CVE-2011-4308

mod/forum/user.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 allows remote authenticated users to discover the names of other users via unspecified vectors...

CVE-2011-4308

mod/forum/user.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 allows remote authenticated users to discover the names of other users via unspecified vectors...

CVE-2011-4308: Undefined Security Weakness

mod/forum/user.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 allows remote authenticated users to discover the names of other users via unspecified vectors...

HDWiki 5.1 control-user.php 远程密码修改漏洞

No description provided by source...

[waraxe-2012-SA#080] - Multiple Vulnerabilities in NextBBS 0.6.0

waraxe-2012-SA080 - Multiple Vulnerabilities in NextBBS 0.6.0 =============================================================================== Author: Janek Vind "waraxe" Date: 27. March 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-80.html Description of vulnerable software:...

NextBBS 0.6.0 Authentication Bypass / SQL Injection / XSS

waraxe-2012-SA080 - Multiple Vulnerabilities in NextBBS 0.6.0 =============================================================================== Author: Janek Vind "waraxe" Date: 27. March 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-80.html Description of vulnerable software:...

shopex旗下,ecshop跨站漏洞

简要描述： ecshop的跨站漏洞 详细说明： 在ecshop的根目录下的 user.php文件第57行中,未对url返回做过滤 如下 $backact = 'user.php?' . $SERVER'QUERYSTRING'; 未对$SERVER'QUERYSTRING';做过滤 即用户的url框中提交项.以此可插入js或html代码执行 漏洞证明： url如下: http://www.ecshop.cn/user.php?1'"/1prompt123456789...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Dolibarr 3.1.0 allow remote attackers to inject arbitrary web script or HTML via 1 the username parameter in a setup action to admin/company.php, or the PATHINFO to 2 admin/securityother.php, 3 admin/events.php, or 4 admin/user.php...

CVE-2011-4329: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Dolibarr 3.1.0 allow remote attackers to inject arbitrary web script or HTML via 1 the username parameter in a setup action to admin/company.php, or the PATHINFO to 2 admin/securityother.php, 3 admin/events.php, or 4 admin/user.php...

tipask question Answering System 1. 4 upload vulnerability-vulnerability warning-the black bar safety net

user.php the user operation function oneditimg //modify avatar if isset$FILES"Filedata" $uploadtmppath = "data/tmp/"; $fileName = 'bigavatar' . $this-user'uid' . '.' . substr$FILES"Filedata"'name', -3; moveuploadedfile$FILES"Filedata""tmpname", $uploadtmppath . $fileName; //This directly...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in users.php in NinkoBB 1.3 RC5 allow remote attackers to inject arbitrary web script or HTML via the 1 firstname, 2 lastname, 3 msn, or 4 aim parameter...

CVE-2011-1766

includes/User.php in MediaWiki before 1.16.5, when wgBlockDisablesLogin is enabled, does not clear certain cached data after verification of an auth token fails, which allows remote attackers to bypass authentication by creating crafted wikiUserID and wikiUserName cookies, or by leveraging an...

CVE-2011-1766

includes/User.php in MediaWiki before 1.16.5, when wgBlockDisablesLogin is enabled, does not clear certain cached data after verification of an auth token fails, which allows remote attackers to bypass authentication by creating crafted wikiUserID and wikiUserName cookies, or by leveraging an...

CVE-2011-1766: Improper Authentication

includes/User.php in MediaWiki before 1.16.5, when wgBlockDisablesLogin is enabled, does not clear certain cached data after verification of an auth token fails, which allows remote attackers to bypass authentication by creating crafted wikiUserID and wikiUserName cookies, or by leveraging an...

Web 2.0 Social Network Freunde Community - SQL Injection

Exploit Title: Web 2.0 Social Network Freunde Community SQL Injection Vunerability Google Dork: inurl:"user.php?userId=" +site:de Date: 08.02.2011 Author: NoNameMT Software Link: http://www.scripteverkauf.com/products/de/neuheiten/web-20-social-network-freunde-community.html Version: - Price: 79,...

Web 2.0 Social Network Freunde Community - SQL Injection

Web 2.0 Social Network Freunde Community - SQL Injection Exploit Title: Web 2.0 Social Network Freunde Community SQL Injection Vunerability Google Dork: inurl:"user.php?userId=" +site:de Date: 08.02.2011 Author: NoNameMT Software Link:...

CVE-2011-0506: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in modules/profile/user.php in Ax Developer CMS AxDCMS 0.1.1 allows remote attackers to execute arbitrary code via a .. dot dot in the aXconfdefaultlanguage parameter...

axdcms-0.1.1 Local File Include Vulnerbility

Exploit for php platform in category web applications axdcms-0.1.1 === Local File Include Vulnerbility Author : n0n0x Homepage: http://priasantai.uni.cc/ Download script : http://biznetnetworks.dl.sourceforge.net/project/axdcms/axdcms/0.1.1/axdcms-0.1.1.zip exploit :...

Siteframe 3.2.3 (user.php) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Siteframe 'user.php' SQL Injection Vulnerability Google Dork: "powered by Siteframe" Date: 29/12/2010 Author: AnGrY BoY Software Link: http://sitefrane.org/downloads/ Version: Siteframe 3.2.3 Tested on: windows SP2 CVE : N/A...

Siteframe CMS 3.2.3 - user.php SQL Injection

Siteframe CMS 3.2.3 - user.php SQL Injection Exploit Title: Siteframe 'user.php' SQL Injection Vulnerability Google Dork: "powered by Siteframe" Date: 29/12/2010 Author: AnGrY BoY Software Link: http://sitefrane.org/downloads/ Version: Siteframe 3.2.3 Tested on: windows SP2 CVE : N/A expolit:...