2777 matches found
e107 version 0.7.19 XSRF vulnerability
Exploit for php platform in category web applications ====================================== e107 version 0.7.19 XSRF vulnerability ====================================== Product: e107 Website System Vendor: e107 Vulnerable Version: 0.7.19 and Probably Prior Versions Vendor Notification: 05 April...
e107 CMS 0.7.19 - Cross-Site Request Forgery
Vulnerability ID: HTB22344 Reference: http://www.htbridge.ch/advisory/xsrfcsrfine107.html Product: e107 Website System Vendor: e107 Vulnerable Version: 0.7.19 and Probably Prior Versions Vendor Notification: 05 April 2010 Vulnerability Type: CSRF Cross-Site Request Forgery Status: Not Fixed, Vend...
Multiple vulnerabilities in Zikula Application Framework
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Zikula Application Framework, which can be exploited to perform cross-site scripting XSS and cross-site request forgery CSRF attacks. 1 XSRF CSRF in Zikula Application Framework: CVE-2010-1732 The vulnerability...
Multiple vulnerabilities in AdaptCMS Lite
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in AdaptCMS Lite which could be exploited to perform cross-site request forgery and cross-site scripting attacks. 1 Cross-site request forgery CSRF in AdaptCMS Lite The vulnerability exists due to insufficient...
CVE-2010-0629
Use-after-free vulnerability in kadmin/server/serverstubs.c in kadmind in MIT Kerberos 5 aka krb5 1.5 through 1.6.3 allows remote authenticated users to cause a denial of service daemon crash via a request from a kadmin client that sends an invalid API version number...
quality point 1.0 newsfeed - SQL Injection Cross-Site Scripting
quality point 1.0 newsfeed - SQL Injection Cross-Site Scripting sEc-r1z crEw The Leaders for Penetration Testing In Middle East. +===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ ...
Friendly-Tech FriendlyTR69 CPE Remote Management V2.8.9 SQL Injection Vulnerability
========================================= Yaniv Miron aka "Lament" Advisory March 7, 2010 Friendly-Tech FriendlyTR69 CPE Remote Management V2.8.9 SQL Injection Vulnerability ========================================= ===================== I. BACKGROUND ===================== Based on the company’s...
Tech-ex v6. 5 CMS Oday-vulnerability warning-the black bar safety net
Background: writing website kesion directory such as http://localhost cookies: after login to grab the USER's COOKIES Account password: after registration you can log in as normal user name and password Code: the login code, grab the figure after the fill The operation,first enter the site,first...
Friendly-Tech FriendlyTR69 2.8.9 SQL Injection
========================================= Yaniv Miron aka "Lament" Advisory March 7, 2010 Friendly-Tech FriendlyTR69 CPE Remote Management V2.8.9 SQL Injection Vulnerability ========================================= ===================== I. BACKGROUND ===================== Based on the company’s...
Friendly-Tech FriendlyTR69 CPE Remote Management 2.8.9 - SQL Injection
========================================= Yaniv Miron aka "Lament" Advisory March 7, 2010 Friendly-Tech FriendlyTR69 CPE Remote Management V2.8.9 SQL Injection Vulnerability ========================================= ===================== I. BACKGROUND ===================== Based on the company’s...
Friendly-Tech FriendlyTR69 CPE Remote Management v2.8.9 SQL Injection
Exploit for unknown platform in category web applications =================================================================================== Friendly-Tech FriendlyTR69 CPE Remote Management v2.8.9 SQL Injection Vulnerability...
SBD Directory 4.0 (XSS) Cross Site Scripting Vulnerability
Exploit for unknown platform in category web applications ========================================================== SBD Directory 4.0 XSS Cross Site Scripting Vulnerability ==========================================================...
PHP Ask & Answer (XSS) Cross Site Scripting Vulnerability
Exploit for unknown platform in category web applications ========================================================= PHP Ask & Answer XSS Cross Site Scripting Vulnerability =========================================================...
Sql injection
SQL injection vulnerability in the IP-Tech JQuarks comjquarks Component 0.2.3, and possibly earlier, for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. NOTE: some of these details are obtained from third party information...
CVE-2010-0692
SQL injection vulnerability in the IP-Tech JQuarks comjquarks Component 0.2.3, and possibly earlier, for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. NOTE: some of these details are obtained from third party information...
CVE-2010-0692
SQL injection vulnerability in the IP-Tech JQuarks comjquarks Component 0.2.3, and possibly earlier, for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. NOTE: some of these details are obtained from third party information...
CVE-2010-0692
CVE-2010-0692 affects Joomla! component com_jquarks in IP-Tech JQuarks (version around 0.2.3). Description indicates an SQL injection via the id parameter to index.php, enabling remote command execution to some extent (as per sources). Connected documents corroborate a SQL injection vulnerability...
CVE-2010-0692: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the IP-Tech JQuarks comjquarks Component 0.2.3, and possibly earlier, for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. NOTE: some of these details are obtained from third party information...
Design/Logic Flaw
Unspecified vulnerability in the IP-Tech JQuarks comjquarks Component before 0.2.4 for Joomla! allows attackers to obtain the installation path for Joomla! via unknown vectors...