EUVD-2008-6307

Malware in sbrugna...

EUVD-2012-6603

Malware in sbrugna...

CVE-2012-10056

PHP Volunteer Management System v1.0.2 contains an arbitrary file upload vulnerability in its document upload functionality. Authenticated users can upload files to the mods/documents/uploads/ directory without any restriction on file type or extension. Because this directory is publicly accessib...

CVE-2012-10056: Unrestricted Upload of File with Dangerous Type

PHP Volunteer Management System v1.0.2 contains an arbitrary file upload vulnerability in its document upload functionality. Authenticated users can upload files to the mods/documents/uploads/ directory without any restriction on file type or extension. Because this directory is publicly accessib...

PHP Volunteer Management System 1.0.2 - Arbitrary File Upload

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

PHP Volunteer Management System 1.0.2 - Multiple SQL Injection Vulnerabilities

No description provided by source. Title: PHP Volunteer Management System v 1.0.2 multiple SQLi Vulnerabilities Version: 1.0.2 Author/Found by: loneferret Software Site: https://sourceforge.net/projects/phpvolunteer/ Other vulnerabilities: http://www.exploit-db.com/exploits/18941/ Date found: May...

PHP Volunteer Management System v1.0.2 Arbitrary File Upload

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "PHP Volunteer...

PHP Volunteer Management System 1.0.2 - Arbitrary File Upload (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "PHP Volunteer...

PHP Volunteer Management System v1.0.2 Arbitrary File Upload Vulnerability

This module exploits a vulnerability found in PHP Volunteer Management System, version v1.0.2 or prior. This application has an upload feature that allows an authenticated user to upload anything to the 'uploads' directory, which is actually reachable by anyone without a credential. An attacker c...

PHP Volunteer Management System 1.0.2 SQL Injection

Title: PHP Volunteer Management System v 1.0.2 multiple SQLi Vulnerabilities Version: 1.0.2 Author/Found by: loneferret Software Site: https://sourceforge.net/projects/phpvolunteer/ Other vulnerabilities: http://www.exploit-db.com/exploits/18941/ Date found: May 28th 2012 Tested on: Ubuntu Server...

PHP Volunteer Management System 1.0.2 - Multiple SQL Injections

PHP Volunteer Management System 1.0.2 - Multiple SQL Injections Title: PHP Volunteer Management System v 1.0.2 multiple SQLi Vulnerabilities Version: 1.0.2 Author/Found by: loneferret Software Site: https://sourceforge.net/projects/phpvolunteer/ Other vulnerabilities:...

PHP Volunteer Management System 1.0.2 - Multiple SQL Injections

Title: PHP Volunteer Management System v 1.0.2 multiple SQLi Vulnerabilities Version: 1.0.2 Author/Found by: loneferret Software Site: https://sourceforge.net/projects/phpvolunteer/ Other vulnerabilities: http://www.exploit-db.com/exploits/18941/ Date found: May 28th 2012 Tested on: Ubuntu Server...

CVE-2008-6337

SQL injection vulnerability in the Volunteer Management System comvolunteer module 2.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the jobid parameter in a jobshow action to index.php...

Sql injection

SQL injection vulnerability in the Volunteer Management System comvolunteer module 2.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the jobid parameter in a jobshow action to index.php...

CVE-2008-6337: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Volunteer Management System comvolunteer module 2.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the jobid parameter in a jobshow action to index.php...