Vikingboard 0.1.2 - user.php Cross-Site Scripting

Vikingboard 0.1.2 - user.php Cross-Site Scripting source: https://www.securityfocus.com/bid/25056/info Vikingboard is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal...

Joomla! 1.5 Beta 2 - 'Search' Remote Code Execution

SEC Consult Security Advisory ======================================================================= title: Remote command execution in Joomla! CMS program: Joomla! vulnerable version: 1.5 beta 2 Earlier 1.5 versions may be vulnerable too! impact: critical homepage: http://www.joomla.org found:...

Joomla! 1.5 Beta 2 - Search Remote Code Execution

Joomla! 1.5 Beta 2 - Search Remote Code Execution SEC Consult Security Advisory ======================================================================= title: Remote command execution in Joomla! CMS program: Joomla! vulnerable version: 1.5 beta 2 Earlier 1.5 versions may be vulnerable too! impact...

Joomla! CMS 1.5 beta 2 (search) Remote Code Execution Vulnerability

Exploit for unknown platform in category web applications =================================================================== Joomla! CMS 1.5 beta 2 search Remote Code Execution Vulnerability =================================================================== SEC Consult Security Advisory...

Olate Download 3.4.1 - 'admin.php' Remote Authentication Bypass

source: https://www.securityfocus.com/bid/25343/info Olate Download is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to gain administrative access to the affected application. Successfully exploiting this issue will result in the remote compromise of the...

Comersus Cart 7.0.7 - comersus_customerAuthenticateForm.asp redirectUrl Cross-Site Scripting

Comersus Cart 7.0.7 - comersuscustomerAuthenticateForm.asp redirectUrl Cross-Site Scripting source: https://www.securityfocus.com/bid/24562/info Comersus Cart is affected by multiple input validation vulnerabilities. A successful exploit could allow an attacker to compromise the application, acce...

Atom Photoblog 1.0.1/1.0.9 - 'AtomPhotoblog.php' Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/24363/info Atom PhotoBlog is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input data before rendering it in a user's browser. These issues include multiple HTML-injection vulnerabilities and a...

Caucho Resin 3.1 - Encoded Space Request Full Path Disclosure

source: https://www.securityfocus.com/bid/23985/info Caucho Resin is prone to multiple information-disclosure vulnerabilities because it fails to adequately sanitize user-supplied data. Attackers can exploit these issues to access potentially sensitive data that may aid in further attacks. Resin...

Jetbox CMS 2.1 Email - FormMail.php Input Validation

Jetbox CMS 2.1 Email - FormMail.php Input Validation source: https://www.securityfocus.com/bid/23989/info Jetbox CMS is prone to an input-validation vulnerabilitiy because it fails to adequately sanitize user-supplied input. Attackers can exploit this issue to send spam email in the context of th...

pmsgold-sql.txt

phpMySpace Gold v8.10 - Blind SQL/XPath Injection Exploit phpMySpace Gold v8.10 - Blind SQL/XPath Injection Exploitdiscovered by John MartinelliGoogle d0rk: "Powered by Ripe Website Manager"...

Activist Mobilization Platform (AMP) 3.2 Remote File Include Vuln

No description provided by source. \ /\ / | \ | / // / | | \ \ Y / | / / \ /\| /\ / / / / / .OR.ID ECHOADV71$2007 --------------------------------------------------------------------------- ECHOADV71$2007 AMP v3.2 basepath Remote File Inclusion Vulnerability...

SSH Communications Security's Secure Shell Server: SFTP privilege escalation

Background The SSH Secure Shell Server from SSH Communications Security www.ssh.com is a commercial SSH implementation available free for non-commercial use. Description The SSH Secure Shell Server contains a format string vulnerability in the SFTP code that handles file transfers scp2 and sftp2...

WSN Guest 1.21 - id SQL Injection

WSN Guest 1.21 - id SQL Injection WSN Guest 1.21 Version Comments.PHP "ID" SQL Injection Exploit WSN Guest 1.21 Version Comments.PHP "ID" SQL Injection Exploit SQL Injection Code Search Board ALL UniquE-KeyUniquE-Cracker [email protected] f...

hcnews-blindsql.txt

HC NEWSSYSTEM 1.0-4 index.php "ID" Blind SQL Injection Type : SQL Injection Release Date : 2007-03-08 Product / Vendor : HC Design News Publisher. http://www.hcdesign.at/demo Bug : http://localhost/script/index.php?option=news&aktion=komm&ID=-SQL Inj.- SQL Inj Code : Admin Username/Password Query...

Magic News Plus 1.0.2 - 'n_layouts.php?link_parameters' Cross-Site Scripting

source: https://www.securityfocus.com/bid/22661/info Magic News Pro is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. These issues include a remote file-include issue and two cross-site scripting vulnerabilities. An...

Spyce 2.1.3 - 'spyce/examples/request.spy?name' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27898/info Spyce is prone to multiple input-validation vulnerabilities that can lead to information disclosure or client-side script execution. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

avast! Antivirus Server Edition Password Setting Weakness

The remote host is running avast! Antivirus Server Edition. The installed version of this software reportedly does not ask for a password even if one is set. A local attacker may be able to leverage this issue to bypass authentication and manipulate settings of the affected application. C Tenable...

Intel 2200BG 802.11 - disassociation packet Kernel Memory Corruption

Intel 2200BG 802.11 - disassociation packet Kernel Memory Corruption / Title: Intel 2200BG 802.11 disassociation packet Kernel Memory Corruption Description: The intel wireless mini-pci driver provided with Intel / Title: Intel 2200BG 802.11 disassociation packet Kernel Memory Corruption...

SQL Injection by using Cookie Poisoning for Website Baker Version 2.6.5 and before

Website Baker Version 2.6.5 and before contains a SQL injection. This can be exploited by using Cookie Poisoning Manufacturer was notified, but want to ignore the request pending release version 3.0 Poison the cookie for the login page with the REMEMBERKEY variable with a standard sql injection '...

212Cafe Guestbook 4.00 - 'show.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/22173/info 212Cafe Guestbook is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecti...