WordPress WP Forum Server 1.7 SQL Injection

Exploit Title: WordPress WP Forum Server plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20&editpostsubject=test&message=dummy&threadid=1 e.g. curl --data "editpostsubmit=1&editpostid=-1 AND...

MIT Kerberos 5 - kadmind Change Password Feature Remote Code Execution

source: https://www.securityfocus.com/bid/47310/info MIT Kerberos is prone to a remote code-execution vulnerability in 'kadmind'. An attacker may exploit this issue to execute arbitrary code with superuser privileges. Failed attempts will cause the affected application to crash, denying service t...

CVE-2011-0025

IcedTea 1.7 before 1.7.8, 1.8 before 1.8.5, and 1.9 before 1.9.5 does not properly verify signatures for JAR files that 1 are "partially signed" or 2 signed by multiple entities, which allows remote attackers to trick users into executing code that appears to come from a trusted source...

The wind God news management static version of 1. 7 vulnerability-vulnerability warning-the black bar safety net

Publishing author: LinkEr Affected versions: V1. 7 static version Official website: Vulnerability type: design flaw Vulnerability Description: The Wind God news management static version of 1. 7 the presence of multiple vulnerabilities. 1.1 The background verify file wwwroot/admin/islogin. asp...

Built2Go PHP Shopping SQL Injection Vulnerability

Exploit for php platform in category web applications Script Name: Built2Go PHP Shopping version = 1.7 Site: http://built2go.com/ Script Demo: http://demos.built2go.com/shopping/1/ Found: Br0ly Google Dork: "Powered by Built2Go PHP Shopping" p0c:...

Built2Go PHP Shopping 1.7 SQL Injection

Script Name: Built2Go PHP Shopping version = 1.7 Site: http://built2go.com/ Script Demo: http://demos.built2go.com/shopping/1/ Found: Br0ly Google Dork: "Powered by Built2Go PHP Shopping" p0c: http://server.com/product.php?cat=16'%20UNION%20ALL%20SELECT%201,@@version,3/ xPloit:...

Built2Go PHP Shopping - SQL Injection

Built2Go PHP Shopping - SQL Injection Script Name: Built2Go PHP Shopping version = 1.7 Site: http://built2go.com/ Script Demo: http://demos.built2go.com/shopping/1/ Found: Br0ly Google Dork: "Powered by Built2Go PHP Shopping" p0c:...

Built2Go PHP Shopping - SQL Injection

Script Name: Built2Go PHP Shopping version = 1.7 Site: http://built2go.com/ Script Demo: http://demos.built2go.com/shopping/1/ Found: Br0ly Google Dork: "Powered by Built2Go PHP Shopping" p0c: http://server.com/product.php?cat=16'%20UNION%20ALL%20SELECT%201,@@version,3/ xPloit:...

CVE-2010-1323

MIT Kerberos 5 aka krb5 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modify a response to a Key Distribution Center KDC, or forge a KRB-SAFE message via...

sNews 'category' parameter SQLi Vulnerability

sNews is prone to a SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:solucija:snews";...

sNews 1.7 - index.php?category SQL Injection

sNews 1.7 - index.php?category SQL Injection sNews v1.7 index.php?category SQL Injection Vulnerability Author : CoBRa21 Author Web Page : http://www.ipbul.org Dork: "Powered by sNews" Sql Injection: http://localhost/path/index.php?category=-3 union select 0,version,2,3,4,5,6,7,8 Thanks...

FathFTP ActiveX Control Multiple Buffer Overflow Vulnerabilities

FathFTP is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PHP Link Manager 1.7 - URL Redirection

PHP Link Manager Version 1.7 Url Redirection Bug Title: PHP link manager Version 1.7 Vendor: http://www.phpjunkyard.com/php-link-manager.php AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Original Advisory:...

PHP Link Manager Version 1.7 Url Redirection Bug

Exploit for php platform in category web applications ================================================ PHP Link Manager Version 1.7 Url Redirection Bug ================================================ PHP Link Manager Version 1.7 Url Redirection Bug Title: PHP link manager Version 1.7 Vendor:...

PHP Link Manager 1.7 - URL Redirection

PHP Link Manager 1.7 - URL Redirection PHP Link Manager Version 1.7 Url Redirection Bug Title: PHP link manager Version 1.7 Vendor: http://www.phpjunkyard.com/php-link-manager.php AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com...

MoinMoin Wiki Security Bypass Vulnerability

This host is running MoinMoin Wiki and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: secpodmoinmoinwikiaclsecbypassvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ MoinMoin Wiki ACL Security Bypass Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 SecPod,...

HB CMS 1.7 SQL Injection

No description provided by source. Securitylab.ir Application Info: Name: HB cms Version: 1.7 Website: http://www.hbcms.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql Injection Risk: Medium Dork...

PYSEC-2009-13

MoinMoin 1.6.2 and 1.7 does not properly enforce ACL checks when aclhierarchic is set to True, which might allow remote attackers to bypass intended access restrictions, a different vulnerability than CVE-2008-1937...

Moodle File Disclosure Vulnerability (Mar 2009)

Moodle is prone to a file disclousure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moodle:moodle"; if descripti...

Clipbucket 1.7 - 'dwnld.php' Directory Traversal

source: https://www.securityfocus.com/bid/33781/info ClipBucket is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information that could aid in further attacks...