WordPress Plugin image Gallery with Slideshow 1.5 - Multiple Vulnerabilities

Title: Wordpress image-gallery-with-slideshow plugin = 1.5 Arbitrary file upload / SQL injection Version:1.5 Date: 30-8-2011 Author: Hrvoje Spoljar hrvoje.spoljaratgmail.com Software link: http://wordpress.org/extend/plugins/image-gallery-with-slideshow/ PoC: curl -F "[email protected]"...

Wordpress Image Gallery with Slideshow plugin <= 1.5 Vulnerabilities

Exploit for php platform in category web applications Title: Wordpress image-gallery-with-slideshow plugin = 1.5 Arbitrary file upload / SQL injection Version:1.5 Date: 30-8-2011 Author: Hrvoje Spoljar hrvoje.spoljaratgmail.com Software link:...

Lasernet CMS 1.5 SQL Injection

Title : LASERnet CMS Vulnerable to SQL Injection Vendor : http://lasernet.gr/cms.php Dork : intext:"Powered by Lasernet" Category: WebApps http://localhost.com/index.php?id=SQL Demo: http://localhost.com/index.php ?id=-1' UNION SELECT...

Joomla Component mod_spo SQL Injection Vulnerability

No description provided by source. Exploit Title: Simple Page Option LFI Google Dork: inurl:modspo Date: 15/07/2011 Author: SeguridadBlanca.Blogspot.com or SeguridadBlanca Software Link: http://joomlacode.org/gf/download/frsrelease/11841/47776/modspo1.5.16.zip Version: 1.5.x Tested on: Backtrack...

Design/Logic Flaw

The krb5saveccnamedone function in providers/krb5/krb5auth.c in System Security Services Daemon SSSD 1.5.x before 1.5.7, when automatic ticket renewal and offline authentication are configured, uses a pathname string as a password, which allows local users to bypass Kerberos authentication by...

Joomla! Component com_question - SQL Injection

Joomla! Component comquestion - SQL Injection |Title : Joomla comquestion SQL Injection Vulnerability |Vendor : http://www.alex-ensdorf.de/ |Version : Joomla 1.5 |Date : 15/5/2011 |Author : NeX HaCkEr |Contact : [email protected] | Exploit : |...

PlaylistMaker 1.5 - .txt Local Buffer Overflow

PlaylistMaker 1.5 - .txt Local Buffer Overflow !/usr/bin/python +Exploit Title: PlaylistMaker V1.5 .TXT File Buffer Overflow Vulnerability +Date: 13\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/get/Multimedia/Audio/Other-AUDIO-Tools/Playlistmaker.shtml +Version: V1.5...

CVE-2010-1323

MIT Kerberos 5 aka krb5 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modify a response to a Key Distribution Center KDC, or forge a KRB-SAFE message via...

Joomla Component Clantools version 1.5 Blind SQL Injection Vulnerability

Exploit Title: Joomla Component Clantools version 1.5 Blind SQL Injection Vulnerability Date: 05.09.2010 Author: Stephan Sattler // Solidmedia Software Link: http://joomla-clantools.de/downloads/docdownload/26-clantools-v15-fuer-joomla-15x.html Version: 1.5 Vulnerability 1...

Joomla 1.5 URL Redirecting Vulnerability

Exploit for php platform in category web applications ======================================== Joomla 1.5 URL Redirecting Vulnerability ======================================== Powered Joomla! 1.5 & All version Down Multiple Author: Mr.MLL Published: 2010-08-24 Verified: yes Download Exploit Code...

Nuked-klaN Module Partenaires NK 1.5 - Blind SQL Injection

Nuked-klaN Module Partenaires NK 1.5 - Blind SQL Injection .:. Author : Metropolis .:. Home : www.metropolis.fr.cr .:. Script : Nuked-Klan Module Partenaires NK 1.5 .:. Version : 1.5 .:. Download Script: http://www.nuked-klan.org/index.php?file=Download&op=description&dlid=317 .:. Bug Type : Blin...

Nuked-klaN Module Partenaires NK 1.5 - Blind SQL Injection

.:. Author : Metropolis .:. Home : www.metropolis.fr.cr .:. Script : Nuked-Klan Module Partenaires NK 1.5 .:. Version : 1.5 .:. Download Script: http://www.nuked-klan.org/index.php?file=Download&op=description&dlid=317 .:. Bug Type : Blind Sql Injection .:. Dork :...

Blog System 1.x - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/39406/info Blog System is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include local file-include, SQL-injection, and cross-site-scripting issues. Exploiting these...

Httpdx 1.5 Source Disclosure

Securitylab.ir Application Info: Name: httpdx webserver Version: 1.5 Vulnerability Info: Type: Remote Source Disclosure Risk: Medium Vulnerability: http://127.0.0.1/file.php%20 Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir...

NAS Uploader [V1.0 and 1.5] Remote File Upload Vulnerability

Exploit for unknown platform in category web applications ============================================================ NAS Uploader V1.0 and 1.5 Remote File Upload Vulnerability ============================================================ | | NAS Uploader V1.0&1.5 Remote File Upload Vulnerability...

elgg 1.5 - _cssjs.php Local File Inclusion

elgg 1.5 - cssjs.php Local File Inclusion Product: elgg.org Version: dbname,$mysqldblink 48: if $simplecacheenabled || $override 49: $filename = $dataroot . 'viewssimplecache/' . md5$viewtype . $view; 51: $contents = filegetcontents$filename; 56: else 59: $contents = elggview$view;...

elgg 1.5 - '/_css/js.php' Local File Inclusion

Product: elgg.org Version: dbname,$mysqldblink 48: if $simplecacheenabled || $override 49: $filename = $dataroot . 'viewssimplecache/' . md5$viewtype . $view; 51: $contents = filegetcontents$filename; 56: else 59: $contents = elggview$view; /lib/elgglib.php: 237: function elggview$view, .. 317:...

Joomla Component Jobline <= 1.3.1 Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Joomla Component Jobline magicquotesgpc =Off ================================== Author: ManhLuat93 My HomePage: http://manhluat.com/ Live Demo:...

Joomla Jobline 1.3.1 Blind SQL Injection

Joomla Component: Jobline magicquotesgpc =Off ================================== Author: ManhLuat93 My HomePage: http://manhluat.com/ Live Demo: http://www.ntca.org/index.php?option=comjobline&task=results&Itemid=&search= - Exploit + --...

Joomla! Component Jobline 1.3.1 - Blind SQL Injection

Joomla! Component Jobline 1.3.1 - Blind SQL Injection Joomla Component: Jobline magicquotesgpc =Off ================================== Author: ManhLuat93 My HomePage: http://manhluat.com/ Live Demo: http://www.ntca.org/index.php?option=comjobline&task=results&Itemid=&search= - Exploit + --...