Moodle 1.8.x < 1.8.12, 1.9.x < 1.9.8 Multiple Vulnerabilities

Moodle is prone to multiple vulnerabilities. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Session fixation

NWFTPD.nlm before 5.08.06 in the FTP server in Novell NetWare does not properly handle partial matches for container names in the FTPREST.TXT file, which allows remote attackers to bypass intended access restrictions via an FTP session...

OXID eShop Enterprise Edition Cross Site Scripting / Session Fixation

--------------------------------------------- OXID eShop Enterprise Edition - Session Fixation Vulnerability - Stored Cross Site Scripting Vulnerability Date: 30.03.2010 --------------------------------------------- - Description OXID eShop EE is a widespread and popular CMS for online shops. The...

OXID eShop Enterprise: Session Fixation and XSS Vulnerabilities

--------------------------------------------- OXID eShop Enterprise Edition - Session Fixation Vulnerability - Stored Cross Site Scripting Vulnerability Date: 30.03.2010 --------------------------------------------- - Description OXID eShop EE is a widespread and popular CMS for online shops. The...

Simple Machines Forum 1.1.11 Session Fixation

======================================================================================== | Title : Simple Machines Forum 1.1.11 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.sec-war.com | Web Site : http://www.simplemachines.org/ | Dork : Powered by SMF...

OXID eShop Enterprise: Session Fixation and XSS Vulnerabilities

No description provided by source. bugtraq logo Bugtraq mailing list archives By Date By Thread OXID eShop Enterprise: Session Fixation and XSS Vulnerabilities From: michael.mueller integralis com Date: Tue, 30 Mar 2010 00:13:28 -0600 --------------------------------------------- OXID eShop...

Session Fixation Attack on HTTP Cookies

By manipulating cookies through a vulnerability similar to cross-site scripting, an attacker can set the session cookies. The legitimate user will be logged out of the application and after he logs in again, the cookie will remain unchanged and the attacker will be able to steal the open session...

Andromeda 1.9.2 Cross Site Scripting / Cookie Manipulation

======================================================================================== | Title : Andromeda v1.9.2 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site : | Script : powered by...

Andromeda v1.9.2 Mullti Vulnerability

Exploit for unknown platform in category web applications ===================================== Andromeda v1.9.2 Mullti Vulnerability ===================================== ======================================================================================== | Title : Andromeda v1.9.2 Mullti...

Andromeda 's' Parameter Cross Site Scripting and Session Fixation Vuln

Exploit for unknown platform in category web applications ================================================================================= Andromeda 's' Parameter Cross Site Scripting and Session Fixation Vulnerabilities...

Andromeda 1.9.2 - s Cross-Site Scripting Session Fixation

Andromeda 1.9.2 - s Cross-Site Scripting Session Fixation source: https://www.securityfocus.com/bid/38735/info Andromeda is prone to a cross-site scripting vulnerability and a session-fixation vulnerability. An attacker may leverage these issues to execute arbitrary script code in the browser of ...

Andromeda 1.9.2 - 's' Cross-Site Scripting / Session Fixation

source: https://www.securityfocus.com/bid/38735/info Andromeda is prone to a cross-site scripting vulnerability and a session-fixation vulnerability. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site a...

CVE-2010-0756

Session fixation vulnerability in WikyBlog 1.7.3 rc2 allows remote attackers to hijack web sessions by setting the jsessionid parameter to 1 index.php/Comment/Main, 2 index.php/Comment/Main/HomeWiky, or 3 index.php/Edit/Main...

Session fixation

Session fixation vulnerability in WikyBlog 1.7.3 rc2 allows remote attackers to hijack web sessions by setting the jsessionid parameter to 1 index.php/Comment/Main, 2 index.php/Comment/Main/HomeWiky, or 3 index.php/Edit/Main...

CVE-2010-0756

Session fixation vulnerability in WikyBlog 1.7.3 rc2 allows remote attackers to hijack web sessions by setting the jsessionid parameter to 1 index.php/Comment/Main, 2 index.php/Comment/Main/HomeWiky, or 3 index.php/Edit/Main...

CVE-2010-0756

WikyBlog 1.7.3 rc2 is affected by a session-fixation vulnerability where an attacker can hijack user sessions by setting the jsessionid to specific URLs (index.php/Comment/Main, index.php/Comment/Main/Home_Wiky, or index.php/Edit/Main). This CVE (CVE-2010-0756) is documented across NVD and CVE re...

GLSA-201001-08 : SquirrelMail: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201001-08 SquirrelMail: Multiple vulnerabilities Multiple vulnerabilities were found in SquirrelMail: Niels Teusink reported multiple input sanitation flaws in certain encrypted strings in e-mail headers, related to...

WikyBlog 1.7.3rc2 XSS / Shell Upload / RFI

======================================================================================== | Title : WikyBlog-1.7.3rc2 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com | Web Site : http://www.wikyblog.com/ | Dork : Powered by WikyBlog | Tested on:...

WikyBlog 1.7.3rc2 - Multiple Vulnerabilities

======================================================================================== | Title : WikyBlog-1.7.3rc2 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com | Web Site : http://www.wikyblog.com/ | Dork : Powered by WikyBlog | Tested on:...

WikyBlog Multiple Remote Input Validation Vulnerabilities

WikyBlog is prone to multiple vulnerabilities, including an arbitrary-file- upload issue, a cross-site scripting issue, a remote file-include issue and a session-fixation issue. Attackers can exploit these issues to: - execute arbitrary script code in the browser of an unsuspecting user in the...