Mantis manage_user_create.php CSRF New User Creation

The version of Mantis Bug Tracker installed on the remote host does not verify the validity of HTTP requests before performing various administrative actions. If a remote attacker can trick a logged-in administrator into viewing a specially crafted page, the vulnerability could be leveraged to...

Design/Logic Flaw

The menu system in Drupal 6 before 6.2 has incorrect menu settings, which allows remote attackers to 1 edit the profile pages of arbitrary users, and obtain sensitive information from 2 tracker and 3 blog pages, related to a missing check for the "access content" permission; and 4 allows remote...

unleashed-xss.txt

Hello all, There is a bug in "Log" function of Search Unleashed by John Godley, version 0.2.10. This plug-in stores search queries but does not validates stored data and put them back "raw" to browser. HTML and Java Script can be injected with search request:...

[Full-disclosure] The Everything Development System - SQL Injection

Application: The Everything Development System Versions: = Pre-1.0 current version at time of release Author: sub [email protected] Released: 2/1/2008 There exists a vulnerability in The Everything Development Engine that allows a user to inject their own SQL to modify a SELECT query, leading to...

The Everything Development System - SQL Injection

Application: The Everything Development System Versions: = Pre-1.0 current version at time of release Author: sub [email protected] Released: 2/1/2008 There exists a vulnerability in The Everything Development Engine that allows a user to inject their own SQL to modify a SELECT query, leading to...

The Everything Development System <= Pre-1.0 SQL Injection Vuln

No description provided by source. Application: The Everything Development System Versions: = Pre-1.0 current version at time of release Author: sub [email protected] Released: 2/1/2008 There exists a vulnerability in The Everything Development Engine that allows a user to inject their own SQL to...

The Everything Development System Pre-1.0 - SQL Injection

The Everything Development System Pre-1.0 - SQL Injection Application: The Everything Development System Versions: Released: 2/1/2008 There exists a vulnerability in The Everything Development Engine that allows a user to inject their own SQL to modify a SELECT query, leading to information...

The Everything Development System <= Pre-1.0 SQL Injection Vuln

Exploit for unknown platform in category web applications =============================================================== The Everything Development System = Pre-1.0 SQL Injection Vuln =============================================================== Application: The Everything Development System...

The Everything Development System Pre-1.0 - SQL Injection

Application: The Everything Development System Versions: Released: 2/1/2008 There exists a vulnerability in The Everything Development Engine that allows a user to inject their own SQL to modify a SELECT query, leading to information disclosure, XSS, or privilege escalation. What's more, password...

Mantis < 0.9.5 / 1.1.0 RC5 view.php HTML Injection

Binary data 4326.prm...

Joomla! Component com_search 1.5 RC3 - index.php Multiple SQL Injections

Joomla! Component comsearch 1.5 RC3 - index.php Multiple SQL Injections source: https://www.securityfocus.com/bid/26707/info Joomla! is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these...

SQL injection bug found in TBSource.

A vulnerability found in the popular bittorrent tracker TBSource code allows an attacker to inject SQL queries and read secret information from the database. The value of 'choice' passed to the script index.php is not properly sanitized. When a special tailored value is passed by an attacker, ful...

CVE-2007-5635

Multiple unspecified vulnerabilities in Salford Software Support Incident Tracker SiT! before 3.30 have unknown impact and attack vectors...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Salford Software Support Incident Tracker SiT! before 3.30 have unknown impact and attack vectors...

CVE-2007-5635

Multiple unspecified vulnerabilities in Salford Software Support Incident Tracker SiT! before 3.30 have unknown impact and attack vectors...

CVE-2007-5635: Undefined Security Weakness

Multiple unspecified vulnerabilities in Salford Software Support Incident Tracker SiT! before 3.30 have unknown impact and attack vectors...

[Aria-Security] Stuffed Tracker Multiple Cross-Site Scripting VULN

Aria-Security Team ---------------------- Vendor: http://stuffedguys.com/ POC: http://target/path/admin/campaignlink.html?GenCode=1&CampId=1&SplitId=&GLink=XSS http://target/PATH/actions.html?CpId=1&SiteId=1&Mode=new&EditId=XSS Credits Goes To Aria-Security Team Regards, The-0utl4w...

Stuffed Guys Stuffed Tracker - Multiple Cross-Site Scripting Vulnerabilities

Stuffed Guys Stuffed Tracker - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/25931/info Stuffed Tracker is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may...

Stuffed Guys Stuffed Tracker - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/25931/info Stuffed Tracker is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

Numerous XSS Type 2 vulnerabilities in macros bundled with Confluence

'd like to report critical vulnerabilities in 3 of your macros - Column, Image, Block and Code macros. The vulnerabilities are classified as XSS Type 2 stored and the details with example exploits are in the pdfs attached. Because of similarity of the vulnerabilities assume that it is more than...