :...

foomatic-gui python-foomatic 0.7.9.4 - 'pysmb.py' Arbitrary Shell Command Execution

source: https://www.securityfocus.com/bid/48982/info foomatic-gui is prone to a remote arbitrary shell-command-execution vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary shell commands in the context of t...

HESK 2.2 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49008/info HESK is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Support Incident Tracker SiT! < 3.64 Multiple SQLi Vulnerabilities

Support Incident Tracker is prone to multiple SQL injection SQLi vulnerabilities. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...

EMC Documentum eRoom Indexing Server Hummingbird Client Connector Buffer Overflow

The Hummingbird Client Connector, bundled with EMC Documentum eRoom's Indexing Server, has a buffer overflow vulnerability. Making an unspecified request can result in a stack-based buffer overflow. A remote, unauthenticated attacker could exploit this to execute arbitrary code. Documentum eRoom...

Support Incident Tracker (SiT!) 3.63 p1 - 'billable_incidents.php?sites[]' SQL Injection

source: https://www.securityfocus.com/bid/48896/info Support Incident Tracker is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

Easy Estate Rental - 's_location' SQL Injection

source: https://www.securityfocus.com/bid/48684/info Easy Estate Rental is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, acce...

Exploitsearch.net - Exploit & Vulnerability Search Engine

Exploitsearch.net - Exploit & Vulnerability Search Engine This is a online search for currently utilizing data from NVD, OSVDB, SecurityFocus, Exploit-DB, Metasploit, Nessus, OpenVAS, and PacketStorm.Well search engine does the work but this is a specific search engine for better results. There...

Portix-CMS 'page' Parameter Local File Include Vulnerability

Portix-CMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary local scripts in the context of the webserver process. This may allow...

WeBid 'converter.php' Multiple Remote PHP Code Injection Vulnerabilities

WeBid is prone to multiple vulnerabilities that attackers can leverage to execute arbitrary PHP code because the application fails to adequately sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

ftp-vsftpd-backdoor NSE Script

Tests for the presence of the vsFTPd 2.3.4 backdoor reported on 2011-07-04 CVE-2011-2523. This script attempts to exploit the backdoor using the innocuous id command by default, but that can be changed with the exploit.cmd or ftp-vsftpd-backdoor.cmd script arguments. References: Script Arguments...

Joomla! Component com_morfeoshow - idm SQL Injection

Joomla! Component commorfeoshow - idm SQL Injection source: https://www.securityfocus.com/bid/48452/info The 'commorfeoshow' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting th...

Nodesforum - '_nodesforum_node' SQL Injection

source: https://www.securityfocus.com/bid/48451/info Nodesforum is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or...

Tor Directory Authority 'policy_summarize' Denial of Service Vulnerability - Windows

Tor is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PHP-Nuke 8.3 - upload.php Arbitrary File Upload (2)

PHP-Nuke 8.3 - upload.php Arbitrary File Upload 2 source: https://www.securityfocus.com/bid/48257/info Phpnuke is prone to an arbitrary-file-upload vulnerability because the application fails to adequately sanitize user-supplied input. An attacker can exploit this issue to upload arbitrary code a...

BLOG:CMS <= 4.2.1.f Multiple XSS Vulnerabilities - Active Check

BLOG:CMS is prone to multiple cross-site scripting XSS vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

IP Power 9258 TGI Scripts Unauthorized Access Vulnerability

IP Power 9258 is prone to an unauthorized-access vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

allocPSA 'login/login.php' Cross Site Scripting Vulnerability

allocPSA is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to...