PT-2014-6480

Name of the Vulnerable Software and Affected Versions Zarafa WebAccess version 4.1 Zarafa WebApp affected versions not specified Description The issue allows local users to obtain sensitive information by reading temporary session data due to world-readable permissions for the files in the tmp...

PT-2014-6478

Name of the Vulnerable Software and Affected Versions Zarafa WebAccess version 7.1.10 Zarafa WebApp version 1.6 beta Description The issue is related to weak permissions for the config.php file, which allows local users to obtain sensitive information by reading the PHP session files. This proble...

Air Transfer Iphone 1.3.9 - Multiple Vulnerabilities

No description provided by source. Exploit Title: Air Transfer Iphone v1.3.9 -Remote crash, Broken Authentication file download and Memo Access. Date: 08/23/2014 Author: Samandeep Singh SaMaN - @samanL33T Vendor Homepage:http://www.darinsoft.co.kr/subhtmls/airtransferguide.html...

Air Transfer Iphone 1.3.9 - Multiple Vulnerabilities

Air Transfer Iphone 1.3.9 - Multiple Vulnerabilities Exploit Title: Air Transfer Iphone v1.3.9 -Remote crash, Broken Authentication file download and Memo Access. Date: 08/23/2014 Author: Samandeep Singh SaMaN - @samanL33T Vendor Homepage:http://www.darinsoft.co.kr/subhtmls/airtransferguide.html...

CVE-2014-0103

CVE-2014-0103 affects Zarafa WebAccess (and WebApp) prior to version 7.1.10 / 1.6, where credentials are stored in cleartext in PHP session files. This enables local Apache users to read sensitive information. OpenVAS advisories link CVE-2014-0103 to multiple Zarafa updates; Fedora/MGASA advisori...

CVE-2014-0103: Undefined Security Weakness

WebAccess in Zarafa before 7.1.10 and WebApp before 1.6 stores credentials in cleartext, which allows local Apache users to obtain sensitive information by reading the PHP session files...

PT-2014-3478

Name of the Vulnerable Software and Affected Versions Zarafa WebAccess versions prior to 7.1.10 Zarafa WebApp versions prior to 1.6 Description The issue allows local Apache users to obtain sensitive information by reading the PHP session files, as credentials are stored in cleartext...

WordPress NextGEN Gallery 2.0.63 Shell Upload Vulnerability

WordPress NextGEN Gallery plugin version 2.0.63 suffers from a remote shell upload vulnerability. Exploit Title: Wordpress NextGEN Gallery Plugin 2.0.63 Arbitrary File Upload Author: SANTHO @s4n7h0 Vendor Homepage: http://wordpress.org/plugins/nextgen-gallery/ Category: WebApp / CMS / Wordpress...

WordPress NextGEN Gallery 2.0.63 Shell Upload

Exploit Title: Wordpress NextGEN Gallery Plugin 2.0.63 Arbitrary File Upload Author: SANTHO @s4n7h0 Vendor Homepage: http://wordpress.org/plugins/nextgen-gallery/ Category: WebApp / CMS / Wordpress Version: 2.0.63 and less --------------------------------------------------- Vulnerability Tracking...

Setiran CMS Blind SQL Injection Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Exploit Title: Setiran CMS Blind SQL injection Vulnerable Date: 1-07-2010 Author: Th3 RDX Software Link: Version: n/a Tested on: Demo Site category: webapp Code : n/a...

T-dreams Announcement Script SQL Injection Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Exploit Title: T-dreams Announcement Script SQL injection Vulnerable Date: 21-08-2010 Author: Br0wn Sug4r Software Link: http://www.t-dreams.com/download/announce.zip Version: n/a Tested on...

plx Ad Trader 3.2 Authentication Bypass Vulnerability

No description provided by source. Vendor or Software Link: http://www.plxwebdev.com/script/adtrader/ Category:WebApp Version: 3.2 Price: 60 USD Contact: [email protected] Website: www.1337db.com Greetings to: R0073r1337db.com, L0rd CrusAd3r,Sid3^effects and to rest of the 1337db members Submit Yo...

SmarterMail Enterprise and Standard <=11.x - Stored XSS

No description provided by source. ?php / Exploit Title: SmarterMail Enterprise and Standard =11.x Stored XSS Google Dork: intext:SmarterTools Inc. inurl:login.aspx Date: 15 Jan 2014 Exploit Author: Saeed reza Zamanian s.zamanian AT imenantivirus.com Vendor Homepage: http://www.smartertools.com/...

Web-APP.Org WebAPP 0.8/0.9.x Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11028/info WebAPP is reported prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input data. An attacker can exploit this vulnerability to retrieve arbitrary,...

Gentoo Webapp-Config 1.10 Insecure File Creation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13780/info Gentoo webapp-config is prone to an insecure file creation vulnerability. This issue is due to a design error that causes the application to fail to verify the existence of a file before writing to it. An...

MangosWeb SQL Injection Vulnerability

No description provided by source. EXPLOIT TITLE: MangosWeb SQL Vulnerability DATE: 1/7/2012 BY Hood3dRob1n AFFECTED PRODUCTS: MangosWeb Enhanced Version 3.0.3 SW LINK: http://code.google.com/p/mwenhanced/ CATEGORY: WebApp 0day DORK: intext:MangosWeb ENhanced Version 3.0.3 @2009-2011, KeysWow Dev...

Yes Solutions - Webapp SQL Injection

No description provided by source. .:. Author : HackXBack [email protected] Lebanese Hacker .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : YES SOLUTIONS http://www.yessolutions.biz/files/index.php .:. Bug Type : Sql Injection .:. Dork : Powered by: Yes Solutions === Exploit ==...

WebAPP 0.9.9.2.1 - Remote Command Execution Exploit (1st)

No description provided by source. !/usr/bin/perl T r a p - S e t U n d e r G r o u n D H a c k i n g T e a m Remote C0mmand Executing Expl0it - For WebAPP CGI Exploit By : A l p h a P r o g r a m m e r Sirus-v ; E-Mail : [email protected] [email protected] This xpl Open a Backdoor in...

PHP Web Scripts Ad Manager Pro 3.0 - SQL Injection

No description provided by source. Vendor or Software Link: http://www.phpwebscripts.com/admanagerpro/ Category:WebApp Version: 3 Price: $99/$130/$325 USD Contact: [email protected] Website: www.1337db.com Greetings to: R0073r1337db.com, L0rd CrusAd3r,Sid3^effects and to rest of the 1337db members...

Pulse Pro 1.4.3 Persistent XSS Vulnerability

No description provided by source. Exploit Title: Pulse Pro 1.4.3 Persistent XSS Vulnerability Date: 24-10-2010 Author: Th3 RDX Software Link: http://pulsecms.com/ Version: 1.4.3 Tested on: Demo Site category: webapp Code : n/a...