894 matches found
Lunar CMS 3.3 Unauthenticated Remote Command Execution Exploit
Summary Lunar CMS is a freely distributable open source content management system written for use on servers running the ever so popular PHP5 & MySQL. Description Lunar CMS suffers from an unauthenticated arbitrary command execution vulnerability. The issue is caused due to the improper...
Lunar CMS 3.3 CSRF And Stored XSS Vulnerability
Summary Lunar CMS is a freely distributable open source content management system written for use on servers running the ever so popular PHP5 & MySQL. Description Lunar CMS suffers from a cross-site request forgery and a stored xss vulnerabilities. The application allows users to perform certain...
Kemana Directory 1.5.6 Database Backup Disclosure Vulnerability
Kemana Directory version 1.5.6 suffers from a database backup disclosure vulnerability. ?php / Kemana Directory 1.5.6 Database Backup Disclosure Exploit Vendor: C97net Product web page: http://www.c97.net Affected version: 1.5.6 Summary: Experience the ultimate directory script solution with...
qEngine CMS 6.0.0 - Multiple Vulnerabilities
qEngine CMS 6.0.0 - Multiple Vulnerabilities $total return; ifempty$starttime $starttime=time; $now = time; $perc=double$done/$total; $b...
qEngine CMS 6.0.0 Database Backup Disclosure Exploit
Summary qEngine qE is a lightweight, fast, yet feature packed CMS script to help you building your site quickly. Using template engine to separate the php codes from the design, you don't need to touch the codes to design your web site. qE is also expandable by using modules. Description qEngine...
Kemana Directory 1.5.6 (run param) Local File Inclusion Vulnerability
Summary Experience the ultimate directory script solution with Kemana. Create your own Yahoo or Dmoz easily with Kemana. Unique Kemana's features including: CMS engine based on our qEngine, multiple directories support, user friendly administration control panel, easy to use custom fields,...
Kemana Directory 1.5.6 Remote Code Execution
Summary Experience the ultimate directory script solution with Kemana. Create your own Yahoo or Dmoz easily with Kemana. Unique Kemana's features including: CMS engine based on our qEngine, multiple directories support, user friendly administration control panel, easy to use custom fields,...
qEngine CMS 6.0.0 (task.php) Local File Inclusion Vulnerability
Summary qEngine qE is a lightweight, fast, yet feature packed CMS script to help you building your site quickly. Using template engine to separate the php codes from the design, you don't need to touch the codes to design your web site. qE is also expandable by using modules. Description qEngine...
Kemana Directory 1.5.6 kemana_admin_passwd Cookie User Password Hash Disclosure
Summary Experience the ultimate directory script solution with Kemana. Create your own Yahoo or Dmoz easily with Kemana. Unique Kemana's features including: CMS engine based on our qEngine, multiple directories support, user friendly administration control panel, easy to use custom fields,...
Cart Engine 3.0.0 Remote Code Execution
Summary Open your own online shop today with Cart Engine! The small, yet powerful and don't forget, FREE shopping cart based on PHP & MySQL. Unique features of Cart Engine include: CMS engine based on our qEngine, product options, custom fields, digital products, search engine friendly URL, user...
qEngine CMS 6.0.0 Database Backup Disclosure
$total return; ifempty$starttime $starttime=time; $now = time; $perc=double$d...
Cart Engine 3.0.0 - Database Backup Disclosure
?php / Cart Engine 3.0.0 Database Backup Disclosure Exploit Vendor: C97net Product web page: http://www.c97.net Affected version: 3.0.0 Summary: Open your own online shop today with Cart Engine! The small, yet powerful and don't forget, FREE shopping cart based on PHP & MySQL. Unique features of...
Huawei Technologies eSpace Meeting Service 1.0.0.23 - Local Privilege Escalation
Huawei Technologies eSpace Meeting Service 1.0.0.23 - Local Privilege Escalation Huawei Technologies eSpace Meeting Service 1.0.0.23 Local Privilege Escalation Vendor: Huawei Technologies Co., Ltd. Product web page: http://www.huawei.com Affected version: 1.0.0.23 V100R001C03SPC201B050 Summary:...
Huawei Technologies eSpace Meeting Service 1.0.0.23 Local Privilege Escalation
Summary Huawei's eSpace Meeting solution fully meets the needs of enterprise customers for an integrated daily collaboration system by integrating the conference server, conference video terminal, conference user authorization, and teleconference. Description The application is vulnerable to an...
Stark CRM多个安全漏洞
Bugtraq ID:65710 Stark CRM是一款PHP客户关系管理系统。 Stark CRM存在多个存储型跨站脚本和跨站请求伪造漏洞，允许远程攻击者利用漏洞构建恶意URI，诱使用户解析，可获取敏感信息或以目标用户上下文执行恶意操作。 0 Stark CRM 1.0 目前没有详细解决方案提供： http://www.iwcn.ws Stark CRM v1.0 Multiple Script Injection And Session Riding Vulnerabilities Vendor: IWCn Systems Inc. Product web page:...
Asseco SEE iBank FX Client <= 2.0.9.3 Local Privilege Escalation Vulnerability
Summary FX Client is an offline application for e-banking that is intended only for legal entities. Description The application is vulnerable to an elevation of privileges vulnerability which can be used by a simple user that can change the executable file with a binary of choice. The vulnerabili...
NCH Software Inventoria 3.45 (id param) Reflected Cross-Site Scripting Vulnerability
Summary Inventoria is a business inventory management and stock control software that allows you to manage and monitor your inventory to help streamline your operations and boost profits. Description The application suffers from a reflected XSS issue due to a failure to properly sanitize...
NCH Software Express Burn Plus 4.68 (.EBP) Project File Buffer Overflow
Exploit for windows platform in category dos / poc !/usr/local/bin/perl NCH Software Express Burn Plus 4.68 EBP Project File Handling Buffer Overflow PoC Vendor: NCH Software Product web page: http://www.nchsoftware.com Affected version: 4.68 Summary: Express Burn is a program that allows you to...
NCH Software Express Burn Plus 4.68 - '.EBP' Project File Buffer Overflow
!/usr/local/bin/perl NCH Software Express Burn Plus 4.68 EBP Project File Handling Buffer Overflow PoC Vendor: NCH Software Product web page: http://www.nchsoftware.com Affected version: 4.68 Summary: Express Burn is a program that allows you to create and copy many kinds of disc media, including...
NCH Software Express Burn Plus 4.68 Buffer Overflow
NCH Software Express Burn Plus version 4.68 suffers from an EBP project file handling buffer overflow vulnerability. !/usr/local/bin/perl NCH Software Express Burn Plus 4.68 EBP Project File Handling Buffer Overflow PoC Vendor: NCH Software Product web page: http://www.nchsoftware.com Affected...