Malleo 1.2.3 'admin.php' Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/34588/info Malleo is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view and execute arbitrary local files in the conte...

CVE-2013-4386

Multiple SQL injection vulnerabilities in app/models/concerns/hostcommon.rb in Foreman before 1.2.3 allow remote attackers to execute arbitrary SQL commands via the 1 fqdn or 2 hostgroup parameter...

PT-2013-4989 · Foreman · Foreman

Name of the Vulnerable Software and Affected Versions: Foreman versions prior to 1.2.3 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the fqdn or hostgroup parameter in the app/models/concerns/host common.rb file. Recommendations: For versio...

icedtea-web security update

1.2.3-2 - Added temporally! posttrans forcing creation of symlinks - should be removed next release - Resolves: rhbz949094 1.2.3-1 - fixed postun - removal of alternatives for plugin restricted to correct removal process only - fixed date in changelog previous entry - Resolves: rhbz949094 1.2.3-0...

JVN#08307791: Plume vulnerable to cross-site scripting

Plume is a Content Management System CMS. Plume contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the web browser of a user that is logged in as administrator. Solution Update the Software Update to the latest version according to the information provide...

WordPress Plugin MM Forms Community 1.2.3 - SQL Injection

WordPress Plugin MM Forms Community 1.2.3 - SQL Injection Exploit Title: WordPress MM Forms Community plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- foreach $REQUEST as $key = $value $SQL="UPDATE wpcontactformsubmitdata SET...

WebCalendar Multiple Cross Site Scripting Vulnerabilities

This host is running WebCalendar and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbwebcalendarmultxssvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ WebCalendar Multiple Cross Site Scripting Vulnerabilities Authors: Shashi Kiran N Copyright: Copyright c...

WebCalendar 1.2.3 Multiple Cross Site Scripting Vulnerabilities

WebCalendar 1.2.3 Multiple Cross Site Scripting Vulnerabilities. Webapps exploit for php platform source: http://www.securityfocus.com/bid/48546/info WebCalendar is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may...

CVE-2010-4729

Zikula before 1.2.3 does not use the authid protection mechanism for 1 the lostpassword form and 2 mailpasswd processing, which makes it easier for remote attackers to generate a flood of password requests and possibly conduct cross-site request forgery CSRF attacks via multiple form submissions...

Cross site request forgery (csrf)

Zikula before 1.2.3 does not use the authid protection mechanism for 1 the lostpassword form and 2 mailpasswd processing, which makes it easier for remote attackers to generate a flood of password requests and possibly conduct cross-site request forgery CSRF attacks via multiple form submissions...

CVE-2010-4729

Zikula before 1.2.3 does not use the authid protection mechanism for 1 the lostpassword form and 2 mailpasswd processing, which makes it easier for remote attackers to generate a flood of password requests and possibly conduct cross-site request forgery CSRF attacks via multiple form submissions...

MantisBT < 1.2.3 Multiple XSS Vulnerabilities

MantisBT is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Joomla Component Clantools version 1.2.3 Multiple Blind SQL Injection Vulnerabilities

Exploit Title: Joomla Component Clantools version 1.2.3 Multiple Blind SQL Injection Vulnerabilities Date: 05.09.2010 Author: Stephan Sattler // Solidmedia Software Link: http://www.joomla-clantools.de/downloads/docdownload/7-clantools-123.html Version: 1.2.3 Vulnerability 1...

Joomla Component Clantools version 1.2.3 Multiple Blind SQL Injection Vulnerability

No description provided by source. Exploit Title: Joomla Component Clantools version 1.2.3 Multiple Blind SQL Injection Vulnerability Date: 05.09.2010 Author: Stephan Sattler // Solidmedia Software Link: http://www.joomla-clantools.de/downloads/docdownload/7-clantools-123.html Version: 1.2.3...

Zikula < 1.2.3 Multiple XSS and CSRF Vulnerabilities

Zikula is prone to multiple cross-site scripting XSS and cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

PT-2009-5712 · Plume · Plume Cms

Name of the Vulnerable Software and Affected Versions: Plume CMS version 1.2.3 Description: The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via the "m" parameter to "manager/index.php" or by remote authenticated administrators via the "id"...

PHP web alerts, a variety of PHP application\0 filter vulnerability-vulnerability warning-the black bar safety net

Vulnerability description: When the PHP program with the specified PATH, in the PATH of the file Backdoor was added%0 0 can upload any file. Test procedure: NEATPIC PHP directory direct-reading version 1.2.3 http://web.cncode.com/SoftView.asp?SoftID=1820 This document participants: Vulnerability...

CVE-2009-1456

CVE-2009-1456 affects Malleo 1.2.3. A directory traversal exists in admin.php where remote authenticated administrators can cause local file inclusion/execution via a .. (dot dot) in the module parameter. This is a authenticated/local access issue with partial confidentiality/integrity/availabili...

Malleo 1.2.3 Local File Inclusion

Salvatore "drosophila" Fresta + Application: Malleo + Version: 1.2.3 + Website: http://www.malleo-cms.com + Bugs: A Local File Inclusion + Exploitation: Remote + Date: 17 Apr 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore "drosophila" Fresta + Contact: e-mail:...

Malleo 1.2.3 - admin.php Local File Inclusion

Malleo 1.2.3 - admin.php Local File Inclusion source: https://www.securityfocus.com/bid/34588/info Malleo is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view and execute arbitrary local files ...