CVE-2010-2291

Unspecified vulnerability in the web interface in snom VoIP Phone firmware 8 before 8.2.35 allows remote attackers to bypass intended restrictions and modify user credentials via unknown vectors. NOTE: some of these details are obtained from third party information...

Information disclosure

Unspecified vulnerability in the web interface in snom VoIP Phone firmware 8 before 8.2.35 allows remote attackers to bypass intended restrictions and modify user credentials via unknown vectors. NOTE: some of these details are obtained from third party information...

CVE-2010-2291

Unspecified vulnerability in the web interface in snom VoIP Phone firmware 8 before 8.2.35 allows remote attackers to bypass intended restrictions and modify user credentials via unknown vectors. NOTE: some of these details are obtained from third party information...

CVE-2010-2291

CVE-2010-2291 affects snom VoIP Phone firmware 8.x up to 8.2.34, where the web interface contains an unspecified vulnerability that allows remote attackers to bypass restrictions and modify user credentials. The public descriptions note the vectors are unknown, with an attacker able to alter cred...

Microsoft Office Excel SxView Record Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must open a malicious document. The specific flaw exists in the parsing of SXVIEW records in an...

Cyberoam SSL VPN Client - Plain-text Storage of Username and Password

Cyberoam SSL VPN Client - Plain-text Storage of Username and Password Vulnerability Summary: Product: Cyberoam SSL VPN Client v1.0 Vendor: eLiteCore Website: http://www.cyberoam.com/ Platform: Windows Vulnerability Classification: Insecure Storage of User Credentials Issue Fixed in Version:...

ConPresso 4.0.7 - SQL Injection

ConPresso 4.0.7 SQL Injection Vulnerability Author : Gamoscu Homepage : http://www.1923turk.com Blog : http://gamoscu.wordpress.com/ Script : ConPresso 4.0.7 Download : http://www.conpresso.de/conpresso/dedownloads/index.php?rubric=Download Vulnerable File firma.php?id= SQL XpL...

Abyss Web Server X1 - Cross-Site Request Forgery

Abyss Web Server X1 - Cross-Site Request Forgery http://osvdb.org/show/osvdb/64693 http://cross-site-scripting.blogspot.com/2010/05/abyss-web-server-x1-xsrf.html : Abyss Web Server X1 XSRF A cross-site request forgery vunlerability in the Abyss Web Server X1 management console can be exploited to...

Abyss Web Server X1 - Cross-Site Request Forgery

http://osvdb.org/show/osvdb/64693 http://cross-site-scripting.blogspot.com/2010/05/abyss-web-server-x1-xsrf.html : Abyss Web Server X1 XSRF A cross-site request forgery vunlerability in the Abyss Web Server X1 management console can be exploited to change both the username and password of the...

WeBProdZ CMS - SQL Injection

| \ | | | | | |/ / | | | | | // \ \ / / | | | | | | |/ | ' \ | |\ \ /\ V / | | || | || | | | | | | \| / /||,|||/|| || | | | || | | | | |/' || || | | |/ / | ' \ | /| |\ | | | / | | | | | | | \ |/ /./ / /|,|| || || / / $ Exploit Title : WeBProdZ CMS SQL Injection Vulnerability $ Date :...

PostNuke 0.764 Module modload SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================= PostNuke 0.764 Module modload SQL Injection Vulnerability ========================================================= PostNuke 0.764 Module modload SQL Injection Vulnerability Author :...

Nagios statuswml.cgi Command Injection

Added: 04/13/2010 CVE: CVE-2009-2288 BID: 35464 OSVDB: 55281 Background Nagios is a network host and service monitoring and management system. Problem The Nagios statuswml.cgi script passes unsanitized data to the ping and traceroute commands, resulting in shell command execution via...

Joomla! Component JP Jobs 1.2.0 - 'id' SQL Injection

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- Joomla...

post Card ( catid ) Remote SQL Injection Vulnerability

Exploit for php platform in category web applications ====================================================== post Card catid Remote SQL Injection Vulnerability ====================================================== post Card catid Remote SQL Injection Vulnerability Author: Hussin X Home :...

Skype Protocol Handler datapath Argument Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Skype. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists with how the OS web-browser passes command line arguments ...

MASA2EL Music City v1. 0 remote injection vulnerability+exploit code-exploit warning-the black bar safety net

google:Powered By : MASA2EL Music City 1.0 Trojandownloader:http://server/path/index. php? go=singer&id=-13//union//select//1,concatUserName,0x3a,PasSword,3,4//from//masa2eladmin--...

Joomla Component com_productbook SQL Injection Vulnerability

No description provided by source. Joomla Component "comproductbook" SQL Injection Vulnerability ======================================================== .:. Author : Snakespc .:. Home : sec-war.com/cc .:. Script : Joomla .:. Bug Type : SQL Injection .:. Dork : inurl:"comproductbook" === Exploit...

Microsoft Releases Security Advisory 980088

Microsoft has released Security Advisory 980088 to alert users of a vulnerability in Microsoft Internet Explorer. The advisory indicates that exploitation of this vulnerability may allow an attacker to harvest user credentials and other sensitive information by enticing users to visit a malicious...

Oracle Database Server Workspace Manager Multiple SQL Injection (CVE-2008-3982)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e., procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...

Joomla! Component com_biographies - SQL Injection

-------------------------------------------------------- Joomla combiographies SQL injection Vulnerability -------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected] site:anti-sec.info/vb/index.php...