3020 matches found
CVE-2012-1217
CVE-2012-1217 concerns SQL injection in the STHS v2 Web Portal 2.2. Connected sources (OpenVAS tests) indicate the issue affects the application via the ‘team’ parameter, enabling multiple SQLi payloads and data access/modification. The root cause is insufficient input sanitization in the applica...
CVE-2012-1217: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in STHS v2 Web Portal 2.2 allow remote attackers to inject arbitrary web script or HTML via the team parameter to 1 prospects.php, 2 prospect.php, or 3 team.php...
STHS v2 Web Portal 'team' parameter Multiple SQL Injection Vulnerabilities
STHS v2 Web Portal is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent...
STHS v2 Web Portal - prospects.php?team SQL Injection
STHS v2 Web Portal - prospects.php?team SQL Injection source: https://www.securityfocus.com/bid/51991/info STHS v2 Web Portal is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...
STHS v2 Web Portal - 'team.php?team' SQL Injection
source: https://www.securityfocus.com/bid/51991/info STHS v2 Web Portal is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the...
STHS v2 Web Portal - 'prospects.php?team' SQL Injection
source: https://www.securityfocus.com/bid/51991/info STHS v2 Web Portal is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the...
STHS v2 Web Portal 2.2 SQL Injection
================================================= STHS v2 Web Portal 2.2 SQL Injection Vulnerabilty ================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 . 3 7 \ \ || / \ 7 1 | | \ | | / /\ / / \ / \ / \ 1 3 | | | \ \ / / ...
CentOS 4 : openssl (CESA-2012:0086)
Updated openssl packages that fix two security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
openssl security update
CentOS Errata and Security Advisory CESA-2012:0086 Updated openssl packages that fix two security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...
Didactum SensorProbe v2.x - Persistent Web Vulnerability
Document Title: =============== Didactum SensorProbe v2.x - Persistent Web Vulnerability Release Date: ============= 2011-08-23 Vulnerability Laboratory ID VL-ID: ==================================== 109 Product & Service Introduction: =============================== Netzwerkgestützte...
SuSE 11.1 Security Update : libpng (SAT Patch Number 4948)
This update of libpng12-0 fixes : - CVE-2008-6218: CVSS v2 Base Score: 7.1 AV:N/AC:M/Au:N/C:N/I:N/A:C: Resource Management Errors CWE-399 - unknown unknown. CVE-2009-5063: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P - CVE-2011-2501: CVSS v2 Base Score: 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P: Desig...
BlogPHP v2 Persistent XSS Vulnerability
No description provided by source. Exploit Title: BlogPHP v2 - XSS Google Dork: "Copyright ©2006 Powered by www.blogphp.net" Date: 09/08/2011 Author: Paul Maaouchy Paulzz Software Link: http://sourceforge.net/projects/blogphpscript/files/blogphpscript/2.0/BlogPHPv2.zip/download Version: v2 Tested...
BlogPHP v2 SQL Injection
Exploit for php platform in category web applications + Title : BlogPHP v2 SQL Injection + Name : BlogPHP + Affected Version : v2 + Software Link : http://sourceforge.net/projects/blogphpscript/files/blogphpscript/2.0/BlogPHPv2.zip/download + Tested on : L:Vista & Windows Xp and Windows 7 + Dork ...
BlogPHP v2 Persistent XSS Vulnerability
Exploit for php platform in category web applications Exploit Title: BlogPHP v2 - XSS Google Dork: "Copyright ©2006 Powered by www.blogphp.net" Date: 09/08/2011 Author: Paul Maaouchy Paulzz Software Link: http://sourceforge.net/projects/blogphpscript/files/blogphpscript/2.0/BlogPHPv2.zip/downloa...
Seccubus 2.0.alpha1 released, Download Now !
So what is the difference between Seccubus V2 and Seccubus V2 ? Before you try something new you want to know if it is going to be worth it. This article should give you an idea of why we spend quite a lot of time and energy in rebuilding Seccubus V2 from scratch. I clearly recall the conversatio...
ProQuiz 2.0.0b Arbitrary Upload Vulnerability
Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................ProQuiz V2 Vulnerability...........Arbitrary Upload Download................http://proquiz.softon.org/ Release Date............2/20/2011 Tested...
ProQuiz 2.0.0b - Arbitrary File Upload
ProQuiz 2.0.0b - Arbitrary File Upload Source: http://packetstormsecurity.org/files/view/98669/ProQuiz-Shell.py.txt ------------------------------------------------------------------------ Software................ProQuiz V2 Vulnerability...........Arbitrary Upload...
ProQuiz 2.0.0b - Arbitrary File Upload
Source: http://packetstormsecurity.org/files/view/98669/ProQuiz-Shell.py.txt ------------------------------------------------------------------------ Software................ProQuiz V2 Vulnerability...........Arbitrary Upload Download................http://proquiz.softon.org/ Release...
ProQuiz 2 Shell Upload
------------------------------------------------------------------------ Software................ProQuiz V2 Vulnerability...........Arbitrary Upload Download................http://proquiz.softon.org/ Release Date............2/20/2011 Tested On...............Windows Vista + XAMPP...
