CVE-2011-4958

Cross-site scripting XSS vulnerability in the process function in SSViewer.php in SilverStripe before 2.3.13 and 2.4.x before 2.4.6 allows remote attackers to inject arbitrary web script or HTML via the QUERYSTRING to template placeholders, as demonstrated by a request to 1 admin/reports/, 2...

Cross site scripting

Cross-site scripting XSS vulnerability in the process function in SSViewer.php in SilverStripe before 2.3.13 and 2.4.x before 2.4.6 allows remote attackers to inject arbitrary web script or HTML via the QUERYSTRING to template placeholders, as demonstrated by a request to 1 admin/reports/, 2...

PT-2014-2641

Name of the Vulnerable Software and Affected Versions b2evolution versions prior to 4.1.7 Description The issue allows remote authenticated administrators to execute arbitrary SQL commands via the show statuses parameter in the "blogs/admin.php" endpoint. This can be leveraged using CSRF to enabl...

PT-2014-4855

Name of the Vulnerable Software and Affected Versions Postfix Admin versions prior to 2.3.7 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is due to a SQL injection vulnerability in the gen show status function in functions.inc.php. Recommendations...

PT-2014-3385

Name of the Vulnerable Software and Affected Versions b2evolution versions prior to 4.1.7 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the show statuses parameter...

Interview Benjamin Kunz Mejri - HITB Amsterdam 2013Q4

Document Title: =============== Interview Benjamin Kunz Mejri - HITB Amsterdam 2013Q4 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1220 View: http://www.youtube.com/watch?v=QnfWpuVk-jo Release Date: ============= 2014-03-04 Vulnerability Laboratory ID VL-ID:...

Interview Benjamin Kunz Mejri - HITB Amsterdam 2013Q4

Document Title: =============== Interview Benjamin Kunz Mejri - HITB Amsterdam 2013Q4 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1220 View: http://www.youtube.com/watch?v=QnfWpuVk-jo Release Date: ============= 2014-03-04 Vulnerability Laboratory ID VL-ID:...

Design/Logic Flaw

The remote debug shell on the PALO adapter card in Cisco Unified Computing System UCS allows local users to gain privileges via malformed show-macstats parameters, aka Bug ID CSCub13772...

CVE-2012-1313

The remote debug shell on the PALO adapter card in Cisco Unified Computing System UCS allows local users to gain privileges via malformed show-macstats parameters, aka Bug ID CSCub13772...

PT-2013-1523

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS affected versions not specified Description The issue concerns the remote debug shell on the PALO adapter card, which allows local users to gain privileges. This is achieved by using malformed show-macstats...

CVE-2012-1313: Undefined Security Weakness

The remote debug shell on the PALO adapter card in Cisco Unified Computing System UCS allows local users to gain privileges via malformed show-macstats parameters, aka Bug ID CSCub13772...

PT-2013-4417

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS 6100 Fabric Interconnect devices affected versions not specified Description A memory leak issue exists in the CLI component of the affected devices. This issue can be triggered by local users under certain...

PT-2013-2612

Name of the Vulnerable Software and Affected Versions Bugzilla versions prior to 3.6.13 Bugzilla versions 3.7.x Bugzilla versions 4.0.x prior to 4.0.10 Bugzilla versions 4.1.x Bugzilla versions 4.2.x prior to 4.2.5 Bugzilla versions 4.3.x Bugzilla versions 4.4.x prior to 4.4rc2 Description A...

PT-2013-1990

Name of the Vulnerable Software and Affected Versions Vastal I-Tech Freelance Zone affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the code id parameter in the show code.php file. Recommendations At the moment,...

PT-2012-4044

Name of the Vulnerable Software and Affected Versions ar web content manager AWCM version 2.2 Description The issue allows remote attackers to cause a denial of service due to disk consumption. This can be achieved by submitting a large number of comment records through HTTP requests to specific...

aspcms background holding shell vulnerability(non-add module)and repair method-vulnerability warning-the black bar safety net

aspcms in the old version, you can add a template directly to add the asp. But the new aspcms has been restricted to add the template format is html,js,css,and of course if you are experiencing iis6 words or by iis6 parsing vulnerability put the file name into 1. asp;. html this format to get to...

[ShowWindows v1.0] Command-line Tool to Manage Open Windows

Show Windows is the command-line tool to manage Windows opened by all running Processes on your system. In addition to showing open Windows, it does little more. Here are some of the things that you can do with ShowWindows, View all open Windows/Apps Windows opened by particular User Windows open...

PT-2012-2196

Name of the Vulnerable Software and Affected Versions mPDF versions 5.3 and earlier Description A directory traversal issue exists, allowing remote attackers to read arbitrary files by using a .. dot dot in the filename parameter of the examples/show code.php file. Recommendations For mPDF versio...

CVE-2012-5341: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in statistik.php in Otterware StatIt 4 allow remote attackers to inject arbitrary web script or HTML via the 1 action parameter, 2 show parameter in a stattld action, or 3 order parameter in a statabfragen action...

PT-2012-5936

Name of the Vulnerable Software and Affected Versions Otterware StatIt version 4 Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters in the statistik.php file. The vulnerable parameters include the action parameter, the show parameter in a...