Collabtive 1.1 SQL Injection

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ || || || Advisory : Collabtive Sql Injection || || Affected Version : 1.1 || || Vendor : http://collabtive.o-dyn.de/index.php || || Risk : Medium || || CVE-ID : 2013-6872 || || Tested on Platform : Windows 7 ||...

WordPress Plugin Advanced Dewplayer - 'download-file.php' Script Directory Traversal

source: https://www.securityfocus.com/bid/64587/info The Advanced Dewplayer plugin for WordPress is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could ai...

PT-2013-5900

Name of the Vulnerable Software and Affected Versions Spring Signage Xibo versions 1.2.x through 1.2.2 Spring Signage Xibo versions 1.4.x through 1.4.1 Description The issue allows remote attackers to read arbitrary files. This is achieved by using a .. dot dot in the p parameter to the "index.ph...

Open and Compact FTPD Auth Bypass and Directory Traversal Vulnerabilities

The host is running Open and Compact FTPD server and is prone to authentication bypass and directory traversal vulnerabilities. OpenVAS Vulnerability Test $Id: gbopenncompactftpdservermultvun.nasl 6074 2017-05-05 09:03:14Z teissa $ Open and Compact FTPD Auth Bypass and Directory Traversal...

Jojo CMS - 'search' Cross-Site Scripting

source: https://www.securityfocus.com/bid/59933/info Jojo CMS is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal...

WordPress Plugin WP Super Cache - PHP Remote Code Execution

source: https://www.securityfocus.com/bid/59470/info The WP Super Cache plugin for WordPress is prone to a remote PHP code-execution vulnerability. An attacker can exploit this issue to execute arbitrary PHP code within the context of the web server. WP Super Cache 1.2 is vulnerable; other versio...

MantisBT 1.2.x < 1.2.14 adm_config_report.php Multiple Parameter XSS

According to its version number, the MantisBT install hosted on the remote web server is affected by multiple cross-site scripting vulnerabilities : - A flaw exists in on the Configuration Report page in the 'admconfigreport.php' script. CVE-2013-1932 - A flaw exists because the application fails...

PT-2013-2198

Name of the Vulnerable Software and Affected Versions Rack versions 1.1.x before 1.1.6 Rack versions 1.2.x before 1.2.8 Rack versions 1.3.x before 1.3.10 Rack versions 1.4.x before 1.4.5 Rack versions 1.5.x before 1.5.2 Description The issue allows remote attackers to guess the session cookie, ga...

PHPWeby Free Directory Script - 'contact.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/57561/info The PHPWeby Free directory script is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. A successful exploit may allow an attacker to compromise the application, access or modify data,...

Directory traversal

Directory traversal vulnerability in edituser.php in ImpressCMS 1.2.x before 1.2.7 Final and 1.3.x before 1.3.1 Final allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the icmsConfigPluginssanitizerplugins parameter...

am4ss 1.2 <= three xss-vulnerability warning-the black bar safety net

Title : am4ss 1.2 = Multiple Vulnerabilities Author: s3n4t00r Affected versions : all version XSS storage type 1 1 - Register 2 - Login here http://localhost/am4ss/orderdev.php?step=2 3 - Create a Ticket and add your code html or js 4 - Show Tickets http://www.xxx.com/exp/am4ss/tickets.php XSSXSS...

Egallery Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Mobile USB Drive HD - Multiple Local File Inclusion Arbitrary File Upload Vulnerabilities

Mobile USB Drive HD - Multiple Local File Inclusion Arbitrary File Upload Vulnerabilities source: https://www.securityfocus.com/bid/60847/info Mobile USB Drive HD is prone to multiple local file-include and arbitrary file-upload vulnerabilities because it fails to adequately validate files before...

Mobile USB Drive HD - Multiple Local File Inclusion / Arbitrary File Upload Vulnerabilities

source: https://www.securityfocus.com/bid/60847/info Mobile USB Drive HD is prone to multiple local file-include and arbitrary file-upload vulnerabilities because it fails to adequately validate files before uploading them. An attacker can exploit these issues to upload arbitrary files onto the w...

Wordpress Plugins - Picturesurf Gallery Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Description : Wordpress Plugins - Picturesurf Gallery Arbitrary File Upload Vulnerability Version : 1.2 Link : http://wordpress.org/extend/plugins/picturesurf-gallery/ Plugins : http://downloads.wordpress.org/plugin/picturesurf-gallery.zip...

Meditate Web Content Editor 1.2 SQL Injection

Advisory: Meditate Web Content Editor 'usernameinput' SQL-Injection vulnerability Advisory ID: SSCHADV2011-039 Author: Stefan Schurtz Affected Software: Successfully tested on Meditate 1.2 Vendor URL: http://www.arlomedia.com/ Vendor Status: fixed ========================== Vulnerability...

Meditate Web Content Editor username_input - SQL Injection

Meditate Web Content Editor usernameinput - SQL Injection Advisory: Meditate Web Content Editor 'usernameinput' SQL-Injection vulnerability Advisory ID: SSCHADV2011-039 Author: Stefan Schurtz Affected Software: Successfully tested on Meditate 1.2 Vendor URL: http://www.arlomedia.com/ Vendor Statu...

DEBIAN-CVE-2011-4074

Cross-site scripting XSS vulnerability in cmd.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via an debug command...

VulnCheck KEV: CVE-2011-4075

The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary PHP code via the orderby parameter aka sortby variable in a queryengine action to cmd.php, as exploited in the wild in October 2011...

AM4SS 1.2 - Cross-Site Request Forgery (Add Admin)

AM4SS 1.2 - Cross-Site Request Forgery Add Admin Title : AM4SS Version 1.2 - CSRF add Admin Script : AM4SS Version 1.2 Language : Php Download : http://am4ss.org/am4ss.tar.gz Date : 2011/09/09 Version : 1.2 Dork : "Powered by AM4SS " Found : by red virus [email protected] Homepage : www.alm3refh.com...