1337 matches found
Active Web Mail v 4 (Auth Bypass) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ==================================================================== Active Web Mail v 4 Auth Bypass Remote SQL Injection Vulnerability ==================================================================== Tybe:Auth Bypass Remote SQL...
domainsellerpro-sql.txt
WwW.StarHack.Us Author : TR-ShaRk Web : StarHack.Us OldKral.Com Email : [email protected] Msn : [email protected] Script : Domain Seller Pro� v1.5 SQL Injection Vuln. : index.php?a=d&id=-4+union+select+1,2,@@version,4,5,6,7,8,9,10,11,12,13,14-- Demo :...
HACKATTACK Advisory 20081016]WEB//NEWS SQL Injection and Cookie Manipulation
HACKATTACK Advisory 20081016WEB//NEWS SQL Injection and Cookie Manipulation Details ======= Product: WEB//NEWS Security-Risk: high Remote-Exploit: yes Vendor-URL: http://www.stylemotion.de/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David Vieira-Kurz...
[MajorSecurity Advisory #56]moziloWiki - Directory Traversal, XSS and SessionFixation Issues
MajorSecurity Advisory 56moziloWiki - Directory Traversal, XSS and SessionFixation Issues Details ======= Product: moziloWiki Security-Risk: High Remote-Exploit: yes Vendor-URL: http://www.mozilo.de/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David...
[MajorSecurity Advisory #54]xt:Commerce - Cross Site Scripting and Session Fixation Issues
MajorSecurity Advisory 54xt:Commerce - Cross Site Scripting and Session Fixation Issues Details ======= Product: xt:Commerce Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.xtcommerce-shop.com/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered...
[MajorSecurity Advisory #53]BLUEPAGE CMS - Cross Site Scripting and Session Fixation Issues
MajorSecurity Advisory 53BLUEPAGE CMS - Cross Site Scripting and Session Fixation Issues Details ======= Product: BLUEPAGE CMS Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.bluepage-cms.com/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered b...
major_rls53.txt
MajorSecurity Advisory 53BLUEPAGE CMS - Cross Site Scripting and Session Fixation Issues Details ======= Product: BLUEPAGE CMS Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.bluepage-cms.com/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered b...
osp-sqlxssxsrf.txt
======================================================================= . .. | | / / | | | | / \ / / /\ / / \ | | | / / \ /\ \| | / // / /\ \ / / / // http://wwwlowsec.org ======================================================================== Author: C1c4Tr1Z Date: 28/08/08...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Envolution: crossite scripting, automation protection bypass...
CVE-2008-3458
Vuln CVE-2008-3458 affects vTiger CRM prior to version 5.0.4 . The issue is inadequate access control that stores sensitive information under the web root, enabling remote attackers to read mail merge templates by directly requesting the wordtemplatedownload directory. This is confirmed across mu...
Minishowcase 09b136 (lang) Local File Inclusion Vulnerability
No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-034 Application: Minishowcase Image Gallery Versions Affected: v09b136 Vendor URL: http://minishowcase.frwrd.net Bug: Local File Include Exploits: YES Reported: 14.07.2008 Second report: 22.07.2008 Vendor...
Maian Weblog 4.0 - Insecure Cookie Handling
-+================================================================================+- -+ Maian Weblog = v4.0 Insecure Cookie Handling Vulnerability +- -+================================================================================+- Discovered By: S.W.A.T. E-Mail: svvateamatyahoodotcom Script...
Joomla Component DBQuery <= 1.4.1.1 RFI Vulnerability
Exploit for unknown platform in category web applications ===================================================== Joomla Component DBQuery DBQuery February 2007 Green Mountain Information Technology Consulting/aut...
Open Azimyt CMS <= 0.22 (lang) Local File Inclusion Vulnerability
No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-026 Application: Open Azimyt CMS Versions Affected: 0.22 minimal, 0.21 stable Vendor URL: http://azimyt.net/ Bug: Local File Include Exploits: YES Reported: 07.06.2008 Vendor Response: 08.06.2008 Solution...
Open Azimyt CMS <= 0.22 (lang) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================= Open Azimyt CMS adminfolder."/lang/lang-system-".$SESSION'lang'.".php"; if!fileexists$SystemLangFile exitErrorLang::LangFilenotload; require$SystemLangFile; Example:...
F5 FirePass Content Inspection Management XSS
F5 FirePass Content Inspection Management XSS Product: F5 FirePass http://www.f5.com/products/firepass/ The F5 FirePass SSL VPN appliance provides rudimentary web request sanitization for resources exposed through the appliance via Portal Access. This Content Inspection feature can be configured...
PHP Address Book 3.1.5 - Multiple SQL Injections / Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/29560/info PHP Address Book is prone to multiple cross-site scripting and SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues could allow an attacker to steal cookie-based...
Battle Blog 1.25 - 'comment.asp' SQL Injection
++ | hhh hhh aa ccccccc kk k EEEEEEEE RRRR TTTTTTTT NNN NN | | hhh hhh aa aa cc kk k E RR R ----------- TT NN N NN | | hhhhhhhh aaaaaaaa cc kkk EEEEEEE RR R ----------- TT NN N NN | | hhh hhh aa aa cc kk k E RR R TT NN NNN | | hhh hhh aa aa ccccccc kk k EEEEEEE RR R TT NN NN | | | ++ + Script Nam...
CSRF: don't underestimate my damage and ability to attack-vulnerability warning-the black bar safety net
Author: iceskysl Source: IceskYsl@1sters! CSRF, this attack way, although proposed a long time in the 2 0 0 6 time of year there, but this sleepy attack the giants until recently only gradually into our line of sight, what is CSRF what is that harm in the end how much? Common use is the How to,...
[DSECRG-08-025] Local File Include in OneCMS 2.5
Digital Security Research Group DSecRG Advisory DSECRG-08-025 Application: OneCMS Versions Affected: 2.5 Vendor URL: http://www.insanevisions.com/ Bug: Local File Include Exploits: YES Reported: 26.03.2008 Vendor Response: NONE Solution: NONE Date of Public Advisory: 23.05.2008 Author: Digital...