CVE-2017-0302

In F5 BIG-IP APM 12.0.0 through 12.1.2 and 13.0.0, an authenticated user with an established access session to the BIG-IP APM system may be able to cause a traffic disruption if the length of the requested URL is less than 16 characters...

Kibana 5.0.1 and 4.6.3 released with a fix for an open redirect vulnerability

Kibana versions 5.0.1 and 4.6.3 fix an open redirect vulnerability in the short URL feature that would allow an attacker to create a redirect from the Kibana domain to a different website. We’ve assigned this vulnerability the identifier ESA-2016-08. Thank you to the GE Digital Security Team for...

URL Shorteners Put Private Cloud Data at Risk

URL shorteners are convenient, but for a long time gave security practitioners anxiety because it was difficult to determine where the shortened address was taking you. Two researchers have now given you new reasons to fear URL shorteners, especially for those storing and sharing data on...

Semantic SM Short URL Script 2.0 SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : http://0day.today 0 1 + Support e-mail :...

YourFreeWorld Short Url & Url Tracker (id) SQL Injection Vuln

No description provided by source. Short Url & Url Tracker id Remote SQL Injection Vulnerability Author: Hussin X Home : www.IQ-TY.com & www.TrYaG.cc script : http://www.yourfreeworld.com/script/shorturl.php DorK : inurl:tr.php?id= Short Url & Url Tracker Exploit :...

Gentle Short URL Script Stored Cross Site Scripting

Exploit Title: Gentle Short URL Script Stored XSS Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE Link shorten, send to a victim. Vulnerable Module: Shorten URL Statics The end of the shortened link ! mentions...

CVE-2010-1060

Directory traversal vulnerability in staff/app/common.inc.php in Phpkobo Short URL 1.01, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the LANGCODE parameter...

Directory traversal

Multiple directory traversal vulnerabilities in Phpkobo Short URL 1.01, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the LANGCODE parameter to 1 url/app/common.inc.php and 2 codelib/cfg/common.inc.php...

Directory traversal

Directory traversal vulnerability in staff/app/common.inc.php in Phpkobo Short URL 1.01, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the LANGCODE parameter...

CVE-2010-1060

CVE-2010-1060 is a directory traversal vulnerability in Phpkobo Short URL 1.01 (staff/app/common.inc.php). When magic_quotes_gpc is disabled, an attacker can use ".." in the LANG_CODE parameter to include and execute arbitrary local files. The NVD entry assigns a CVSS v2 base score of 6.8 (MEDIUM...

CVE-2010-1061

Multiple directory traversal vulnerabilities in Phpkobo Short URL 1.01, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the LANGCODE parameter to 1 url/app/common.inc.php and 2 codelib/cfg/common.inc.php...

Sql injection

SQL injection vulnerability in x/login in JungleScripts Ajax Short Url Script allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2009-4727

SQL injection vulnerability in x/login in JungleScripts Ajax Short Url Script allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2009-4727

CVE-2009-4727 details a SQL injection in JungleScripts Ajax Short Url Script, affecting the x/login path via the username parameter. The Vulnerability is described as allowing remote attackers to execute arbitrary SQL commands, signaling a potentially high impact. The NVD entry assigns a CVSS v2 ...

Short URL 1.01 Local File Inclusion

Securitylab.ir Application Info: Name: Short URL Version: 1.01 Vendor: http://www.phpkobo.com/shorturl.php Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability: http://site.com/staff/app/common.inc.php?LANGCODE=../../../../../../../etc/passwd%00 Discoverd By: Pouya Daneshmand...

Short URL v1.01 - Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ==================================================== Short URL v1.01 - Local File Inclusion Vulnerability ==================================================== Application Info: Name: Short URL Version: 1.01 Vendor:...

Ajax Short URL SQL Injection

Discovered By: Cicklow - Date: 03.08.2009 Exploit: username: realadminname ' or ' 1=1 password: cicklow note: generally admin name: admin or any user Buy Script: http://junglescripts.com/shorturls.php Admin login Demo: http://href.in/x/login...

Ajax Short URL Script - Authentication Bypass

Discovered By: Cicklow - Date: 03.08.2009 Exploit: username: realadminname ' or ' 1=1 password: cicklow note: generally admin name: admin or any user Buy Script: http://junglescripts.com/shorturls.php Admin login Demo: http://href.in/x/login milw0rm.com 2009-08-03...

Ajax Short URL Script (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Ajax Short URL Script Auth Bypass SQL Injection Vulnerability =============================================================== - Discovered By: Cicklow - Date: 03.08.2009...

Ajax Short URL Script (Auth Bypass) SQL Injection Vulnerability

No description provided by source. - Discovered By: Cicklow - Date: 03.08.2009 Exploit: username: realadminname ' or ' 1=1 password: cicklow note: generally admin name: admin or any user Buy Script: http://junglescripts.com/shorturls.php Admin login Demo: http://href.in/x/login sebug.net...