CMS Made Simple 1.7 - Cross-Site Request Forgery

CMS Made Simple 1.7 - Cross-Site Request Forgery ======================================================================= CMS Made Simple 1.7 CSRF Vulnerability ======================================================================= Vulnerability found in- Admin module email [email protected]...

3Com Network Supervisor Directory Traversal (CVE-2005-2020)

The 3Com Network Supervisor is a network management application that discovers, maps, and displays network links and IP devices. It monitors devices and connections for stress levels, set thresholds and various network events. The product is also capable of generating reports in various formats. ...

IBM DB2 9.1 < Fix Pack 8 Multiple Vulnerabilities

According to its version, the IBM DB2 server running on the remote host is prior to 9.1 Fix Pack 8. It is, therefore, affected by multiple vulnerabilities : - MODIFIED SQL DATA table function is not dropped even if the maintainer does not have privileges to maintain the objects. IZ46773 - It may ...

HP-UX Update for ftpd HPSBUX01118

Check for the Version of ftpd OpenVAS Vulnerability Test HP-UX Update for ftpd HPSBUX01118 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the G...

HP-UX Update for CIFS Server (Samba) HPSBUX00254

Check for the Version of CIFS Server Samba OpenVAS Vulnerability Test HP-UX Update for CIFS Server Samba HPSBUX00254 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

WowWee Rovio Insufficient Access Controls

SUMMARY WowWee Rovio - Insufficient Access Controls - Covert Audio/Video Snooping Possible OVERVIEW Rovio from WowWee does not adequately secure all accessible URLs or media streams, enabling an unauthorized user with network access to the robotic webcam platform the ability to listen to and view...

joomla -- flaw in the reset token validation

Joomla project reports: A flaw in the reset token validation mechanism allows for non-validating tokens to be forged. This will allow an unauthenticated, unauthorized user to reset the password of the first enabled user lowest id. Typically, this is an administrator user. Note, that changing the...

[20080801] - Core - Password Remind Functionality

A flaw in the reset token validation mechanism allows for non-validating tokens to be forged. This will allow an unauthenticated, unauthorized user to reset the password of the first enabled user lowest id. Typically, this is an administrator user. Note, that changing the first users username may...

phPay 2.2.1 - Windows Installations Local File Inclusion

phPay 2.2.1 - Windows Installations Local File Inclusion source: https://www.securityfocus.com/bid/26881/info phPay is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. The vulnerability resides in code that was intended to protect against...

XSS vulnerability in recently updated and configure RSS feed actions

Our eSecurity team has identified a Cross Site Scripting issue with the confluence server as follows: Arbirtatry javascript can be injected in the following cases which can lead to escalated or invalid privileges being granted to an unauthorized user: 1...

HP-UX PHSS_37141 : s700_800 11.X OV NNM6.4x/ET2.0x Intermediate Patch 17

s700800 11.X OV NNM6.4x/ET2.0x Intermediate Patch 17 : The remote HP-UX host is affected by multiple vulnerabilities : - Potential vulnerabilities have been identified with HP OpenView Network Node Manager OV NNM running Apache. These vulnerabilities could be exploited remotely resulting in cross...

Jeebles Technology Jeebles Directory 2.9.60 - download.php Local File Inclusion

Jeebles Technology Jeebles Directory 2.9.60 - download.php Local File Inclusion source: https://www.securityfocus.com/bid/26171/info Jeebles Directory is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an...

JVN#61208749 Webmin OS command injection vulnerability

Webmin is a web-based system management tool. Webmin for Windows contains a vulnerability that allows an unauthorized Webmin user to execute OS commands by entering a specially crafted URL. Impact An attacker could execute arbitrary OS commands with Local System privileges on a computer where...

HP-UX PHSS_36902 : s700_800 11.X OV NNM7.51 IA-64 Intermediate Patch 17

s700800 11.X OV NNM7.51 IA-64 Intermediate Patch 17 : The remote HP-UX host is affected by multiple vulnerabilities : - A potential vulnerability has been identified with HP OpenView Network Node Manager OV NNM. This vulnerability could be exploited remotely by an unauthorized user to execute...

Pulsewiki And Pawfaliki 0.5.1 - index.php Local File Inclusion

Pulsewiki And Pawfaliki 0.5.1 - index.php Local File Inclusion source: https://www.securityfocus.com/bid/25575/info Pulsewiki and Pawfaliki are prone to a local file-include vulnerability because the software fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an...

Pulsewiki And Pawfaliki 0.5.1 - 'index.php' Local File Inclusion

source: https://www.securityfocus.com/bid/25575/info Pulsewiki and Pawfaliki are prone to a local file-include vulnerability because the software fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts...

Dalai Forum 1.1 - 'forumreply.php' Local File Inclusion

source: https://www.securityfocus.com/bid/25361/info Dalai Forum is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts...

PHMe 0.0.2 - 'Function_List.php' Local File Inclusion

source: https://www.securityfocus.com/bid/25011/info PHMe is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. PHMe 0.0.2 is vulnerable; other version...

PHPAccounts 0.5 - index.php Local File Inclusion

PHPAccounts 0.5 - index.php Local File Inclusion source: https://www.securityfocus.com/bid/24572/info PHP Accounts is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execu...

PHPAccounts 0.5 - 'index.php' Local File Inclusion

source: https://www.securityfocus.com/bid/24572/info PHP Accounts is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. PHP Accounts 0.5 is vulnerable;...