Secunia Research: glpng PNG Processing Two Integer Overflow Vulnerabilities

====================================================================== Secunia Research 11/08/2010 - glpng PNG Processing Two Integer Overflow Vulnerabilities - ====================================================================== Table of Contents Affected...

PHPCMS all versions of a page cross-site scripting vulnerability-vulnerability warning-the black bar safety net

Two versions 1, Official demo page for the url xss. 2, official the Master Station of the error reporting page,$info'errorlink'to go from the referer,change the referer to insert arbitrary code. Little harm, the vulnerability level is low. Test code: POC1:...

CBS Solutions Remote Sql Injection Exploit

Exploit for php platform in category web applications ========================================== CBS Solutions Remote Sql Injection Exploit ========================================== Title : CBS Solutions exploit script:CBS Solutions Date : 28/07/2010 Author : Storm - North Strom Team My Home:...

XSS vulnerability in Theeta CMS

Vulnerability ID: HTB22488 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityintheetacms1.html Product: Theeta CMS Vendor: MN Tech Solutions http://www.mntechsolutions.net/ Vulnerable Version: 0.0 Vendor Notification: 12 July 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not...

Theeta CMS Cross Site Scripting / SQL Injection

Vulnerability ID: HTB22487 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityintheetacms.html Product: Theeta CMS Vendor: MN Tech Solutions http://www.mntechsolutions.net/ Vulnerable Version: 0.0 Vendor Notification: 12 July 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not...

XSS vulnerability in Theeta CMS

Vulnerability ID: HTB22489 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityintheetacms2.html Product: Theeta CMS Vendor: MN Tech Solutions Vulnerable Version: 0.0 Vendor Notification: 12 July 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor Alerted, Awaiting...

SQL injection vulnerability in Theeta CMS

Vulnerability ID: HTB22490 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityintheetacms.html Product: Theeta CMS Vendor: MN Tech Solutions http://www.mntechsolutions.net/ Vulnerable Version: 0.0 Vendor Notification: 12 July 2010 Vulnerability Type: SQL Injection Status: Not...

Powered by Arcs Solutions Auth Bypass Admin

Exploit for php platform in category web applications =========================================== Powered by Arcs Solutions Auth Bypass Admin =========================================== ======================================================================== | Title : Powered by Arcs Solutions Au...

XSS vulnerability in Theeta CMS

Vulnerability ID: HTB22487 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityintheetacms.html Product: Theeta CMS Vendor: MN Tech Solutions http://www.mntechsolutions.net/ Vulnerable Version: 0.0 Vendor Notification: 12 July 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not...

CVE-2009-4947

SQL injection vulnerability in frmLoginPwdReminderPopup.aspx in Q2 Solutions ConnX 4.0.20080606 allows remote attackers to execute arbitrary SQL commands via the txtEmail parameter...

Sql injection

SQL injection vulnerability in frmLoginPwdReminderPopup.aspx in Q2 Solutions ConnX 4.0.20080606 allows remote attackers to execute arbitrary SQL commands via the txtEmail parameter...

CVE-2009-4947

SQL injection vulnerability in frmLoginPwdReminderPopup.aspx in Q2 Solutions ConnX 4.0.20080606 allows remote attackers to execute arbitrary SQL commands via the txtEmail parameter...

CVE-2009-4947

The CVE-2009-4947 entry details a SQL injection in the web form FrmLoginPwdReminderPopup.aspx of Q2 Solutions ConnX 4.0.20080606, exploitable via the txtEmail parameter. The root cause is improper input handling leading to arbitrary SQL execution, with the impact described as remote arbitrary com...

Enable Web Sudo to work with other single-sign-on solutions

Customers with some of the unsupported single sign-on solutions|http://confluence.atlassian.com/display/DEV/Single+Sign-on+Integration+with+JIRA+and+Confluence can't easily upgrade to Confluence 3.3 because WebSudo doesn't handle external SSO solutions. See this example:...

CVE-2010-2403

Unspecified vulnerability in the PeopleSoft Enterprise Campus Solutions component in Oracle PeopleSoft and JDEdwards Suite Campus Solutions 9.0 Bundle 17 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2010-2403

Unspecified vulnerability in the PeopleSoft Enterprise Campus Solutions component in Oracle PeopleSoft and JDEdwards Suite Campus Solutions 9.0 Bundle 17 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2010-2403

CVE-2010-2403 is tied to PeopleSoft Enterprise Campus Solutions 9.0 Bundle #17. The connected records specify an unspecified vulnerability affecting confidentiality that can be exploited by remote authenticated users, with unknown vectors. The documents do not provide exploit details, affected co...

MolyX Forum system SQL injection defects, and source code disclosure vulnerability-vulnerability warning-the black bar safety net

Magic ForumMolyX Board is a magic series of Web application software products one of the by the magic StudioMolyX Studios after several years of market, technical research and study, in the fusion of the current many Forum program technical and practical advantages on the basis for Chinese People...

Cosmos Solutions CMS Cross Site Scripting / SQL Injection

======================================================================= Cosmos Solutions cms SQL/XSS/HTML InjecTion Multiple Vulnerabilities ======================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...

Cosmos Solutions CMS SQL Injection

=============================================== Cosmos Solutions cms SQL Injection Vulnerability =============================================== .----..--.--.| |--..-----..----.| |.-----..-----. | || | || || -|| || || || | ||| ||||||| ||||| | || || Cosmos Solutions cms SQL Injection Vulnerability...