FreePBX 2.5.x - Information Disclosure

FreePBX 2.5.x 'admin/config.php'密码信息泄漏漏洞 1. 漏洞信息 FreePBX是一款用来控制Asterisk的图形化接口。 能访问管理段的用户可以通过查看HTML源代码来获得其他管理员的密码信息。 2.漏洞使用方法 访问管理段用户的url http://localhost/admin/config.php?display=ampusers&userdisplay=admin 查看网页源码 PasswordCreate a password for this new user: 可以看到了密码 3.厂商解决方案 freePBX...

Quantum vmPRO 3.1.2 - Privilege Escalation

No description provided by source. ----------- Author: ----------- xistence xistenceat0x90.nl ------------------------- Affected products: ------------------------- Quantum vmPRO 3.1.2 and below ------------------------- Affected vendors: ------------------------- Quantum http://quantum.com/...

Collabtive 1.1 (managetimetracker.php, id param) - SQL Injection

No description provided by source. =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ || || || Advisory : Collabtive Sql Injection || || Affected Version : 1.1 || || Vendor : http://collabtive.o-dyn.de/index.php || || Risk : Medium || || CVE-ID : 2013-6872 || || Tested on Platform...

webo site speedup <= 1.6.1 - Multiple Vulnerabilities

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ posdubatgmail.com 2012-06-16 WEBO Site SpeedUp = 1.6.1 Multiple Vulnerabilites Script: WEBO Site SpeedUp is a PHP...

X10Media Mp3 Search Engine < 1.6.2 Admin Access Vulnerability

No description provided by source. THUNDER Product: X10media Mp3 Search Engine v1.x Admin Access Vulnerability Author : THUNDER t4hathotmail.fr File : admin/admin.php Vulnerable Code / User not an administrator, redirect to main page automatically. / if!$session-isAdmin headerLocation: ../main.ph...

MyBulletinBoard (MyBB) <= 1.2.3 - Remote Code Execution Exploit

No description provided by source. !/usr/bin/php ?php errorreportingEALL ^ ENOTICE; http://www.milw0rm.com/exploits/2012 They corrected not all a lot of SQL requests which use the ipaddress, with $db-escapestring. They don't corrected the function this is a choice ... the bad and they forgot to...

Linux Kernel 2.6.x - 'add_to_page_cache_lru()' Local Denial of Service Vulnerability

Linux Kernel 'addtopagecachelru'本地拒绝服务漏洞 漏洞类型： 设计缺陷 exp: global bs=8k iodepth=1024 iodepthbatch=60 randrepeat=1 size=1m directory=/home/oracle numjobs=20 job1 ioengine=sync bs=1k direct=1 rw=randread filename=file1:file2 job2 ioengine=libaio rw=randwrite direct=1 filename=file1:file2 job3 bs=1k...

phpShop <= 0.8.1 - Remote SQL injection / Filter Bypass Vulnerabilities

No description provided by source. Vendor : PHPShop Webiste : http://www.phpshop.org Version : v0.8.1 Author: the redc0ders / theredc0dersatgmaildotcom Condition: magicquotegpc = off , in php.ini setting Details : ========== Vulnerable Code in index.php near lines 98 - 128 code // basic SQL injec...

ZoomStats <= 1.0.2 (mysql.php) Remote File Include Vulnerability

No description provided by source. ToXiC BuG FounD by Drago84 Application Affect:ZoomStats Source Code: http://prdownloads.sourceforge.net/zoomstats/ZoomStats-v1.0.2.zip?usemirror=kent Problem: $GLOBALS'lib''db''path' array not declare Solution : $GLOBALS'lib''db''path' Page Vulnerable : mysql.ph...

Family CMS 2.9 and earlier multiple Vulnerabilities

1- CSRF缺陷 : 利用的POC如下： POC 1: Page "familynews.php" function autosubmit document.getElementById'ChangeSubmit'.submit; POC 2:页面 "prayers.php" function autosubmit document.getElementById'ChangeSubmit'.submit; input type="hidden" name="desc" value="testtes...

tcpdump 3.4 Protocol Four and Zero Header Length Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/313/info A vulnerability in tcpdump causes it to enter an infinite loop within the procedure ipprint from the file printip.c when it receives a packet with IP protocol number four and a zero header length and it tries to...

Phorum 5.1.20 include/admin/banlist.php delete Parameter CSRF Banlist Deletion

No description provided by source. source: http://www.securityfocus.com/bid/23616/info Phorum is prone to multiple input-validation vulnerabilities, including an unauthorized-access issue, privilege-escalation issue, multiple SQL-injection issues, and cross-site scripting issues, because the...

infoware SQL Injection Vulnerability

No description provided by source. =============================================== infoware SQL Injection Vulnerability =============================================== .----..--.--.| |--..-----..----.| |.-----..-----. | || | || || -|| || || || | ||| ||||||| ||||| | || || infoware SQL Injection...

MagNet BeeHive CMS (header) - Remote File Include Vulnerability

No description provided by source. --------------------------------------------------------------------------- Beehive CMS header Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team Remote : Ye...

SL_Site <= 1.0 (spaw_root) Remote File Include Vulnerability

No description provided by source. --------------------------------------------------------------------------- SLSite = 1.0 spawroot Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team :...

Serendipity 1.6 Backend XSS And SQLi Vulnerability

No description provided by source. Advisory: Serendipity 1.6 Backend Cross-Site Scripting and SQL-Injection vulnerability Advisory ID: KORAMIS-ADV2012-001 Contact: [email protected] Author: Stefan Schurtz Affected Software: Successfully tested on Serendipity 1.6 Vendor URL: http://www.s9y.org...

Mambo/Joomla Component rsgallery <= 2.0b5 (catid) SQL Injection Vuln

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV86$2007 ----------------------------------------------------------------------------------------- ECHOADV86$2007 Mambo/Joomla Component rsgallery = 2.0 beta 5 catid Remote...

PHP Webcam Video Conference - Multiple Vulnerabilities

No description provided by source. Exploit: PHP Webcam Video Conference - LFI/XSS Date: 06/02/2014 Exploit Author: vinicius777 Contact: vinicius777 AT gmail / @vinicius777 Vendor Homepage: http://www.videowhisper.com/ Software Link: http://sourceforge.net/projects/phpwebcamvideoconference Solutio...

Alex News-Engine 1.5.1 - Remote Arbitrary File Upload Vulnerability

No description provided by source. Yellow Flood Organization Alex News-engine fckeditor Arbitrary File Upload Source: http://www.alexscriptengine.de/blog/category/news-engine/ Download: http://www.alexscriptengine.de/blog/asedownloads/news-engine/ Discover by: Batter - Vulnerability:...

phpBB Import Tools Mod <= 0.1.4 - Remote File Include Vulnerability

No description provided by source. Title: phpBB Import Tools Mod = 0.1.4 phpbbrootpath Remote File Inclusion Author/Discovery: boecke Vulnerability Type: Remote File Inclusion Risk: High Risk Software Affected: phpBB Import Tools Mod = 0.1.4 Literally shouts to: str0ke and henrik Don't promote...