FlexCMS 3.2.1 Cross Site Request Forgery

+---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : FlexCMS 3.2.1 Multiple CSRF Date : 16-03-2012 Author : Ivano Binetti http://www.ivanobinetti.com Software link :...

FlexCMS 3.2.1 Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications +---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : FlexCMS 3.2.1 Multiple CSRF Date : 16-03-2012 Author : Ivano Binetti...

FlexCMS 3.2.1 - Multiple Cross-Site Request Forgery Vulnerabilities

+---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : FlexCMS 3.2.1 Multiple CSRF Date : 16-03-2012 Author : Ivano Binetti http://www.ivanobinetti.com Software link :...

Debian Security Advisory DSA 2422-1 (file)

The remote host is missing an update to file announced via advisory DSA 2422-1. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Debian Security Advisory DSA 2414-2 (fex)

The remote host is missing an update to fex announced via advisory DSA 2414-2. OpenVAS Vulnerability Test $Id: deb24142.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2414-2 fex Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian Security Advisory DSA 2412-1 (libvorbis)

The remote host is missing an update to libvorbis announced via advisory DSA 2412-1. OpenVAS Vulnerability Test $Id: deb24121.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2412-1 libvorbis Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian DSA-2428-1 : freetype - several vulnerabilities

Mateusz Jurczyk from the Google Security Team discovered several vulnerabilities in Freetype's parsing of BDF, Type1 and TrueType fonts, which could result in the execution of arbitrary code if a malformed font file is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

Drupal 7.12 - Multiple Vulnerabilities

+---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Drupal CMS 7.12 latest stable release Multiple Vulnerabilities Date : 02-03-2012 Author : Ivano Binetti http://ivanobinetti.com...

WebfolioCMS 1.1.4 - Cross-Site Request Forgery (Add Admin/Modify Pages)

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : WebfolioCMS = 1.1.4 CSRF Add Admin/Modify Pages Date : 28-02-2012 Author : Ivano Binetti http://ivanobinetti.com Software link :...

WebfolioCMS <= 1.1.4 CSRF (Add Admin/Modify Pages)

Exploit for php platform in category web applications +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : WebfolioCMS = 1.1.4 CSRF Add Admin/Modify Pages Date : 28-02-2012 Author : Ivano Binetti...

[SECURITY] [DSA 2414-2] fex regression

------------------------------------------------------------------------- Debian Security Advisory DSA-2414-2 [email protected] http://www.debian.org/security/ Nico Golde February 25, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2416-1] notmuch security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2416-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst February 22, 2012 http://www.debian.org/security/faq -...

Debian DSA-2414-2 : fex - insufficient input sanitization

Nicola Fioravanti discovered that FX, a web service for transferring very large files, is not properly sanitizing input parameters of the 'fup'script. An attacker can use this flaw to conduct reflected cross-site scripting attacks via various script parameters. %NASLMINLEVEL 70300 C Tenable Netwo...

SyndeoCMS <= 3.0 CSRF flaws and fixes-vulnerability warning-the black bar safety net

Title: SyndeoCMS = 3.0 CSRF Vulnerability Author: Ivano Binetti http://ivanobinetti.com Program development website: http://www.syndeocms.org/ Download address: http://sourceforge.net/projects/syndeocms Affected version: 3.0 and below Test System Platform: Debian Squeeze 6.0 +--------------+Add...

DSA-2414-1 fex - cross-site scripting

Bulletin has no description...

Plume CMS 1.2.4 - Cross-Site Request Forgery

Plume CMS 1.2.4 - Cross-Site Request Forgery +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : PlumeCMS CSRF Exploit to add and publish News input type="hidden" name="ncategoryid"...

PlumeCMS <= 1.2.4 CSRF Vulnerability

Exploit for php platform in category web applications +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : PlumeCMS CSRF Exploit to add and publish News input type="hidden"...

Plume CMS 1.2.4 - Cross-Site Request Forgery

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : PlumeCMS CSRF Exploit to add and publish News inp...

PlumeCMS 1.2.4 Cross Site Request Forgery

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : PlumeCMS CSRF Exploit to add and publish News input type="hidden" n...

SyndeoCMS 3.0 - Cross-Site Request Forgery

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : SyndeoCMS I'm adding ADMIN account input type="hidden" name="access3...