5314 matches found
Widget Property Vuln.
Widget Property Vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/widget-property-vuln.html vendor:http://www.widgetpress.com/products?product=wp affected version:1.1.19 and Easy,CSV,Lite versions. Product Description: Easily manage all your...
Web4Future Portal Solutions - News Portal vuln.
Web4Future Portal Solutions - News Portal vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/web4future-portal-solutions-news.html vendor:http://www.web4future.com/products.php?p=nportal affected version: latest Product Description: It's a...
Hot Links Pro 3.x XSS vuln.
Hot Links Pro 3.x XSS vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/hot-links-pro-3x-xss-vuln.html vendor:http://www.mrcgiguy.com/hl3details.shtml affected version:3.x and prior Product Description: Directory style index allows for easy...
Blog System v1.2 SQL inj. vuln.
Blog System v1.2 SQL inj. vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/blog-system-v12-sql-inj-vuln.html vendor:http://www.netartmedia.net/blogsystem/ affected version:v1.2 and prior Product Description: Blog System allows you to launch and...
Amazon Search Directory XSS vuln.
Amazon Search Directory XSS vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/amazon-search-directory-xss-vuln.html vendor:http://www.mrcgiguy.com/amazondetails.shtml affected version:v.1.0.0 and prior Product Description: Very easy to set up an...
1- Search XSS vuln.
1- Search XSS vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/1-search-xss-vuln.html vendor:http://www.1-script.com/1search/ affected version:1.80 and prior Product Description: An advanced site search script written with search engines...
CVE-2004-2636
CVE-2004-2636 affects TinyWeb 1.9, where remote attackers can read the source code of scripts by using a URL containing "/./". The NVD entry shows a base score of 5.0 (Medium) with network access and low complexity, and partial confidentiality impact. Connected sources also corroborate the vulner...
CVE-2004-2636
TinyWeb 1.9 allows remote attackers to read source code of scripts via "/./" in the URL...
ASPS Shopping Cart Professional and Lite XSS vuln
ASPS Shopping Cart Professional and Lite XSS vuln Vuln. dicovered by : r0t Date: 3 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/asps-shopping-cart-professional-and.html Vendor:http://www.aspsolutions.com.au/ affected version: ASPS Shopping Cart Professional 2.9d and prior ASPS...
QualityPPC XSS vuln.
QualityPPC XSS vuln. Vuln. dicovered by : r0t Date: 1 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/qualityppc-xss-vuln.html Vendor:http://www.qualityebiz.com/main/qppc.php affected version:1553 and prior Product Description: QualityPPC has the latest technology which offers you...
Free ClickBank Search Engine SQL inj. vuln.
Free ClickBank Search Engine SQL inj. vuln. Vuln. dicovered by : r0t Date: 1 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/free-clickbank-search-engine-sql-inj.html Vendor:http://phpfreebies.com/free-clickbank-search-engine-script.php affected version:1.0 and prior Product...
Confluence – the Enterprise Wiki, XSS vuln.
Confluence – the Enterprise Wiki, XSS vuln. Vuln. dicovered by : r0t Date: 2 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/confluence-enterprise-wiki-xss-vuln.html Vendor:http://www.atlassian.com/software/confluence/ affected version: 2.0.1 Build:321 Nov 28, 2005 Product...
NetClassifieds all versions SQL inj. vuln
NetClassifieds all versions SQL inj. vuln Vuln. dicovered by : r0t Date: 1 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/netclassifieds-all-versions-sql-inj.html Vendor:http://scriptdevelopers.net/ affected version: NetClassifieds Premium Edition 1.0.1 NetClassifieds Professional...
Lore SQL inj. vuln.
Lore SQL inj. vuln. Vuln. dicovered by : r0t Date: 1 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/lore-sql-inj-vuln.html Vendor:http://www.pineappletechnologies.com/products/lore/ affected version: Tested on 1.5.4 Product Description: Lore is a professional knowledge base...
AngelShell: let all the forward program to achieve the reverse connection application papers-the vulnerability warning-the black bar safety net
Nowserviceis almost entirely put in a hardware firewall, hard to penetrate, only to find that with a hardware Firewall, the party pooper! What TerminalService, what Radmin and the like in a controlled manner do not even think. Tried, found that almost all support reverse connection, the forward...
gmailbug.txt
Gmail Bug - INTRODUCTION This bug has already been corrected, that's why it's been published. In this manual you will see step by step how to exploit Gmail's vulnerability, that gave you access to any account, reported by Anelkaos, colaborator of elhacker.net's forum and patched by Google by...
Have to say by the campus network see Network Security status-vulnerability warning-the black bar safety net
Preface originally really do not want to write this article, but really can not let people endure. Did not expect the school campus network security situation is actually so bad, one of the most impressive Willy-nilly. Or administrator of quality and safety awareness. Status of the recall a year...
phpWTF Full Path Disclosure vuln.
phpWTF Full Path Disclosure vuln. Vuln. dicovered by : r0t Date: 29 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/phpwtf-full-path-disclosure-vuln.html Vendor:http://retran.com/phpWTF/ affected version:v0.2.3 and prior Product Description: The phpWTF project: when you don't know...
KBase Express SQL inj. vuln.
KBase Express SQL inj. vuln. Vuln. dicovered by : r0t Date: 29 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/kbase-express-sql-inj-vuln.html Vendor:http://www.sensationdesigns.com/products/scripts/kbaseexpress/ affected version: 1.0.0 and prior Product Description: KBase Express ...
SocketKB 1.1.x Vuln.
SocketKB 1.1.x Vuln. Vuln. dicovered by : r0t Date: 29 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/socketkb-11x-vuln.html Vendor:http://www.socketkb.com affected version: 1.1.0 and prior 1. Input passed to the "node" and "artid" parameter isn't properly sanitised before being...