bogdan calin vulnerabilities and exploits

(subscribe to this query)

SQL injection vulnerability in zp-core/full-image.php in Zenphoto 1.3 and 1.3.1.2 allows remote malicious users to execute arbitrary SQL commands via the a parameter. NOTE: some of these details are obtained from third party information.

Zenphoto Zenphoto 1.3 Zenphoto Zenphoto 1.3.1.2

1 EDB exploit

Cross-site scripting (XSS) vulnerability in NuSOAP 0.9.5, as used in MantisBT and other products, allows remote malicious users to inject arbitrary web script or HTML via the PATH_INFO to an arbitrary PHP script that uses NuSOAP classes.

Dietrich Ayala Nusoap 0.9.5

1 EDB exploit

Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote malicious users to read arbitrary files via a %5C (encoded backslash) in the URL.

1 EDB exploit

Cross-site scripting (XSS) vulnerability in zp-core/admin.php in Zenphoto 1.3 allows remote malicious users to inject arbitrary web script or HTML via the user parameter. NOTE: the from parameter is already covered by CVE-2009-4562.

Zenphoto Zenphoto 1.3

1 EDB exploit

classes/session/cc_admin_session.php in CubeCart 4.3.4 does not properly restrict administrative access permissions, which allows remote malicious users to bypass restrictions and gain administrative access via a HTTP request that contains an empty (1) sessID (ccAdmin cookie), (2...

Cubecart Cubecart 4.3.4

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook