OSClass 2.3.3 - 'index.php?sCategory' SQL Injection

source: https://www.securityfocus.com/bid/51662/info OSClass is prone to SQL-injection and cross-site scripting vulnerabilities. Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit...

Raven 1.0 - 'connector.asp' Arbitrary File Upload

source: https://www.securityfocus.com/bid/51631/info Raven is prone to a vulnerability that lets an attacker upload and execute arbitrary script code in the context of the affected webserver process. The issue occurs because the application fails to sufficiently sanitize user-supplied input. Rave...

eFront 3.6.10 - 'download' Directory Traversal

source: https://www.securityfocus.com/bid/51302/info eFront is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Successfully exploiting the issue may allow an attacker to obtain sensitive information that could aid in further attacks...

[SECURITY] CVE-2011-3190 Apache Tomcat Authentication bypass and information disclosure

CVE-2011-3190 Apache Tomcat Authentication bypass and information disclosure Severity: Important Vendor: The Apache Software Foundation Versions Affected: - Tomcat 7.0.0 to 7.0.20 - Tomcat 6.0.0 to 6.0.33 - Tomcat 5.5.0 to 5.5.33 - Earlier, unsupported versions may also be affected Description:...

Nginx Code Execution with Null Bytes to several hidden points and critical points-vulnerability warning-the black bar safety net

Last night, the Black pot on the microblogging made a foreigner explosion Nginx vulnerability, the beginning and few people pay attention, the ego immediately frame environmental testing to verify that my product is good handy online and tried the two sites also verify this vulnerability, so...

Mantis Bug Tracker 1.1.8 - Cross-Site Scripting SQL Injection

Mantis Bug Tracker 1.1.8 - Cross-Site Scripting SQL Injection source: https://www.securityfocus.com/bid/49235/info MantisBT is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability. Exploiting these issues could allow an attacker to steal cookie-based authentication...

NGS00062 Patch Notification: Apple Mac OS X ImageIO TIFF Heap Overflow

Apple Mac OS X ImageIO TIFF Heap Overflow - CVE-2011-0204 28/06/2011 Dominic Chell of NGS Secure has discovered a High risk vulnerability in Mac OS X ImageIO. Viewing a maliciously crafted TIFF image may lead to an unexpected application termination or arbitrary code execution Versions affected...

Apache Archiva 1.3.4 Cross Site Request Forgery

CVE-2011-1026: Apache Archiva Multiple CSRF vulnerability Severity: High Vendor: The Apache Software Foundation Versions Affected: Archiva 1.3.0 - 1.3.4 The unsupported versions Archiva 1.0 - 1.2.2 are also affected. Description: An attacker can build a simple html page containing a hidden Image...

NGS00054 Patch Notification: Lumension Device Control (formerly Sanctuary) remote memory corruption

Lumension Device Control formerly Sanctuary remote memory corruption 24/05/2011 Andy Davis of NGS Secure has discovered a high risk vulnerability in Lumension Device Control. Sending a specially crafted packet to a TCP service running on the Lumension Application Server results in a memory...

PhpAlbum.net 0.4.1-14_fix06 - var3 Remote Command Execution

PhpAlbum.net 0.4.1-14fix06 - var3 Remote Command Execution source: https://www.securityfocus.com/bid/47369/info PhpAlbum.net is prone to a remote command-execution vulnerability because it fails to properly validate user-supplied input. An attacker can exploit this issue to execute arbitrary...

WordPress Plugin WPwizz AdWizz Plugin 1.0 - link Cross-Site Scripting

WordPress Plugin WPwizz AdWizz Plugin 1.0 - link Cross-Site Scripting source: https://www.securityfocus.com/bid/47141/info The WPwizz AdWizz plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage th...

Cosmoshop 10.05.00 - Multiple Cross-Site Scripting SQL Injections

Cosmoshop 10.05.00 - Multiple Cross-Site Scripting SQL Injections source: https://www.securityfocus.com/bid/46828/info CosmoShop is prone to multiple cross-site scripting vulnerabilities and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input...

Wireshark Multiple Vulnerabilities (Mar 2011) - Windows

Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...

RunCMS 2.2.2 - 'register.php' SQL Injection

source: https://www.securityfocus.com/bid/46342/info RunCMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or modi...

Comcast DOCSIS 3.0 Business Gateways - Multiple Vulnerabilities

Comcast DOCSIS 3.0 Business Gateways - Multiple Vulnerabilities Trustwave's SpiderLabs Security Advisory TWSL2011-002: Vulnerabilities in Comcast DOCSIS 3.0 Business Gateways D3G-CCR https://www.trustwave.com/spiderlabs/advisories/TWSL2011-002.txt Published: 2011-02-04 Version: 1.0 Vendor: Comcas...

slickMsg 0.7-alpha - top.php Cross-Site Scripting

slickMsg 0.7-alpha - top.php Cross-Site Scripting source: https://www.securityfocus.com/bid/45343/info slickMsg is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Helix Server 14.0.1.571 - Administration Interface Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/45340/info Helix Server is prone to a cross-site request-forgery vulnerability. An attacker can exploit this issue to perform unauthorized actions by enticing a logged-in user to visit a malicious site. Helix Server 14.0.1.571 is vulnerable; other version...

CMS WebManager-Pro 7.4.3 - Cross-Site Scripting SQL Injection

CMS WebManager-Pro 7.4.3 - Cross-Site Scripting SQL Injection source: https://www.securityfocus.com/bid/44591/info CMS WebManager-Pro is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability. Exploiting these issues could allow an attacker to steal cookie-based...

SA-CONTRIB-2010-084 - OpenID - Authentication bypass

The OpenID module provides users the ability to login to sites using an OpenID account. The OpenID module doesn't implement the all required verifications from the OpenID 2.0 protocol and is vulnerable to a number of attacks. Specifically: - OpenID should verify that a "openid.responsenonce" has...

SA-CONTRIB-2010-078 - Kaltura - Information disclosure

The Kaltura module integrates the Kaltura open source video platform with Drupal. When installing, uninstalling, or configuring the module, it would surreptitiously inject a hidden iframe into the messages displayed to the administrator with the source pointing to corp.kaltura.com/stats/drupal...