Collabtive Management v0.61 - Multiple Web Vulnerabilities

Document Title: =============== Collabtive Management v0.61 - Multiple Web Vulnerabilities Release Date: ============= 2011-07-10 Vulnerability Laboratory ID VL-ID: ==================================== 136 Product & Service Introduction: =============================== Unlimited projects,...

Collabtive Management v0.61 - Multiple Web Vulnerabilities

Document Title: =============== Collabtive Management v0.61 - Multiple Web Vulnerabilities Release Date: ============= 2011-07-10 Vulnerability Laboratory ID VL-ID: ==================================== 136 Product & Service Introduction: =============================== Unlimited projects,...

eGroupWare CMS v1.6.x - Multiple Web Vulnerabilities

Document Title: =============== eGroupWare CMS v1.6.x - Multiple Web Vulnerabilities Release Date: ============= 2011-07-09 Vulnerability Laboratory ID VL-ID: ==================================== 137 Product & Service Introduction: =============================== eGroupWare is many things. It is ...

eGroupWare CMS v1.6.x - Multiple Web Vulnerabilities

Document Title: =============== eGroupWare CMS v1.6.x - Multiple Web Vulnerabilities Release Date: ============= 2011-07-09 Vulnerability Laboratory ID VL-ID: ==================================== 137 Product & Service Introduction: =============================== eGroupWare is many things. It is ...

Care2X Hospital System v2.5.x - Multiple Web Vulnerabilities

Document Title: =============== Care2X Hospital System v2.5.x - Multiple Web Vulnerabilities Release Date: ============= 2011-06-24 Vulnerability Laboratory ID VL-ID: ==================================== 69 Product & Service Introduction: =============================== Integrated Hospital...

Care2X Hospital System v2.5.x - Multiple Web Vulnerabilities

Document Title: =============== Care2X Hospital System v2.5.x - Multiple Web Vulnerabilities Release Date: ============= 2011-06-24 Vulnerability Laboratory ID VL-ID: ==================================== 69 Product & Service Introduction: =============================== Integrated Hospital...

AiCart 2.0 CMS - Multiple Critical Web Vulnerabilities

Document Title: =============== AiCart 2.0 CMS - Multiple Critical Web Vulnerabilities Release Date: ============= 2011-06-21 Vulnerability Laboratory ID VL-ID: ==================================== 203 Product & Service Introduction: =============================== AiCart shopping cart software i...

Evo CMS 2.1.0 - Multiple Web Vulnerabilities

Document Title: =============== Evo CMS 2.1.0 - Multiple Web Vulnerabilities Release Date: ============= 2011-06-17 Vulnerability Laboratory ID VL-ID: ==================================== 191 Product & Service Introduction: =============================== N/A Abstract Advisory Information:...

Evo CMS 2.1.0 - Multiple Web Vulnerabilities

Document Title: =============== Evo CMS 2.1.0 - Multiple Web Vulnerabilities Release Date: ============= 2011-06-17 Vulnerability Laboratory ID VL-ID: ==================================== 191 Product & Service Introduction: =============================== N/A Abstract Advisory Information:...

PBX Phone System v2.x & 3.x - Multiple Web Vulnerabilities

Document Title: =============== PBX Phone System v2.x & 3.x - Multiple Web Vulnerabilities References Source: ==================== CVE: 2009-4458 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4458 OSVDB-ID: 61357 http://osvdb.org/show/osvdb/61357 EDB-ID: 10645...

PopScript Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: PopScript Multiple Vulnerabilities home : http://www.D99Y.com Google Dork: Do as you would be done by ; Date: 5/6/2011 Author: NassRawI Software Link: http://www.popscript.com/ 1 SQL injection...

Javascript Character Manipulation Obfuscation (Fragus)

Exploit packs, such as Fragus, are toolkits used by cybercriminals to easily snare victims for their botnets. Solutions enabling security product bypass are often integrated within such tools. Although various security products provide coverage against many web vulnerabilities, such as ActiveX...

Security problems in Zenphoto version 1.3

We are continuing with the list of security vulnerabilities found in a number of web applications while testing our latest version of Acunetix WVS v7 . In this blog post, we will look into the details of a number of security problems discovered by Acunetix WVS in the popular web gallery applicati...

CubeCart 4.3.3 SQL Injection / Cross Site Scripting

We are continuing with the list of security vulnerabilities found in a number of web applications while testing our latest version of Acunetix WVS v7 . In this blog post, we will look into the details of a number of security problems discovered by Acunetix WVS in CubeCart. "CubeCart is a fully...

Поиск уязвимостей в веб приложениях

В этой статье я собрал интересные на мой взгляд ошибки в php скриптах. Но для начала, описание некоторых параметров PHP-интерпретатора: Цитата: registerglobals = ON - все переменные регистрируются как глобальные; magicquotesgpc = ON - в массивах POST, GET, COOKIE экранируются кавычки и опасные...

CVE-2010-2256

Pay Per Minute Video Chat Script 2.0 and 2.1 are affected by CVE-2010-2256, a cross-site scripting (XSS) vulnerability. The issue arises from user-supplied input in two parameters: the id parameter to admin/memberviewdetails.php and the model parameter to videos.php. Exploitation would allow remo...

CVE-2010-2010

Multiple cross-site scripting XSS vulnerabilities in the Chaos Tool Suite aka CTools module 6.x before 6.x-1.4 for Drupal allow remote attackers to inject arbitrary web script or HTML via a node title...

CVE-2009-4717

CVE-2009-4717 affects Gonafish WebStatCaffe. The issue is multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via parameters in stat/: host.php (host), mostvisitpage.php and visitorduration.php (nodayshow), stat/mostvisitpagechart...

DSA-1489-1 iceweasel - several vulnerabilities

Bulletin has no description...

CVE-2006-4220

Novell GroupWise WebAccess vulnerable to multiple XSS flaws in version before 7 Support Pack 3 Public Beta. Exploitation vectors involve crafted inputs in parameters (User.html, Error, User.Theme.index, User.lang) that allow remote attackers to inject arbitrary script/HTML. Root cause is cross-si...