ATutor AContent 1.1 Script Insertion

AContent 1.1 categoryname Remote Script Insertion Vulnerability Vendor: ATutor Inclusive Design Institute Product web page: http://www.atutor.ca Affected version: 1.1 build r296 Summary: AContent is an open source learning content authoring system and respository used to create interoperable,...

ATutor 2.0.2 Cross Site Scripting / SQL Injection

ATutor 2.0.2 Multiple Remote Vulnerabilities SQLi/XSS/PD Vendor: ATutor Inclusive Design Institute Product web page: http://www.atutor.ca Affected version: 2.0.2 build r10589 Summary: ATutor is an Open Source Web-based Learning Content Management System LCMS designed with accessibility and...

ATutor 2.0.2 - Multiple Vulnerabilities

ATutor 2.0.2 - Multiple Vulnerabilities ATutor 2.0.2 Multiple Remote Vulnerabilities SQLi/XSS/PD Vendor: ATutor Inclusive Design Institute Product web page: http://www.atutor.ca Affected version: 2.0.2 build r10589 Summary: ATutor is an Open Source Web-based Learning Content Management System LCM...

Online Grades Project Team 3.2.5 Cross Site Scripting

Online Grades 3.2.5 Multiple XSS Vulnerabilites Vendor: Online Grades Project Team Product web page: http://www.onlinegrades.org Affected version: 3.2.5 Summary: Online Grades is the leading free-software project that allows K-12+ student grades attendance information to be posted onto a dynamic...

PG eLMS Pro vDEC_2007_01 (contact_us.php) Multiple POST XSS

Exploit for php platform in category web applications PG eLMS Pro vDEC200701 contactus.php Multiple POST XSS Vulnerabilities body bgcolo...

Tugux CMS 1.2 Remote Arbitrary File Deletion

Tugux CMS 1.2 pid Remote Arbitrary File Deletion Vulnerability Vendor: Tugux Studios Product web page: http://www.tugux.com Affected version: 1.2 Summary: Tugux CMS is a free, open-source content Management system CMS and application that powers the entire web. Desc: Input passed to the 'pid'...

Tugux CMS 1.2 - pid Arbitrary File Deletion

Tugux CMS 1.2 - pid Arbitrary File Deletion Tugux CMS 1.2 pid Remote Arbitrary File Deletion Vulnerability Vendor: Tugux Studios Product web page: http://www.tugux.com Affected version: 1.2 Summary: Tugux CMS is a free, open-source content Management system CMS and application that powers the...

Tugux CMS 1.2 (pid) Remote Arbitrary File Deletion Vulnerability

Summary Tugux CMS is a free, open-source content Management system CMS and application that powers the entire web. Description Input passed to the 'pid' parameter in administrator/deletepageparse.php is not properly sanitised before being used to delete files. This can be exploited to delete file...

Valve Steam Client Application 15591559 - Local Privilege Escalation

Valve Steam Client Application 15591559 - Local Privilege Escalation Valve Steam Client Application v1559/1559 Local Privilege Escalation Vendor: Valve Corporation Product web page: http://www.steampowered.com Affected version: Built: Jun 1, 2011 at 15:31:24 Steam API: v010 Steam package versions...

Valve Steam Client Application v1559/1559 Local Privilege Escalation

Exploit for windows platform in category local exploits Valve Steam Client Application v1559/1559 Local Privilege Escalation Vendor: Valve Corporation Product web page: http://www.steampowered.com Affected version: Built: Jun 1, 2011 at 15:31:24 Steam API: v010 Steam package versions 1559 / 1559...

Valve Steam Client Application 1559/1559 - Local Privilege Escalation

Valve Steam Client Application v1559/1559 Local Privilege Escalation Vendor: Valve Corporation Product web page: http://www.steampowered.com Affected version: Built: Jun 1, 2011 at 15:31:24 Steam API: v010 Steam package versions 1559 / 1559 File version: 1.0.968.628 Summary: Steam is a digital...

Tugux CMS 1.2 - Multiple Vulnerabilities

Tugux CMS 1.2 - Multiple Vulnerabilities Title: Tugux CMS 1.2 Multiple Remote Vulnerabilities ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ Vendor: Tugux Studios ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ Product web page: http://www.tugux.com...

Tugux CMS 1.2 XSS / LFI / SQL Injection / URL Redirection

Title: Tugux CMS 1.2 Multiple Remote Vulnerabilities ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ Vendor: Tugux Studios ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ Product web page: http://www.tugux.com...

DreamBox DM500+ File Download

DreamBox DM500+ Arbitrary File Download Vulnerability Vendor: Dream Multimedia GmbH Product web page: http://www.dream-multimedia-tv.de Affected version: DM500, DM500+, DM500HD and DM500S Summary: The Dreambox is a series of Linux-powered DVB satellite, terrestrial and cable digital television...

docuFORM Mercury WebApp Multiple Cross-Site Scripting Vulnerabilities

This host is running docuFORM Mercury WebApplication is prone to multiple cross-site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: secpoddocuformmercurywebappxssvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ docuFORM Mercury WebApp Multiple Cross-Site Scripting Vulnerabilities Authors:...

docuFORM Mercury WebApp 6.16a / 5.20 Cross Site Scripting

docuFORM Mercury WebApp 6.16a Multiple Cross-Site Scripting Vulnerabilities function xss1document.forms"xss1".submit; function xss2document.forms"xss2".submit; alert1" / input type="hidden" name="aacfunc" value="...

EC Software Help & Manual 5.5.1 Build 1296 - 'ijl15.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/47349/info EC Software Help & Manual is prone to an arbitrary-code-execution vulnerability. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a...

TutorialMS v1.4 (show) Remote SQL Injection Vulnerability

Exploit for php platform in category web applications TutorialMS v1.4 show Remote SQL Injection Vulnerability . . --------------------------------------------------------------------------------- | | | Vendor: TutorialMS.com | | Product web page: http://www.tutorialms.com | | Affected version: 1....

DoceboLms 4.0.4 - Multiple Persistent Cross-Site Scripting Vulnerabilities

DoceboLms 4.0.4 - Multiple Persistent Cross-Site Scripting Vulnerabilities DoceboLMS 4.0.4 Multiple Stored XSS Vulnerabilities function xss1document.forms"xss1".submit; function xss2document.forms"xss2".submit; input type="hidden" name="authentic...

DoceboLMS 4.0.4 Cross Site Scripting

DoceboLMS 4.0.4 Multiple Stored XSS Vulnerabilities function xss1document.forms"xss1".submit; function xss2document.forms"xss2".submit; input type="hidden" name="authenticrequest" value="23dfee506a748201730ab2bb7...