Betster SQL Injection Vulnerability

Betster aka PHP Betoffice is a suite of software for creating online casinos based on PHP, MySQL and JavaScript. A SQL injection vulnerability exists in Betster version 1.0.4, which stems from the failure of the showprofile.php or categoryedit.php scripts to adequately filter the 'id' parameter;...

Uapplication Ublog 1.0.x Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12931/info Ublog is affected by a cross-site scripting vulnerability. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of...

DEBIAN-CVE-2014-0478

APT before 1.0.4 does not properly validate source packages, which allows man-in-the-middle attackers to download and install Trojan horse packages by removing the Release signature...

WordPress Uploader 1.0.4 Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

JVN#93344001: ATOK for Android issue in the access permissions for the learning information file

ATOK for Android provided by JUST Systems contains an issue where another application may access the learning information file which stores user input strings. Impact If a user of the affected product uses other malicious Android application, the learning information file may be obtained. Solutio...

JVN#77393797: Cybozu Live for Android vulnerable in the WebView class

Cybozu Live for Android is a client software for Cybozu Live. Cybozu Live for Android contains a vulnerability in the WebView class. Impact When there is a malicious file in the user's Android device, clicking a file:// hyperlink may lead to the malicious file being opened and information managed...

JVN#23009798: Cybozu Live for Android vulnerable to arbitrary Java method execution

Cybozu Live for Android is a client software for Cybozu Live. Cybozu Live for Android contains an arbitrary Java method execution vulnerability. Impact When opening a specially crafted website, an attacker may be able to execute an arbitrary Java method. As a result, information stored in Android...

pliggCMS (thumbnail_plus) Remote File Inclusion

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

SilverStripe CMS Pixlr Image Editor - 'upload.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/54172/info Pixlr Image Editor is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerability to upload arbitrary...

DSA-2386-1 openttd - several

Bulletin has no description...

Pligg CMS 1.0.4 - 'story.php' SQL Injection

/ ! Pligg CMS story.php?id SQL Injection Vulnerability ! Author : Don Tukulesto [email protected] ! Homepage: http://indonesiancoder.com ! Date : Tue, April 27, 2010 ! Tune in : http://antisecradio.fm choose your weapon / Software Information Vendor : http://www.pligg.com/ Download:...

Serialsystem 1.0.4 Beta - 'list' Cross-Site Scripting

source: https://www.securityfocus.com/bid/40236/info Serialsystem is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

CVE-2009-4235

acpid 1.0.4 sets an unrestrictive umask, which might allow local users to leverage weak permissions on /var/log/acpid, and obtain sensitive information by reading this file or cause a denial of service by overwriting this file, a different vulnerability than CVE-2009-4033...

Django Forms Library Algorithmic Complexity Vulnerability

The host is running Django and is prone to Algorithmic Complexity vulnerability. OpenVAS Vulnerability Test $Id: secpoddjangoalgorithmiccomplexityvuln.nasl 6539 2017-07-05 12:02:14Z cfischer $ Django Forms Library Algorithmic Complexity Vulnerability Authors: Sharath S Copyright: Copyright c 2009...

asaher pro 1.0.4 Remote Database Backup Vulnerability

Exploit for unknown platform in category web applications ===================================================== asaher pro 1.0.4 Remote Database Backup Vulnerability ===================================================== ::::::::::::::::::::::::::::::::Re: asaher pro v1.0.4 Remote Database Backup...

joomlafiliale-sql.txt

Joomla Component Filiale SQL Injection M a f i a C R E W Vulnerability found by: Str0xo Mafia Crew Contact: x02athotmail.de Website: http://www.dz-h4ck3rz.com special tnx to: co2 Greetings: lina-no promises & HIs0k4 ScriptName : 'Joomla' ModuleName : 'Filiale' Version : 1.0.4 DORK 1 :...

Joomla Component Filiale 1.0.4 (idFiliale) SQL Injection Vulnerability

No description provided by source. Joomla Component Filiale SQL Injection M a f i a C R E W Vulnerability found by: Str0xo Mafia Crew Contact: x02athotmail.de Website: http://www.dz-h4ck3rz.com special tnx to: co2 Greetings: lina-no promises & HIs0k4 ScriptName : 'Joomla' ModuleName : 'Filiale'...

Joomla! Component Filiale 1.0.4 - 'idFiliale' SQL Injection

Joomla Component Filiale SQL Injection M a f i a C R E W Vulnerability found by: Str0xo Mafia Crew Contact: x02athotmail.de Website: http://www.dz-h4ck3rz.com special tnx to: co2 Greetings: lina-no promises & HIs0k4 ScriptName : 'Joomla' ModuleName : 'Filiale' Version : 1.0.4 DORK 1 :...

Debian Security Advisory DSA 583-1 (lvm10)

The remote host is missing an update to lvm10 announced via advisory DSA 583-1. OpenVAS Vulnerability Test $Id: deb5831.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 583-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1096-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...