CVE-2010-5022

CVE-2010-5022 affects Joomla! with the JExtensions JE Story Submit (com_jesubmit) component version 1.4. The vulnerability is an SQL injection in the view parameter to index.php, enabling remote attackers to execute arbitrary SQL commands. This is supported by multiple sources (NVD, Red Hat, CVE ...

CVE-2010-5022: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JExtensions JE Story Submit comjesubmit component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the view parameter to index.php...

x10 Adult Media Script - Persistent Web Vulnerabilities

Document Title: =============== x10 Adult Media Script - Persistent Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=301 Release Date: ============= 2011-10-31 Vulnerability Laboratory ID VL-ID: ==================================== 301...

MyBB Forum Userbar Plugin (Userbar v2.2) SQL Injection

No description provided by source. --------------------------------------------------------------------- Exploit Title : MyBB Forum Userbar Plugin Userbar v2.2 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ :...

eWebeditoR3. 8 for php arbitrary file upload EXP-vulnerability warning-the black bar safety net

! titleeWebeditoR3. 8 for php any file on the EXP/title form action="" method=post enctype="multipart/form-data" INPUT TYPE="hidden" name="MAXFILESIZE" value="5 1 2 0 0 0" A href="http://hi.baidu.com/fc/editor/input"URL:input type=text name=url value="" size=1 0 0br INPUT TYPE="hidden"...

Joomla Component JE K2 Story Submit Local File Inclusion Vulnerability

No description provided by source. ! /usr/bin/perl -w Joomla Component JE Story Submit Local File Inclusion Vulnerability Author : v3n0m Date : July, 21-2011 GMT +7:00 Jakarta, Indonesia Software : JE Story Submit Vendor : http://joomlaextensions.co.in/ License : GPLv2 or later Tested On: Joomla...

Joomla Component JE K2 Story Submit Local File Inclusion Vulnerability

Exploit for php platform in category web applications ! /usr/bin/perl -w Joomla Component JE Story Submit Local File Inclusion Vulnerability Author : v3n0m Date : July, 21-2011 GMT +7:00 Jakarta, Indonesia Software : JE Story Submit Vendor : http://joomlaextensions.co.in/ License : GPLv2 or later...

Joomla! Component JE Story Submit - Local File Inclusion

!/usr/bin/perl -w Joomla Component JE Story Submit Local File Inclusion Vulnerability Author : v3n0m Date : July, 21-2011 GMT +7:00 Jakarta, Indonesia Software : JE Story Submit Vendor : http://joomlaextensions.co.in/ License : GPLv2 or later Tested On: Joomla 1.5.x irc.yogyacarderlink.web.id -...

Joomla! Component JE Story Submit - Local File Inclusion

Joomla! Component JE Story Submit - Local File Inclusion ! /usr/bin/perl -w Joomla Component JE Story Submit Local File Inclusion Vulnerability Author : v3n0m Date : July, 21-2011 GMT +7:00 Jakarta, Indonesia Software : JE Story Submit Vendor : http://joomlaextensions.co.in/ License : GPLv2 or...

Joomla JE K2 Story Submit Local File Inclusion

! /usr/bin/perl -w Joomla Component JE Story Submit Local File Inclusion Vulnerability Author : v3n0m Date : July, 21-2011 GMT +7:00 Jakarta, Indonesia Software : JE Story Submit Vendor : http://joomlaextensions.co.in/ License : GPLv2 or later Tested On: Joomla 1.5.x irc.yogyacarderlink.web.id -...

GuppY 4.6.14 Cross Site Request Forgery

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Unfixed XSS vulnerability at www.lovesite.se

Security researcher alexfoo, has submitted on 18/01/2011 a cross-site-scripting XSS vulnerability affecting www.lovesite.se, which at the time of submission ranked 2551712 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/11/2011. It is...

mediawiki -- Clickjacking vulnerabilities

Clickjacking vulnerabilities: Clickjacking is a type of vulnerability discovered in 2008, which is similar to CSRF. The attack involves displaying the target webpage in a iframe embedded in a malicious website. Using CSS, the submit button of the form on the targeit webpage is made invisible, and...

PHP Web Scripts Ad Manager Pro 3.0 - SQL Injection

PHP Web Scripts Ad Manager Pro 3.0 - SQL Injection Vendor or Software Link: http://www.phpwebscripts.com/admanagerpro/ Category:WebApp Version: 3 Price: $99/$130/$325 USD Contact: [email protected] Website: www.1337db.com Greetings to: R0073r1337db.com, L0rd CrusAd3r,Sid3^effects and to rest of th...

plugin: enable QUEUE_ALL_USERS_TRUSTED for Submit/Hold/Release/Remove ops

The installation documentation for Red Hat Enterprise Messaging, Realtime and Grid MRG 1.3 recommends that Condor should be configured so that the MRG Management Console cumin can submit jobs for users, which creates a trusted channel with insufficient access control that allows local users with...

plugin: enable QUEUE_ALL_USERS_TRUSTED for Submit/Hold/Release/Remove ops

The installation documentation for Red Hat Enterprise Messaging, Realtime and Grid MRG 1.3 recommends that Condor should be configured so that the MRG Management Console cumin can submit jobs for users, which creates a trusted channel with insufficient access control that allows local users with...

ecshop v2. 7 2 demo/index. php file getshell vulnerabilities-vulnerability warning-the black bar safety net

//------------------------------------------------------------- Release date: 2010-11. 2 6 Publishing author: xhming Affected version: ecshop v2. 7 2 Official address: Vulnerability type: code execution Vulnerability description: Vulnerability analysis: demo/index.php if ! empty$POST'lang'...

kernel: io_submit_one() NULL ptr deref

The iosubmitone function in fs/aio.c in the Linux kernel before 2.6.23 allows local users to cause a denial of service NULL pointer dereference via a crafted iosubmit system call with an IOCBFLAGRESFD flag...

PT-2010-4523 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.23 Description: The issue allows local users to cause a denial of service due to a NULL pointer dereference. This can be achieved by using a crafted io submit system call with an IOCB FLAG RESFD flag...

Dmx Ready v2 lite Database Disclosure Exploit

Exploit for perl platform in category web applications ============================================= Dmx Ready v2 lite Database Disclosure Exploit ============================================= !/usr/bin/perl -w Dmx Ready v2 lite Database Disclosure Exploit Found & Coded: indoushka Date: 25/07/201...