major_rls53.txt

MajorSecurity Advisory 53BLUEPAGE CMS - Cross Site Scripting and Session Fixation Issues Details ======= Product: BLUEPAGE CMS Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.bluepage-cms.com/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered b...

Attachmax Dolphin <= 2.1.0 Multiple Remote Vulnerabilities

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV101$2008 ----------------------------------------------------------------------------------------- ECHOADV101$2008 Attachmax Dolphin = 2.1.0 Multiple Vulnerability...

Attachmax Dolphin <= 2.1.0 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== Attachmax Dolphin = 2.1.0 Multiple Remote Vulnerabilities ==========================================================...

Attachmax Dolphin 2.1.0 - Multiple Vulnerabilities

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV101$2008 ----------------------------------------------------------------------------------------- ECHOADV101$2008 Attachmax Dolphin = 2.1.0 Multiple Vulnerability...

Masir Camp E-Shop Module <= 3.0 (ordercode) SQL Injection Vuln

Exploit for unknown platform in category web applications ============================================================== Masir Camp E-Shop Module = 3.0 ordercode SQL Injection Vuln ============================================================== Title: Masir Camp E-Shop Module = 3.0 SQL Injection...

eWebEditorNet upload.aspx 上传漏洞

WebEditorNet 主要是一个upload.aspx文件存在上传漏洞。 form id="post" encType="server" "uploadfile" style="file" size="uploadfile" runat= "lbtnUpload" runat= "JavaScript" 只是简单的对ID进行验证,只要构造javascript:lbtnUpload.click;满足条件达到上传木马的效果。成功以后查看源代码 a "lbtnUpload" "javascript:doPostBack'lbtnUpload',''"/script 'javascript'...

Embedthis GoAhead < 2.1.8 Script Source Code Disclosure Vulnerability - Active Check

Embedthis GoAhead is prone to a script source code disclosure vulnerability. SPDX-FileCopyrightText: 2008 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Cross site scripting

The CQWeb login page in IBM Rational ClearQuest 7.0.1 allows remote attackers to obtain potentially sensitive information page source code via a combination of ?script? and ?/script? sequences in the id field, possibly related to a cross-site scripting XSS vulnerability...

igescms-multi.txt

www.BugReport.ir AmnPardaz Security Research Team Title: IGES CMS =2.0 Multiple Vulnerabilities Vendor: www.iges.nl Exploit: Available Vulnerable Version: 2.0 Impact: High Fix: N/A 1. Description: IGES CMS is a complete, fully featured CMS in PHP language with SQL and became a powerful CMS having...

iges CMS 2.0 - Cross-Site Scripting / SQL Injection

www.BugReport.ir AmnPardaz Security Research Team Title: IGES CMS =2.0 Multiple Vulnerabilities Vendor: www.iges.nl Exploit: Available Vulnerable Version: 2.0 Impact: High Fix: N/A 1. Description: IGES CMS is a complete, fully featured CMS in PHP language with SQL and became a powerful CMS having...

Web Trojan samples to obtain a simple process-vulnerability warning-the black bar safety net

| The morning our server is hanging Horse, the analysis of the next, by the step to write out! Share, nothing technical content, the master can skip! --- Yesterday evening found the Trojan to do a simple analysis, the Trojan path is! http://www. . com/ma/web.htm Think of a way to get its source...

MyBlog多个远程信息泄漏漏洞

BUGTRAQ ID: 30310 CNCAN ID：CNCAN-2008072204 MyBlog是一款基于PHP的博客程序。 MyBlog存在多个输入验证问题，远程攻击者可以利用漏洞获得敏感信息。...

Maran PHP Blog Xss By Khashayar Fereidani

---------------------------------------------------------------- Script : Maran PHP Blog Type : XSS Pasive Method : GET Alert : Medium ---------------------------------------------------------------- Discovered by : Khashayar Fereidani a.k.a. Dr.Crash My Offical Website : HTTP://FEREIDANI.IR...

myblog-multi.txt

www.BugReport.ir AmnPardaz Security Research Team Title: MyBlog =0.9.8 Multiple Vulnerabilities Vendor: http://crewdesign.co.uk & http://sourceforge.net/projects/myblog Exploit: Available Vulnerable Version: 0.9.8 Impact: High Fix: N/A Original Advisory: www.bugreport.ir/?/49 1. Description:...

maranphp-xss.txt

---------------------------------------------------------------- Script : Maran PHP Blog Type : XSS Pasive Method : GET Alert : Medium ---------------------------------------------------------------- Discovered by : Khashayar Fereidani a.k.a. Dr.Crash My Offical Website : HTTP://FEREIDANI.IR...

Format string

Format string vulnerability in c++filt in Apple Mac OS X 10.5 before 10.5.4 allows user-assisted attackers to execute arbitrary code or cause a denial of service application crash via a crafted string in 1 C++ or 2 Java source code...

CVE-2008-2310

Format string vulnerability in c++filt in Apple Mac OS X 10.5 before 10.5.4 allows user-assisted attackers to execute arbitrary code or cause a denial of service application crash via a crafted string in 1 C++ or 2 Java source code...

CVE-2008-2310

Format string vulnerability in c++filt in Apple Mac OS X 10.5 before 10.5.4 allows user-assisted attackers to execute arbitrary code or cause a denial of service application crash via a crafted string in 1 C++ or 2 Java source code...

CVE-2008-2310

Format string vulnerability in c++filt in Apple Mac OS X 10.5 before 10.5.4 allows user-assisted attackers to execute arbitrary code or cause a denial of service application crash via a crafted string in 1 C++ or 2 Java source code...

CVE-2008-2310

Format string vulnerability in c++filt in Apple Mac OS X 10.5 before 10.5.4 allows user-assisted attackers to execute arbitrary code or cause a denial of service application crash via a crafted string in 1 C++ or 2 Java source code...