WordPress Firestats Plugin <= 1.6.5 - Remote Configuration File Download

This Firestats plugin is prone to remote file-include vulnerability. It fails to clean user data sufficiently. The attacker may compromise the application and the other attacks are possible. Solution Update the plugin...

Хакеры получили доступ к базе данных пользователей The Pirate Bay

Аргентинский хакер Ch Russo сообщил, что он с двумя партнёрами обнаружил многочисленные уязвимости на thepiratebay.org, связанные с возможностью внедрения SQL-кода. С помощью этих уязвимостей они получили доступ к базе данных пользователей сайта и тем самым получили возможность создавать, удалять...

Bs General_Classifieds Script SQL Injection

1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Bs GeneralClassifieds Script Sqli Vulnerability Date : july 5,2010 Critical Level : HIGH vendor URL :http://www.brotherscripts.com/ Price:$24.95 Author :...

NTSOFT BBS E-Market Professional Cross Site Scripting

+================================================================================================+ + NTSOFT BBS E-Market Professional & XSS and Remote Execution Evil code + +================================================================================================+ Authors: Ivan Sanchez...

Wiki Web Help <= 0.2.8 SQLi Vulnerability - Active Check

Wiki Web Help is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Facebook Improves User Privacy Controls

In a move hailed by privacy advocates, Facebook deployed a feature that allows its users to better control what personal information can be accessed by third-party applications and websites. Read the full article. The Register...

PHP-Nuke 8.0 News SQL Injection

!/usr/bin/perl 0-Day PHP-Nuke newPOST = $HostName.'modules.php?name=News'; my $Cookies = new HTTP::Cookies; my $UserAgent = new LWP::UserAgent agent = 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, defaultheaders = HTTP::Headers-new, or die $!; my $Referrer = "sid=Dante90, WaRWolFz Crew...

BlaherTech Placeto CMS - Username SQL Injection

BlaherTech Placeto CMS - Username SQL Injection source: https://www.securityfocus.com/bid/41190/info BlaherTech Placeto CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

SaffaTunes CMS - 'news.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/40995/info SaffaTunes CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access ...

Joomla! Component Gallery XML 1.1 - SQL Injection / Local File Inclusion

source: https://www.securityfocus.com/bid/40964/info The Gallery XML Joomla! component is prone to an SQL-injection vulnerability and a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit these vulnerabilities to compromise the...

K9 Kreativity Design SQL Injection

========================================================== K9 Kreativity Design pages.php SQL Injection Vulnerability ========================================================== + K9 Kreativity Design pages.php SQL Injection Vulnerability + By NewbieCampuz + Published: 2010-06-02 Pukul 21.00 WIB +...

Joomla! Component com_sar_news - 'id' SQL Injection

source: https://www.securityfocus.com/bid/40501/info The 'comsarnews' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Joomla! Component com_quran - SQL Injection

! ===========================================================================! Joomla comquran SQL Injection vulnerability Author : r3m1ck [email protected] Homepage : http://www.indonesiancoder.com , http://r3m1ck.us Date : 31 May, 2010 location : Indonesia Software download :...

BackLinkSpider 1.3.1774 - cat_id SQL Injection

BackLinkSpider 1.3.1774 - catid SQL Injection source: https://www.securityfocus.com/bid/40398/info BackLinkSpider is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker ...

Microsoft Publisher 2007 conversion library code execution (MS07-037; CVE-2007-1754)

Microsoft Publisher is an application that allows users to design, layout and format documents destined to be published in print, on the web, and other formats. Microsoft Publisher 2007 is included with Microsoft Office 2007, while other versions of the application are installed separately. The...

Joomla! Component Komento 1.0.0 - 'sid' SQL Injection

------------------------------------------------------------------------- Joomla Component comkonsultasi sid SQL Injection Vulnerability ------------------------------------------------------------------------- Author : c4uR Date : May, 13, 2010 Location : Jakarta, Indonesia Time Zone : GMT +7:00...

IBM Lotus Notes Buffer Overflow Vulnerability - Windows

IBM Lotus Notes is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Zabbix <= 1.8.1 SQLi Vulnerability

Zabbix is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Apple iTunes PLS File Parsing Buffer Overflow (CVE-2009-2817)

Apple iTunes is a multimedia player that supports a wide range of media formats. One of the file formats supported by Apple iTunes is the PLS file format. PLS is a computer file format that stores multimedia playlists. A buffer overflow vulnerability has been reported in Apple iTunes. The error i...

Your Articles Directory - Login Option SQL Injection

source: https://www.securityfocus.com/bid/39796/info Article Directory Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, acces...