Rgboard <= 3.0.12 (RFI/XSS) Multiple Remote Vulnerabilities

No description provided by source. Rgboard 3.0.x Multiple Vulnerabilities RFI/XSS // Author:: e.wiZz! // Site:: www.balcanwarez.com // Contact:: N/A :D =========================================================== // Script :: Rgboard // Vulnerable version :: 3.0.0/3.0.12 // Not vulnerable :: 4.0 /...

rgboard 3.0.12 - Remote File Inclusioni / Cross-Site Scripting

Rgboard 3.0.x Multiple Vulnerabilities RFI/XSS // Author:: e.wiZz! // Site:: www.balcanwarez.com // Contact:: N/A :D =========================================================== // Script :: Rgboard // Vulnerable version :: 3.0.0/3.0.12 // Not vulnerable :: 4.0 // Download :: www.rgboard.com...

KnowledgeQuest 2.6 - Administration Multiple Authentication Bypass Vulnerabilities

KnowledgeQuest 2.6 - Administration Multiple Authentication Bypass Vulnerabilities source: https://www.securityfocus.com/bid/29012/info KnowledgeQuest is prone to multiple authentication-bypass vulnerabilities. Attackers can leverage these issues to compromise the application, which could aid in...

Wikepage Opus 13 2007.2 - wiki Cross-Site Scripting

Wikepage Opus 13 2007.2 - wiki Cross-Site Scripting source: https://www.securityfocus.com/bid/28842/info Wikepage Opus is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code i...

cpcommerce-xsslfi.txt

www.BugReport.ir AmnPardaz Security Research Team Title: cpCommerce Multiple Vulnerabilities Vendor: http://cpcommerce.cpradio.org Bugs: XSS, SQL Injection , Local File Inclusion Vulnerable Version: 1.1.0 prior versions also may be affected Exploitation: Remote with browser Fix: N/A Original...

HP OpenView Network Node Manager (OV NNM) 7.5.1 - ovalarmsrv.exe Remote Overflow

HP OpenView Network Node Manager OV NNM 7.5.1 - ovalarmsrv.exe Remote Overflow / Dreatica-FXP crew ---------------------------------------- Target : HP OpenView Network Node Manager v7.5 ---------------------------------------- Exploit : HP OpenView NNM v7.5.1 ovalarmsrv.exe Remote Buffer Overflo...

cpCommerce 1.1.0 (XSS/LFI) Multiple Remote Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: cpCommerce Multiple Vulnerabilities Vendor: http://cpcommerce.cpradio.org Bugs: XSS, SQL Injection , Local File Inclusion Vulnerable Version: 1.1.0 prior versions also may be affected Exploitation: Remote...

Prozilla Software Index 1.1 - SQL Injection

source: https://www.securityfocus.com/bid/28677/info Prozilla Software Index is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access...

iDefense Security Advisory 03.31.08: Macrovision InstallShield InstallScript One-Click Install Untrusted Library Loading Vulnerability

iDefense Security Advisory 03.31.08 http://labs.idefense.com/intelligence/vulnerabilities/ Mar 31, 2008 I. BACKGROUND Macrovision InstallShield InstallScript One-Click Install OCI is a web based installer technology that allows software publishers to distribute minimal installer packages which...

My Web Doc 2000 Administration Pages - Multiple Authentication Bypass Vulnerabilities

My Web Doc 2000 Administration Pages - Multiple Authentication Bypass Vulnerabilities source: https://www.securityfocus.com/bid/28400/info My Web Doc is prone to multiple authentication-bypass vulnerabilities. Attackers can leverage these issues to compromise the application, which could aid in...

ClamAV Milter Blackhole-Mode Remote Code Execution

This module exploits a flaw in the Clam AntiVirus suite 'clamav-milter' Sendmail mail filter. Versions prior to v0.92.2 are vulnerable. When implemented with black hole mode enabled, it is possible to execute commands remotely due to an insecure popen call. This module requires Metasploit:...

X.Org xorg-x11-xfs <= 1.0.2-3.1 Local Race Condition Exploit

Exploit for linux platform in category local exploits ============================================================ X.Org xorg-x11-xfs sym.c int main for;;ifsymlink"/etc/passwd","/tmp/.font-unix"==0 return 0; EOF cc sym.c -o sym/dev/null 2&1 if $? != 0 ; then printf "Error: Cant compile code" exit...

SmarterTools SmarterMail 4.3 - 'Subject' HTML Injection

source: https://www.securityfocus.com/bid/27878/info SmarterMail is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the...

JVN#38893575 PC2M cross-site scripting vulnerability

PC2M is an open source web application which converts web pages and images to be available on web-capable mobile devices such as cellphones and PDAs. PC2M contains a cross-site scripting vulnerability. Impact An arbitrary script can be executed on the user's web browser. Solution Update the...

[CandyPress] eCommerce suite &#40;SQL Injection + XSS + Path Disclosure&#41;

WwW.BugReport.ir AmnPardaz Security Research & Penetration Testing Group Title: CandyPress eCommerce suite Vendor: http://www.candypress.com/ Bugs: SQL Injection + XSS + Path Disclosure in CandyPress Vulnerable Version: 4.1.1.26 Exploit: Available Fix Available: Yes!, Update to 4.1.1.27...

Web Wiz NewsPad 1.02 - sub Directory Traversal

Web Wiz NewsPad 1.02 - sub Directory Traversal WwW.BugReport.ir AmnPardaz Security Research Team Title: Web Wiz NewsPadTM Vendor: http://www.webwizguide.com/ Bug: Directory traversal Vulnerable Version: 1.02 Exploit: Available Fix Available: No! Fast Solution is available. - Description: Web Wiz...

SDL_image 1.2.6 - Invalid .GIF File LWZ Minimum Code Size Remote Buffer Overflow

SDLimage 1.2.6 - Invalid .GIF File LWZ Minimum Code Size Remote Buffer Overflow source: https://www.securityfocus.com/bid/27417/info The SDLimage library is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. The issue occur...

SDL_image 1.2.6 - Invalid '.GIF' File LWZ Minimum Code Size Remote Buffer Overflow

source: https://www.securityfocus.com/bid/27417/info The SDLimage library is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. The issue occurs when handling malformed GIF images. Attackers can leverage this issue to execu...

boastMachine <= 3.1 (mail.php id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= boastMachine = 3.1 mail.php id SQL Injection Vulnerability ============================================================= ...:::::boastMachine =3.1 SQL Injection Vulnerbility...

UploadImageUploadScript 1.0 - Remote Change Admin Password

UploadImageUploadScript 1.0 - Remote Change Admin Password 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; re...