WordPress Plugin UPM Polls 1.0.3 - SQL Injection

WordPress Plugin UPM Polls 1.0.3 - SQL Injection Exploit Title: UPM Polls getrow"SELECT FROM ".$wpdb-prefix."pppmpolls WHERE id = $QID", ARRAYA;...

Smallftpd FTP Server Multiple Requests Denial of Service Vulnerability

Smallftpd FTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RuubikCMS Version 1.0.3 Multiple Vulnerabilities

Exploit for php platform in category web applications ---------------------------------------------------------------- WebApplication : RuubikCMS Version 1.0.3 Type of vunlnerability : CSRF Change Admin Password And XSS Risk of use : Medium...

Ruubik CMS 1.0.3 Cross Site Request Forgery / Cross Site Scripting

---------------------------------------------------------------- WebApplication : RuubikCMS Version 1.0.3 Type of vunlnerability : CSRF Change Admin Password And XSS Risk of use : Medium ---------------------------------------------------------------- Producer Website : http://www.ruubikcms.com/...

SQL injection in Hycus CMS

Vulnerability ID: HTB22739 Reference: http://www.htbridge.ch/advisory/sqlinjectioninhycuscms1.html Product: Hycus CMS Vendor: Hycus Web Development Team http://www.hycus.com/ Vulnerable Version: 1.0.3 Vendor Notification: 07 December 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendo...

Network fun online shopping system fashion version 1 0. 3 injection vulnerability-vulnerability warning-the black bar safety net

Network fun online shopping system fashion version 1 0. 3 in the member login to edit an order at the presence ofSQL injection, to cause the administrator password is injected into the storm of the MD5 vulnerability. Vulnerability:file editorderform. asp, the presence ofsql injectionvulnerability...

Joomla Autartitarot Directory Traversal

...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla comautartitarot Directory Traversal Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT: bhunt3ratnospamgmaildotnospamcom TESTED ON: LocalHost PRE-REQUERIMENTS:...

Pligg多个跨站脚本和跨站请求伪造漏洞

BUGTRAQ ID: 37185 Pligg是可以免费下载使用的开源内容管理系统。 Pligg没有正确地过滤用户提交给admin/adminconfig.php、admin/adminmodules.php、 delete.php、editlink.php、submit.php、submitgroups.php、...

MyMsg 'profile.php' SQL Injection Vulnerability

MyMsg is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MyMsg 'profile.php' SQL Injection Vulnerability

This host is installed with MyMsg and is prone to SQL Injection vulnerability. OpenVAS Vulnerability Test $Id: gbmymsgprofilesqlinjvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ MyMsg 'profile.php' SQL Injection Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH,...

TYPO3 Security Bulletin

It has been discovered that the extension CWT Community cwtcommunity is vulnerable to SQL-injections. Release Date: June 16 2009 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.0.3 and all versions below...

TemaTres 1.0.3 (Auth Bypass/SQL/XSS) Multiple Remote Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ------------------...

Joomla Component Daily Message 1.0.3 (id) SQL Injection Vuln

No description provided by source. Joomla Component Daily Message id SQL Injection Vulnerability Vulnerability found by: H!tm@N Contact: hitmanatkhg-crewdotws Site: www.khg-crew.ws Greetz: boom3rang, KHG, urtan, warning, chs, redc00de - -=Kosova Hackers Group=- ScriptName: "Joomla" Component:...

Wireshark Multiple Vulnerabilities (Sep 2008) - Linux

Check for vulnerable version of Wireshark. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescription...

Built2go News Manager 1.0 Blog - rating.php?nid Cross-Site Scripting

Built2go News Manager 1.0 Blog - rating.php?nid Cross-Site Scripting source: https://www.securityfocus.com/bid/22783/info Built2Go News Manager Blog is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these...

Debian DSA-1236-1 : enemies-of-carlotta - missing sanity checks

Antti-Juhani Kaijanaho discovered that enemies-of-carlotta, a simple manager for mailing lists, does not properly sanitise email addresses before passing them through to the system shell. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

DSA-1236-1 enemies-of-carlotta

Bulletin has no description...

CVE-2006-6242

Multiple directory traversal vulnerabilities in Serendipity 1.0.3 and earlier allow remote attackers to read or include arbitrary local files via a .. dot dot sequence in the serendipitycharset parameter in 1 include/lang.inc.php; or to plugins/ scripts 2...

ToendaCMS 0.x1.0.x - TCMS_Administer Remote File Inclusion

ToendaCMS 0.x1.0.x - TCMSAdminister Remote File Inclusion source: https://www.securityfocus.com/bid/19626/info ToendaCMS is prone a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file...

[Full-disclosure] WebCalendar User Account Enumeration Weakness

WebCalendar is a PHP-based calendar application that can be configured as a single-user calendar, a multi-user calendar for groups of users, or as an event calendar viewable by visitors. See project homepage for details: http://www.k5n.us/webcalendar.php Description: The problem is that different...