Edgephp ClickBank Affiliate Marketplace Script - Multiple Vulnerabilities

Edgephp ClickBank Affiliate Marketplace Script - Multiple Vulnerabilities Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Edgephp Clickbank Affiliate Marketplace Script Multiple Vulnerability Vendor url:http://www.edgephp.com Version:1 Published: 2010-07-11 Greetz to:r0073r...

Edgephp ClickBank Affiliate Marketplace Script - Multiple Vulnerabilities

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Edgephp Clickbank Affiliate Marketplace Script Multiple Vulnerability Vendor url:http://www.edgephp.com Version:1 Published: 2010-07-11 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat, Sai, KD, M4n0j...

My Kazaam Notes Management System - Multiple Vulnerabilities

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: My Kazaam Notes Management System Multiple Vulnerability Vendor url:http://www.mykazaam.com Version:1 Published: 2010-07-11 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat, Sai, KD, M4n0j. Special Greetz:...

Sillaj time tracking tool - Authentication Bypass

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Sillaj Authentication Bypass Vendor url:http://sillaj.sourceforge.net/ Version:1 Published: 2010-07-11 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat, Sai, KD, M4n0j. Special Greetz: Topsecure.net, inj3ct...

FreeBSD : bugzilla -- information disclosure (f1331504-8849-11df-89b8-00151735203a)

A Bugzilla Security Advisory reports : - Normally, information about time-tracking estimated hours, actual hours, hours worked, and deadlines is restricted to users in the 'time-tracking group'. However, any user was able, by crafting their own search URL, to search for bugs based using those...

Bugzilla 'time-tracking' Information Disclosure Vulnerability

Bugzilla is prone to an information-disclosure vulnerability. Exploits may allow attackers to obtain potentially sensitive information that may aid in other attacks. This issue affects the following: Bugzilla 2.17.1 through 3.2.6 Bugzilla 3.3.1 through 3.4.6 Bugzilla 3.5.1 through 3.6 Bugzilla 3....

Bugzilla 'time-tracking' Information Disclosure Vulnerability

Bugzilla is prone to an information disclosure vulnerability. Exploits may allow attackers to obtain potentially sensitive information that may aid in other attacks. This issue affects the following: Bugzilla 2.17.1 through 3.2.6, Bugzilla 3.3.1 through 3.4.6, Bugzilla 3.5.1 through 3.6, Bugzilla...

[SECURITY] Fedora 12 Update: bugzilla-3.4.7-1.fc12

Bugzilla is a popular bug tracking system used by multiple open source proj ects It requires a database engine installed - either MySQL, PostgreSQL or Oracl e. Without one of these database engines local or remote, Bugzilla will not work - see the Release Notes for details...

CVE-2005-2086

creationtimestamp| type| source ---|---|--- 2010-07-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16890 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/phpbbhighlight.rb 2025-02-06 03:13:38+00:00| seen|...

CVE-2008-0506

creationtimestamp| type| source ---|---|--- 2010-07-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16909 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/copperminepiceditor.rb 2025-02-06 03:13:38+00:00|...

CVE-2010-2731

creationtimestamp| type| source ---|---|--- 2010-07-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14179 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/iisauthbypass.rb 2020-05-12 13:27:31+00:00| seen|...

CVE-2003-1200

creationtimestamp| type| source ---|---|--- 2010-07-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16812 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/mdaemonworldclientform2raw.rb 2025-02-06...

Bugzilla 'time-tracking' fields Information Disclosure

The version of Bugzilla hosted on the remote web server allows an unauthenticated, remote attacker to execute a boolean chart search using time tracking fields such as 'estimatedtime', 'remainingtime' 'worktime' 'actualtime', 'percentagecomplete' or 'deadline' even though the attacker is not part...

CVE-2010-1204

Search.pm in Bugzilla 2.17.1 through 3.2.6, 3.3.1 through 3.4.6, 3.5.1 through 3.6, and 3.7 allows remote attackers to obtain potentially sensitive time-tracking information via a crafted search URL, related to a "boolean chart search."...

Design/Logic Flaw

Search.pm in Bugzilla 2.17.1 through 3.2.6, 3.3.1 through 3.4.6, 3.5.1 through 3.6, and 3.7 allows remote attackers to obtain potentially sensitive time-tracking information via a crafted search URL, related to a "boolean chart search."...

CVE-2010-1204

Search.pm in Bugzilla 2.17.1 through 3.2.6, 3.3.1 through 3.4.6, 3.5.1 through 3.6, and 3.7 allows remote attackers to obtain potentially sensitive time-tracking information via a crafted search URL, related to a "boolean chart search."...

Bugzilla < 3.2.7 / 3.4.7 / 3.6.1 Multiple Vulnerabilities

Binary data 5585.prm...

Mozilla Bugzilla时间追踪功能信息泄露漏洞

BUGTRAQ ID: 41141 CVE ID: CVE-2010-1204 Bugzilla是很多软件项目都在使用的基于Web的BUG跟踪系统。 正常情况下有关时间追踪（估计时间、实际时间、已工作时间、截止日期等）的信息应仅限于time-tracking组中的用户可访问，但用户可以通过创建搜索URL使用上述字段搜索bug。如果bug匹配到了搜索，就可以获取有关时间追踪的敏感信息。 Mozilla Bugzilla 3.x Mozilla Bugzilla 2.x 厂商补丁： Mozilla ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

FreeBSD : mozilla -- multiple vulnerabilities (99858b7c-7ece-11df-a007-000f20797ede)

Mozilla Project reports : MFSA 2010-33 User tracking across sites using Math.random MFSA 2010-32 Content-Disposition: attachment ignored if Content-Type: multipart also present MFSA 2010-31 focus behavior can be used to inject or steal keystrokes MFSA 2010-30 Integer Overflow in XSLT Node Sorting...

Mozilla Foundation Security Advisory 2010-33

Mozilla Foundation Security Advisory 2010-33 Title: User tracking across sites using Math.random Impact: Low Announced: June 22, 2010 Reporter: Amit Klein Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.4 Firefox 3.5.10 SeaMonkey 2.0.5 Description Security researcher Amit Klein reported that i...