CVE-2011-1689

CVE-2011-1689 affects Best Practical Solutions RT (2.x–4.0.0rc7), with multiple XSS vulnerabilities allowing remote script injection via unspecified vectors. Public sources confirm RT is vulnerable across listed versions; Debian advisory notes fixes in RT 3.8.x branch (e.g., 3.8.8–7+squeeze1, 3.8...

CVE-2011-1688

CVE-2011-1688 affects Best Practical Solutions’ RT (Request Tracker). The OpenVAS entries and NVD record enumerate a directory traversal vulnerability exploitable via crafted HTTP requests that allows reading arbitrary files on RT installations. Affected versions include RT 3.2.0 up to 3.6.10, 3....

CVE-2011-1688

Directory traversal vulnerability in Best Practical Solutions RT 3.2.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allows remote attackers to read arbitrary files via a crafted HTTP request...

CVE-2011-1690

Summary: CVE-2011-1690 affects Best Practical Solutions RT (Request Tracker) 3.6.0–3.6.10 and 3.8.0–3.8.8. It enables remote attackers to trick users into sending credentials to an arbitrary server via unspecified vectors (no exploit details provided in the sources). The vulnerability is categori...

Shape Web Solutions CMS SQL Injection Vulnerability

Exploit for php platform in category web applications Shape Web Solutions CMS SQL Injection Vulnerability Exploit Title: Shape Web Solutions CMS SQL Injection Vulnerability Date: 03-18-2011 Vendor or Software Link: http://www.shapeweb.com.br/ Version: All version Category:: webapps Google dork:...

Shape Web Solutions CMS - SQL Injection

Shape Web Solutions CMS - SQL Injection Shape Web Solutions CMS SQL Injection Vulnerability Exploit Title: Shape Web Solutions CMS SQL Injection Vulnerability Author: Ashiyane Digital Security Team Date: 03-18-2011 Vendor or Software Link: http://www.shapeweb.com.br/ Version: All version Category...

Shape Web Solutions CMS - SQL Injection

Shape Web Solutions CMS SQL Injection Vulnerability Exploit Title: Shape Web Solutions CMS SQL Injection Vulnerability Author: Ashiyane Digital Security Team Date: 03-18-2011 Vendor or Software Link: http://www.shapeweb.com.br/ Version: All version Category:: webapps Google dork:...

Barracuda Networks Hacking via SQL Injection !

Barracuda Networks Hacking via SQL Injection ! Barracuda Networks Inc. combines premises-based gateways and software, virtual appliances, cloud services, and sophisticated remote support to deliver comprehensive content security, data protection and application delivery solutions. The company's...

RSA Hack Yields SecurID Secrets

RSA Security, a division of EMC Corp. has admitted that it was the victim of a sophisticated attack that resulted in the theft of secrets related to its SecurID two-factor authentication product. The disclosure came in a blog post by RSA chief Art Coviello on Thursday. Coviello said that the...

Shape Web Solutions CMS SQL Injection

Shape Web Solutions CMS SQL Injection Vulnerability Exploit Title: Shape Web Solutions CMS SQL Injection Vulnerability Arrow Credit : Ashiyane Digital Security Team Date: 03-18-2011 Author: HashoR Vendor or Software Link: http://www.shapeweb.com.br/ Version: All version Category:: webapps Google...

W78CMS v2. 7. 6 search type injection problems and repair solutions-vulnerability warning-the black bar safety net

Brief description: W78CMS enterprise website management system v2. 7. 6 UTF-8 the presence of search-type injection problems Detailed description: File so. asp 2 2 row % t=request. QueryString"t" key=request. QueryString"key" if t="" then Response. Write"scriptalert'please select to search the...

Portal Networks - Internet Based Solutions CMS Multiple Vulnerabilities

Exploit for php platform in category web applications Web : http://www.portalnetworks.com.mx/ Found by: p0pc0rn 01/03/2011 Dork : intext:"Powered by: Portal Networks - Internet Based Solutions" asp SQL --- http://site.com/buscar.asp?linea=SQL http://site.com/buscar.asp?q=SQL...

CVE-2011-1007

Best Practical Solutions RT before 3.8.9 does not perform certain redirect actions upon a login, which allows physically proximate attackers to obtain credentials by resubmitting the login form via the back button of a web browser on an unattended workstation after an RT logout...

CVE-2011-1008

ScripsOverlay.pm in Best Practical Solutions RT before 3.8.9 does not properly restrict access to a TicketObj in a Scrip after a CurrentUser change, which allows remote authenticated users to obtain sensitive information via unspecified vectors, as demonstrated by custom-field value information,...

CVE-2011-1008

ScripsOverlay.pm in Best Practical Solutions RT before 3.8.9 does not properly restrict access to a TicketObj in a Scrip after a CurrentUser change, which allows remote authenticated users to obtain sensitive information via unspecified vectors, as demonstrated by custom-field value information,...

Design/Logic Flaw

ScripsOverlay.pm in Best Practical Solutions RT before 3.8.9 does not properly restrict access to a TicketObj in a Scrip after a CurrentUser change, which allows remote authenticated users to obtain sensitive information via unspecified vectors, as demonstrated by custom-field value information,...

CVE-2011-1007

Best Practical Solutions RT before 3.8.9 does not perform certain redirect actions upon a login, which allows physically proximate attackers to obtain credentials by resubmitting the login form via the back button of a web browser on an unattended workstation after an RT logout...

CVE-2011-1008

The CVE-2011-1008 entry concerns Best Practical Solutions’ Request Tracker (RT) prior to 3.8.9. A vulnerability in Scrips_Overlay.pm allows remote authenticated users to access sensitive information from a TicketObj after a CurrentUser change, with evidence of exposure via custom-field data tied ...

Teme Technical Solutions CMS SQL Injection Vulnerability

Exploit for asp platform in category web applications Web : http://www.temetechsolutions.co.uk Dork : intext:"powered by Teme Technical Solutions " SQL --- Parameter index.asp?pageId=SQL POC --- http://site.com?index.asp?pageId=22' 0day.today 2018-02-16...

Site Designed by Hypersoft Solutions SQL Injection Vulnerability

Exploit for asp platform in category web applications Web : http://www.hypersoftsolutions.com/ Filetype : asp Dork : intext:"By: HypersoftSolutions.Com" : inurl :"cms.asp?LinkId=" SQL --- http://site.com/cms.asp?LinkId=SQL http://site.com/cms.asp?CatId=SQL POC --- http://site.com/cms.asp?LinkId=1...