RunCMS 2.2.2 - register.php SQL Injection

RunCMS 2.2.2 - register.php SQL Injection source: https://www.securityfocus.com/bid/46342/info RunCMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

Microsoft Windows Kernel Elevation of Privilege Vulnerability (2393802)

This host is missing a critical security update according to Microsoft Bulletin MS11-011. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Visio Object Memory Corruption (CVE-2011-0092) Remote Code Execution Vulnerability

Description Microsoft Visio is prone to a remote code-execution vulnerability because it fails to adequately handle user-supplied data. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will result in a...

Facebook Kills Firesheep With New Secure Browsing Feature

Facing a wave of criticism for not offering a secured browsing option, Facebook has finally added a new feature to browse the popular social network on a secure connection https. However, the https:// browsing is not turned on by default and must be manually activated from an “Account Settings”...

PHP Coupon Script 'page' Parameter SQL Injection Vulnerability

PHP Coupon Script is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input. Attackers may exploit this issue to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. PHP Coupon Script 6.0 is...

FBI to press criminal charges over AT&T iPad user data hack !

Remember last summer when iPad users on the AT&T network in the US were subject to a hack that allegedly saw around 120,000 customers personal details compromised? The FBI certainly remembers and today it is set to reveal details criminal charges relating to the case, according to Reuters. As we...

Sahana Disaster Management System 'sel' Parameter SQL Injection Vulnerability

Sahana Disaster Management System is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrig...

Novell iPrint Client 'ienipp.ocx' ActiveX Buffer Overflow Vulnerability

Novell iPrint Client is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:novell:iprint";...

ChurchInfo <= 1.2.12 SQL Injection Vulnerability

Exploit for php platform in category web applications ChurchInfo = 1.2.12 SQL Injection Vulnerability Script: "ChurchInfo is a free church database program to help churches track members, families, groups, pledges and payments..." Script site: http://www.churchdb.org/ Download:...

ChurchInfo 1.2.12 - SQL Injection

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com 2011-01-01 ChurchInfo = 1.2.12 SQL Injection Vulnerability Script: "ChurchInfo is a free church database program to help churche...

Injader CMS 2.4.4 Cross Site Scripting / SQL Injection

================================== Vulnerability ID: HTB22743 Reference: http://www.htbridge.ch/advisory/sqlinjectionininjadercms1.html Product: Injader CMS Vendor: http://www.injader.com/ http://www.injader.com/ Vulnerable Version: 2.4.4 Vendor Notification: 07 December 2010 Vulnerability Type:...

Joomla! Component Jeformcr - id SQL Injection

Joomla! Component Jeformcr - id SQL Injection source: https://www.securityfocus.com/bid/45329/info Joomla Jeformcr is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker...

Joomla! Component Jeformcr - 'id' SQL Injection

source: https://www.securityfocus.com/bid/45329/info Joomla Jeformcr is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modi...

Security at Scale

In this video from Google’s Faculty Summit, Eric Grosse explains the considerations and challenges that the company faces in securing its network and all of the user data it houses...

T-Dreams Job Seekers Package SQL Injection Vulnerability

Exploit for asp platform in category web applications ======================================================== T-Dreams Job Seekers Package SQL Injection Vulnerability ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1...

PHP-Nuke 8.1.0.3.5b SQL Injection

= 5 this may take some minutes.. / EXPLOIT / errorreporting0; iniset"defaultsockettimeout",30; settimelimit0; function httpsend$host, $packet $sock = fsockopen$host, 80; $c = 0; while !$sock if $c++ == 10 die; print "\n- No response from ".$host.":80 Trying again..."; $sock = fsockopen$host,80;...

FTC Pushes "Do Not Track" Option For Web Browsers

The Federal Trade Commission introduced a framework today that aims to address privacy issues raised by consumers that directly affects how our activity is tracked online. The agency went on to advocate the creation of a “Do Not Track” mechanism that could help shape the future of browser securit...

Joomla! Component com_storedirectory - id SQL Injection

Joomla! Component comstoredirectory - id SQL Injection source: https://www.securityfocus.com/bid/45094/info Joomla! Store Directory is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

E-Xoopport 3.1 - display.php?katid SQL Injection

E-Xoopport 3.1 - display.php?katid SQL Injection = 5 this may take some minutes.. / EXPLOIT / errorreporting0; iniset"defaultsockettimeout",30; settimelimit0; function httpsend$host, $packet $sock = fsockopen$host, 80; $c = 0; while !$sock if $c++ == 10 die; print "\n- No response from ".$host.":...

E-Xoopport 3.1 - 'display.php?katid' SQL Injection

= 5 this may take some minutes.. / EXPLOIT / errorreporting0; iniset"defaultsockettimeout",30; settimelimit0; function httpsend$host, $packet $sock = fsockopen$host, 80; $c = 0; while !$sock if $c++ == 10 die; print "\n- No response from ".$host.":80 Trying again..."; $sock = fsockopen$host,80;...