Dokeos 2.2 RC2 SQL Injection Vulnerability

Dokeos version 2.2 RC2 suffers from a remote SQL injection vulnerability. Vendor: Dokeos Vulnerable Versions: 2.2 RC2 and probably prior Tested Version: 2.2 RC2 Advisory Publication: October 30, 2013 without technical details Vendor Notification: October 30, 2013 Public Disclosure: November 27,...

Dokeos 2.2 RC2 SQL Injection

Advisory ID: HTB23181 Product: Dokeos Vendor: Dokeos Vulnerable Versions: 2.2 RC2 and probably prior Tested Version: 2.2 RC2 Advisory Publication: October 30, 2013 without technical details Vendor Notification: October 30, 2013 Public Disclosure: November 27, 2013 Vulnerability Type: SQL Injectio...

appRain 3.0.2 - Blind SQL Injection

appRain 3.0.2 - Blind SQL Injection Advisory ID: HTB23177 Product: appRain Vendor: appRain Vulnerable Versions: 3.0.2 and probably prior Tested Version: 3.0.2 Advisory Publication: October 9, 2013 without technical details Vendor Notification: October 9, 2013 Public Disclosure: November 6, 2013...

appRain 3.0.2 SQL Injection Vulnerability

appRain version 3.0.2 suffers from a remote SQL injection vulnerability. Vendor: appRain Vulnerable Versions: 3.0.2 and probably prior Tested Version: 3.0.2 Advisory Publication: October 9, 2013 without technical details Vendor Notification: October 9, 2013 Public Disclosure: November 6, 2013...

appRain 3.0.2 SQL Injection

Advisory ID: HTB23177 Product: appRain Vendor: appRain Vulnerable Versions: 3.0.2 and probably prior Tested Version: 3.0.2 Advisory Publication: October 9, 2013 without technical details Vendor Notification: October 9, 2013 Public Disclosure: November 6, 2013 Vulnerability Type: SQL Injection...

Feng Office 2.3.2-rc Cross Site Scripting

Advisory ID: HTB23174 Product: Feng Office Vendor: Secure Data SRL Vulnerable Versions: 2.3.2-rc and probably prior Tested Version: 2.3.2-rc Advisory Publication: September 18, 2013 without technical details Vendor Notification: September 18, 2013 Public Disclosure: October 9, 2013 Vulnerability...

Gnew 2013.1 - Multiple Vulnerabilities

Gnew version 2013.1 suffers from file inclusion and remote SQL injection vulnerabilities. Product: Gnew Vulnerable Versions: 2013.1 and probably prior Tested Version: 2013.1 Advisory Publication: August 28, 2013 without technical details Vendor Notification: August 28, 2013 Public Disclosure:...

Gnew 2013.1 - Multiple Vulnerabilities (2)

Advisory ID: HTB23171 Product: Gnew Vendor: Raoul Proença Vulnerable Versions: 2013.1 and probably prior Tested Version: 2013.1 Advisory Publication: August 28, 2013 without technical details Vendor Notification: August 28, 2013 Public Disclosure: October 2, 2013 Vulnerability Type: PHP File...

Multiple Vulnerabilities in Smartphone Pentest Framework (SPF)

Advisory ID: HTB23123 Product: Smartphone Pentest Framework SPF Vendor: Bulb Security LLC Vulnerable Versions: v0.1.2 and probably prior Tested Version: v0.1.2 Vendor Notification: October 24, 2012 Public Disclosure: November 14, 2012 Vulnerability Type: OS Command Injection CWE-78, SQL Injection...

OpenOffice.org Multiple Vulnerabilities - Oct09 (Windows)

The host has OpenOffice.org installed and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbopenofficemultvulnoct09.nasl 4869 2016-12-29 11:01:45Z teissa $ OpenOffice.org Multiple Vulnerabilities - Oct09 Windows Authors: Sharath S Copyright: Copyright c 2009 Greenbone Networ...

linkSpheric 'viewListing.php' SQL Injection Vulnerability

The host is running linkSpheric and is prone to SQL Injection vulnerability. OpenVAS Vulnerability Test $Id: gblinksphericviewlistingsqlinjvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ linkSpheric 'viewListing.php' SQL Injection Vulnerability Authors: Sharath S Copyright: Copyright c 2009 Greenbon...

Google Chrome Denial of Service Vulnerability

The host is installed with Google Chrome and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbgooglechromedosvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ Google Chrome Denial of Service Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks...

Opera 9 - long href Remote Denial of Service

a...

[myimei]WordPress2.0.0~autorswebsite~XSS attack

original advisory http://myimei.com/security/2006-02-15/wordpress200autors-websitexss-attack.htmlmore-14 ——————-Summary—————- Software: WordPress Sowtware’s Web Site: http://www.wordpress.org Versions: 2.0.0 Class: Remote Status: Unpatched Exploit: Available Solution: Available Discovered by:...

athena.txt

Language: PHP Script: Athena Version: 0.1a Official website: http://sourceforge.net/projects/athena Problem: Remote file inclusion Discovered by: beford & GB Description: =========== A simple website management system written in oo php that uses a mysql database to store user and group rights and...

[SePro Bugtraq] WBB - WoltLab Burning Board <= 2.3.1 - XSS Vulnerability (22.04.05)

SePro Bugtraq WBB - WoltLab Burning Board = 2.3.1 - XSS Vulnerability 22.04.05 Vendor: WoltLab URL: http://www.woltlab.de/ Version: = 2.3.1 Type: XSS Discovered by deluxe89 Description: -------------------------------- The WoltLab Burning Board is a high customisable forum software for every kind...

HP-UX Security patch : PHSS_12137

The remote host is missing HP-UX Security Patch number PHSS12137 . Security Vulnerability in CDE on HP-UX 10.01,2,3 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16728;...

HP-UX Security patch : PHNE_14377

The remote host is missing HP-UX Security Patch number PHNE14377 . Security Vulnerability with inetd on HP-UX %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16788;...

HP-UX Security patch : PHKL_25244

The remote host is missing HP-UX Security Patch number PHKL25244 . Sec. Vulnerability in setrlimit1M rev. 1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16617; scriptversion"1.7"...

CoolPHP 1.0 Multiple Vulnerabilities

The remote host is running the CoolPHP Content Management system. There are various flaws in the remote version of this software which may allow an attacker to read arbitrary files on the remote host or to set up a cross-site scripting attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...