WordPress IP-Logger Plugin <= 3.0 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress IP-Logger plugin = 3.0 SQL Injection Vulnerability Date: 2011-08-16 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/ip-logger.3.0.zip Version: 3.0 tested --- PoC ---...

WespaJuris <= 3.0 - Multiple Vulnerabilities

No description provided by source...

InvisionPower CMS Links To Titles 3.0 Cross Site Scripting

InvisionPower cms Links to Titles utility Presistent XSS =========================================== Author: UmPire Version: 3.0 Full details for version 3.1 patch is not mentioned. It's suspicious to affect all versions. Vendor URL: http://invisionpower.com Product URL:...

csdjcms(Cheng's dance music Management System) V 3.0 getshell vulnerabilities-vulnerability warning-the black bar safety net

csdjcms a YY hack and YY pigs flow like with the sing website. csdjcms V 2.5 code //The old rules first home start looking the includeonce“include/install.php”; ifSIsInstall==0 header“Location:install/install.php”; the includeonce“include/label.php”; ifSWebmode==1 or ! fileexists“index.html”...

Limonade Framework - 'limonade.php' Local File Disclosure

source: https://www.securityfocus.com/bid/63771/info Limonade framework is prone to a local file-disclosure vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to obtain sensitive information from local files on computers running the vulnerable...

GestioIP <= 3.0 Command Injection Vulnerability - Active Check

GestioIP is prone to a remote command injection vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mac OS X : Cisco AnyConnect Secure Mobility Client 3.0.x / 3.1.x Local Privilege Escalation

The remote host has a version of Cisco AnyConnect 3.0.x or 3.1.x. As such, it is vulnerable to a local privilege escalation attack caused by improper permissions on a library directory. This issue could allow a local attacker to execute arbitrary programs with elevated privileges. C Tenable Netwo...

PT-2013-3481 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.0 Description: The issue concerns a lack of checks in the KVM subsystem for kernel addresses during memory slot allocation for a guest's physical address space. This allows local users to potentially gain...

Linux Kernel &quot;iscsi_add_notunderstood_response()&quot;缓冲区溢出漏洞

CVE ID: CVE-2013-2850 Linux Kernel是一款开源的操作系统。 Linux iSCSI子系统存在一个基于堆的缓冲区溢出，允许远程攻击者利用漏洞发送特制请求获得内核执行控制。 在处理超大key时"iscsiaddnotunderstoodresponse"函数drivers/target/iscsi/iscsitargetparameters.c存在一个边界错误，允许攻击者发送超过64字节的KEY触发漏洞，可以以应用程序上下文执行任意代码。 要成功利用漏洞需要配置了iSCSI target并监听网络。 0 Linux Kernel 3.0.x Linux...

IBM SPSS SamplePower Multiple Vulnerabilities (Windows)

This host is installed with IBM SPSS SamplePower and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmspssmultvuln.nasl 8194 2017-12-20 11:29:51Z cfischer $ IBM SPSS SamplePower Multiple Vulnerabilities Windows Authors: Arun Kallavi Copyright: Copyright c 2013 Greenbone...

Hloun Support Management System 3.0 SQL Injection / Bypass

fixhashuser$COOKIE'onlineadmin'; $userquery = "SELECT FROM member WHERE username='".$memberhash'username'."' AND password='".$memberhash'password'."'"; $member = $hloun-db-fetcharray$userquery; $groupquery = "SELECT FROM group WHERE id='".$member'group'."'"; $group =...

(RHSA-2013:0577) Low: Red Hat Enterprise Virtualization 2 - End Of Life

In accordance with the Red Hat Enterprise Virtualization Errata Support Policy, the support for Red Hat Enterprise Virtualization 2 has ended. Customers are recommended to upgrade their existing Red Hat Enterprise Virtualization RHEV 2.x installations to version 3.0. The upgrade from RHEV Manager...

(RHSA-2012:1438) Low: Red Hat Enterprise Virtualization 2 End of Life Extension

Red Hat has updated the support life cycle for Red Hat Enterprise Virtualization version 2, extending the end of life for version 2 from November 3rd 2012 until March 1st 2013. During this period customers are recommended to upgrade their existing Red Hat Enterprise Virtualization RHEV 2.x...

tetex security update

3.0-33.15.el59.1 - more robust fix for CVE-2010-3702 773178 3.0-33.15 - apply patch for CVE-2010-3702,3704 773180 3.0-33.14 - fix CVE-2010-2642 CVE-2011-0433 CVE-2011-0764 CVE-2011-1552 CVE-2011-1553 CVE-2011-1554, texlive various flaws 773180...

SkinCrafter ActiveX Control 3.0 - Local Buffer Overflow

Software : SkinCrafter from NMSoft Technologies Version : SkinCrafter version 3.0 Title : Buffer overflow in skincrafter3vs2005.dll of skinCrafter vs3.0 Link : http://www.skincrafter.com/downloads/SkinCrafterDemo20052008x86.zip Date : May 17, 2012 Tested on : XP SP2 The vulnerability lies in the...

IBM Lotus Symphony < 3.0 Fix Pack 3 Multiple Vulnerabilities

The version of IBM Lotus Symphony was found to be less than 3.0 Fix Pack 3. Such versions are affected by multiple vulnerabilities: - Multiple unspecified vulnerabilities. CVE-2011-2884 - Opening a .doc document with a user defined toolbar can cause an application crash. CVE-2011-2885 - Opening a...

MY MP3 Player 3.0 - '.m3u' DEP Bypass

written to bypass OptIn/OptOut DEP policy tested on windows xp sp3 running in virtualbox import sys print "\n============================" print " MY MP3 Player DEP Bypass " print " Bypass OptIn/OptOut Policy " print " Tested on Windows XP SP3 " print " Written by Blake " print...

MyAuth3 Gateway 'pass' Parameter SQL Injection Vulnerability

This host is running MyAuth3 Gateway and is prone SQL injection vulnerability. OpenVAS Vulnerability Test $Id: gbmyauth3gatewayblindsqlinjvuln.nasl 5793 2017-03-30 13:40:15Z cfi $ MyAuth3 Gateway 'pass' Parameter SQL Injection Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2011 Greenbo...

PT-2011-1085 · Squid +2 · Squid +3

Name of the Vulnerable Software and Affected Versions: Squid versions 3.0 through 3.0.STABLE25 Squid versions 3.1 through 3.1.14 Squid versions 3.2 through 3.2.0.10 Description: The issue is related to a buffer overflow in the gopherToHTML function in the Gopher reply parser. This can be exploite...

WordPress Plugin Ajax Gallery 3.0 - SQL Injection

WordPress Plugin Ajax Gallery 3.0 - SQL Injection Exploit Title: WordPress Ajax Gallery plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- if isset $GET 'delete' && isset $GET'gId' $wpdb-query "DELETE FROM $wpdb-options WHERE...