Zen Time Tracking 2.2 Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/38153/info Zen Time Tracking is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker...

Joomla TimeTrack Component 1.2.4 - Component Multiple SQL Injection Vulnerabilities

No description provided by source. TimeTrack 1.2.4 Joomla Component Multiple SQL Injection Vulnerabilities Name TimeTrack Vendor http://www.itrn.de Versions Affected 1.2.4 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date...

netOffice Dwins <= 1.4p3 SQL Injection Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ posdubatgmail.com 2012-11-08 netOffice Dwins = 1.4p3 SQL Injection Vulnerability Script: netOffice Dwins is a free w...

Sillaj time tracking tool Authentication Bypass

No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Sillaj Authentication Bypass Vendor url:http://sillaj.sourceforge.net/ Version:1 Published: 2010-07-11 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat, Sai, KD, M4n0j...

NSA can eavesdrop traffic in Real Time, more PRISM slides leaked

The NSA surveillance program PRISM story was started with four leaked slides from the Washington Post weeks before and today they has revealed four more annotated slides about the NSA operation, along with detailing the various levels of scrutiny from the FBI and NSA that happen before, during an...

netOffice Dwins <= 1.4p3 SQL Injection Vulnerability

Exploit for php platform in category web applications Discovered by dun \ posdubatgmail.com 2012-11-08 netOffice Dwins openWorkHours$tmpquery; //5 SQL ..cut.. users/exportuser.php?id=-1 union select 0,0,0,0,0,1,1,1,0,1,1,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0-- File:...

NetOffice Dwins 1.4p3 - SQL Injection

NetOffice Dwins 1.4p3 - SQL Injection :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com 2012-11-08 netOffice Dwins openWorkHours$tmpquery; //5 SQL ..cut...

TimeLive Detection (HTTP)

HTTP based detection of TimeLive. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.902480";...

todoyu Detection

This host is running todoyu, a free - open source project management and task management, time tracking and team collaboration software. OpenVAS Vulnerability Test $Id: gbtodoyudetect.nasl 5751 2017-03-28 14:37:16Z cfi $ todoyu Detection Authors: Michael Meyer Copyright: Copyright c 2011 Greenbon...

Sillaj Time Tracking Tool SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Sillaj Authentication Bypass Vendor url:http://sillaj.sourceforge.net/ Version:1 Published: 2010-07-11 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat, Sai, KD, M4n0j. Special Greetz: Topsecure.net, inj3ct...

Sillaj time tracking tool - Authentication Bypass

Sillaj time tracking tool - Authentication Bypass Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Sillaj Authentication Bypass Vendor url:http://sillaj.sourceforge.net/ Version:1 Published: 2010-07-11 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat, Sai...

Sillaj time tracking tool Authentication Bypass

Exploit for php platform in category web applications =============================================== Sillaj time tracking tool Authentication Bypass =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 ...

Sillaj time tracking tool - Authentication Bypass

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Sillaj Authentication Bypass Vendor url:http://sillaj.sourceforge.net/ Version:1 Published: 2010-07-11 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat, Sai, KD, M4n0j. Special Greetz: Topsecure.net, inj3ct...

FreeBSD : bugzilla -- information disclosure (f1331504-8849-11df-89b8-00151735203a)

A Bugzilla Security Advisory reports : - Normally, information about time-tracking estimated hours, actual hours, hours worked, and deadlines is restricted to users in the 'time-tracking group'. However, any user was able, by crafting their own search URL, to search for bugs based using those...

Bugzilla 'time-tracking' Information Disclosure Vulnerability

Bugzilla is prone to an information-disclosure vulnerability. Exploits may allow attackers to obtain potentially sensitive information that may aid in other attacks. This issue affects the following: Bugzilla 2.17.1 through 3.2.6 Bugzilla 3.3.1 through 3.4.6 Bugzilla 3.5.1 through 3.6 Bugzilla 3....

Bugzilla 'time-tracking' Information Disclosure Vulnerability

Bugzilla is prone to an information disclosure vulnerability. Exploits may allow attackers to obtain potentially sensitive information that may aid in other attacks. This issue affects the following: Bugzilla 2.17.1 through 3.2.6, Bugzilla 3.3.1 through 3.4.6, Bugzilla 3.5.1 through 3.6, Bugzilla...

Bugzilla 'time-tracking' fields Information Disclosure

The version of Bugzilla hosted on the remote web server allows an unauthenticated, remote attacker to execute a boolean chart search using time tracking fields such as 'estimatedtime', 'remainingtime' 'worktime' 'actualtime', 'percentagecomplete' or 'deadline' even though the attacker is not part...

CVE-2010-1204

Search.pm in Bugzilla 2.17.1 through 3.2.6, 3.3.1 through 3.4.6, 3.5.1 through 3.6, and 3.7 allows remote attackers to obtain potentially sensitive time-tracking information via a crafted search URL, related to a "boolean chart search."...

CVE-2010-1204

Search.pm in Bugzilla 2.17.1 through 3.2.6, 3.3.1 through 3.4.6, 3.5.1 through 3.6, and 3.7 allows remote attackers to obtain potentially sensitive time-tracking information via a crafted search URL, related to a "boolean chart search."...

Design/Logic Flaw

Search.pm in Bugzilla 2.17.1 through 3.2.6, 3.3.1 through 3.4.6, 3.5.1 through 3.6, and 3.7 allows remote attackers to obtain potentially sensitive time-tracking information via a crafted search URL, related to a "boolean chart search."...