Mahara Multiple Vulnerabilities (Apr 2011)

Mahara is prone to multiple cross-site scripting XSS and cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Podcast Generator Local File Include and Cross Site Scripting Vulnerabilities

Podcast Generator is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute local files withi...

CVE-2010-1323

MIT Kerberos 5 aka krb5 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modify a response to a Key Distribution Center KDC, or forge a KRB-SAFE message via...

Security problems in Zenphoto version 1.3

We are continuing with the list of security vulnerabilities found in a number of web applications while testing our latest version of Acunetix WVS v7 . In this blog post, we will look into the details of a number of security problems discovered by Acunetix WVS in the popular web gallery applicati...

Zenphoto 1.3 SQL Injection / Cross Site Scripting

We are continuing with the list of security vulnerabilities found in a number of web applications while testing our latest version of Acunetix WVS v7 . In this blog post, we will look into the details of a number of security problems discovered by Acunetix WVS in the popular web gallery applicati...

SyntaxCMS - rows_per_page SQL Injection

SyntaxCMS - rowsperpage SQL Injection source: https://www.securityfocus.com/bid/42436/info SyntaxCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

upload super beta v1.3 Remote Shell Upload Vulnerability

Exploit for php platform in category web applications ======================================================== upload super beta v1.3 Remote Shell Upload Vulnerability ======================================================== Author: ViRuS Qalaa Email: email protected Home Script:...

AneCMS 1.x - '/modules/blog/index.php' HTML Injection

source: https://www.securityfocus.com/bid/40838/info AneCMS is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal...

Sphider Script 1.3.x Command Execution

======================================================================= Sphider Script Remote Code Execution ======================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ ...

Sphider Script - Remote Code Execution

======================================================================= Sphider Script Remote Code Execution ======================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ ...

Sphider Script Remote Code Execution

Exploit for php platform in category web applications ==================================== Sphider Script Remote Code Execution ==================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1...

DeluxeBB 1.x - 'newpost.php' SQL Injection

source: https://www.securityfocus.com/bid/39962/info DeluxeBB is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data...

Dodo Upload 1.3 - Arbitrary File Upload (Bypass)

Dodo Upload 1.3 - Arbitrary File Upload Bypass ======================================================================================== | Title : Dodo Upload Version 1.3 Upload Shell By pass Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El...

Dodo Upload Version 1.3 Upload Shell (By pass) Vulnerability

Exploit for unknown platform in category web applications ============================================================ Dodo Upload Version 1.3 Upload Shell By pass Vulnerability ============================================================...

File Upload Manager 1.3 - Web Shell File Upload

File Upload Manager 1.3 - Web Shell File Upload Version: v1.3 ============================================================ www.sec-war.com ============================================================ 1- upload shell with: shell.php.jpg shell.php.gif shell.php.htm shell.htm shell.php.jpeg...

Al3jeb Remote Change Password

Exploit Title :al3jeb script Remote Change Password Exploit Author: alnjm33 Software Link: http://www.traidnt.net/vb/attachment.php?attachmentid=354606&d=1237376300 Version: 1.3 Tested on:1.3 MY home : Sec-war.com :::::::::::::::exploit::::::::::::::::::::: al3jeb script Remote Change Password...

al3jeb script - Remote Change Password

al3jeb script - Remote Change Password al3jeb script Remote Change Password Exploit For More visit us http://sec-war.com/cc/index.php User: Pass: Email...

GeN3 forum 1.3 - SQL Injection

GeN3 forum 1.3 - SQL Injection Author: Dr.0rYX & Cr3w-DZ Software Link: http://www.ptcpay.com/shop/browseproducts.php NN N AAAAAA SSSSSSSSS NNN N A A S N NN N A A S N NN N A A S TTTTTT EEEEE AAAA MM MM N NN N AAAAAAAA SSSSSSSSS TT E A A M M M M N NN N A A S TT E A A M M M N NN N A A S TT EEEE...

BM Classifieds Ads SQL Injection Vulnerability

No description provided by source. ALGERIAN HACKER - NORTH-AFRICA SECURITY TEAM - ! BM Classifieds ads SQL injection vulnerability ! Author : Dr.0rYX & Cr3w-DZ ! MAIL : [email protected] & [email protected] / Software Information + Vendor : http://www.bmscripts.com/ + script : powered by BM Classified...

GeN3 forum V1.3 SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================== GeN3 forum V1.3 SQL Injection Vulnerability =========================================== / Software Information + Vendor : http://www.ptcpay.com + script : GeN3 Version 1.3 + Download :...