PT-2012-3403

Name of the Vulnerable Software and Affected Versions Drupal Commerce module for Drupal versions prior to 7.x-1.2 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote authenticated users to inject arbitrary web script or HTML via the...

CVE-2012-1639: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in product/commerceproduct.module in the Drupal Commerce module for Drupal before 7.x-1.2 allow remote authenticated users to inject arbitrary web script or HTML via the 1 sku or 2 title parameters...

Dream Ecommerce SQL Injection

Exploit Title: dreamecommerce sql injection Vulnerability Google Dork: inurl:board/sview.php?boardname= Date: 09/28/2012 Author: Crim3R download Link Or Vendor Home: http://dreamecommerce.net/ Tested on: all ================================== boardname parametr is injectable D3M0 :...

Trend Micro Control Manager 5.5/6.0 AdHocQuery BlindSQL Injection (post-auth)

Exploit for asp platform in category web applications !/usr/bin/env python Exploit Title: Trend Micro Control Manager 5.5/6.0 AdHocQuery BlindSQL Injection post-auth Disclosure Date: 09/27/2012 Author: otoy @otoyrood & modpr0be @modpr0be Contact: researchatspentera.com Platform: Windows Tested on...

PT-2012-3410

Name of the Vulnerable Software and Affected Versions Drupal FAQ module versions 6.x-1.x before 6.x-1.13 Drupal FAQ module versions 7.x-1.x-rc1 Description The issue allows remote authenticated users to inject arbitrary web script or HTML. This is achieved via the title parameter in faq.admin.inc...

CVE-2012-1646: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the FAQ module 6.x-1.x before 6.x-1.13 and 7.x-1.x-rc1 for Drupal allow remote authenticated users to inject arbitrary web script or HTML via the 1 title parameter in faq.admin.inc or 2 detailedquestion parameter in faq.module...

Sino Solutions Cross Site Scripting

---------------------------------------------------------------- Sino solutions search.php Cross Site Scripting Vulnerabilities ---------------------------------------------------------------- Exploit Title : Sino solutions search.php Cross Site Scripting Vulnerabilities Author : Hack Center...

UBUNTU-CVE-2012-3742

Safari in Apple iOS before 6 does not properly restrict use of an unspecified Unicode character that looks similar to the https lock indicator, which allows remote attackers to spoof https connections by placing this character in the TITLE element of a web page...

Code injection

Safari in Apple iOS before 6 does not properly restrict use of an unspecified Unicode character that looks similar to the https lock indicator, which allows remote attackers to spoof https connections by placing this character in the TITLE element of a web page...

PT-2012-4982

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 6 Description The issue concerns the Safari browser in Apple iOS, where it fails to properly restrict the use of a specific Unicode character that resembles the https lock indicator. This allows remote attackers to...

Jessica Rhaye Design Cross Site Scripting

---------------------------------------------------------------- Jessica Rhaye Design = Cross Site Scripting Vulnerabilities ---------------------------------------------------------------- Exploit Title : Jessica Rhaye Design = Cross Site Scripting VulnerabilitieS Author : Hack Center Security...

CVE-2012-3742: Undefined Security Weakness

Safari in Apple iOS before 6 does not properly restrict use of an unspecified Unicode character that looks similar to the https lock indicator, which allows remote attackers to spoof https connections by placing this character in the TITLE element of a web page...

CVE-2012-1640

Multiple cross-site scripting XSS vulnerabilities in the Managesite module 6.x-1.x before 6.1-1.1 for Drupal allow remote authenticated users with "administer managesite" permissions to inject arbitrary web script or HTML via the title parameter when 1 adding or 2 updating a category...

PT-2012-3404

Name of the Vulnerable Software and Affected Versions Drupal Managesite module versions 6.x-1.x before 6.1-1.1 Description The issue allows remote authenticated users with administer managesite permissions to inject arbitrary web script or HTML via the title parameter when adding or updating a...

CVE-2012-1640: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Managesite module 6.x-1.x before 6.1-1.1 for Drupal allow remote authenticated users with "administer managesite" permissions to inject arbitrary web script or HTML via the title parameter when 1 adding or 2 updating a category...

CVE-2012-1654

Multiple cross-site scripting XSS vulnerabilities in the Data module 6.x-1.x before 6.x-1.0 and 7.x-1.x before 7.x-1.0-alpha3 for Drupal allow remote authenticated users with the administer data tables permission to inject arbitrary web script or HTML via the title parameter in 1 data.views.inc a...

PT-2012-3418

Name of the Vulnerable Software and Affected Versions Data module versions prior to 6.x-1.0 Data module versions prior to 7.x-1.0-alpha3 Description The issue allows remote authenticated users with the administer data tables permission to inject arbitrary web script or HTML. This is achieved via...

CVE-2012-1654: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Data module 6.x-1.x before 6.x-1.0 and 7.x-1.x before 7.x-1.0-alpha3 for Drupal allow remote authenticated users with the administer data tables permission to inject arbitrary web script or HTML via the title parameter in 1 data.views.inc a...

Bullseye Creative => SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Bullseye Creative = SQL injection Vulnerability Author: RaMeZ Libyan Darkness Storm - LDS Google dork : intext:powered by: Bullseye Creative "inurl:.php?id=" Date : 16-9-2012 Greets : LDS members poc: www.site.com/sick...

CVE-2011-5173

Buffer overflow in Bugbear Entertainment FlatOut 2005 allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string in the title field in a bed file...