5112 matches found
DEBIAN-CVE-2007-1395
Incomplete blacklist vulnerability in index.php in phpMyAdmin 2.8.0 through 2.9.2 allows remote attackers to conduct cross-site scripting XSS attacks by injecting arbitrary JavaScript or HTML in a 1 db or 2 table parameter value followed by an uppercase end tag, which bypasses the protection...
CVE-2006-7158
Oracle Application Express (APEX/HTMLDB) prior to version 2.2.1 is affected by a cross-site scripting (XSS) vulnerability in the NOTIFICATION_MSG parameter in the APEX UI. The issue allows remote attackers to inject arbitrary web script or HTML. The root cause is insufficient input handling for t...
DBImageGallery 1.2.2 (donsimg_base_path) RFI Vulnerabilities
Exploit for unknown platform in category web applications ============================================================ DBImageGallery 1.2.2 donsimgbasepath RFI Vulnerabilities ============================================================ DBImageGallery 1.2.2 Found by Denven ERROR:...
SMA-DB <= 0.3.9 (settings.php) Remote File Inclusion Vulnerability
To ConTacT mE:wWw.Asb-May.net/bb ScRiPt:-http://people.ee.ethz.ch/dmaeder/bluevirus/downloader.php?filename=U01BLURC&referrer=hots Discovered By:- ThE dE@Th AsB-MaY DiScOvEr ExPlIoTs Gr0uP Settings.php:- includeonce$pfadz."scripts/session.php";...
CVE-2007-0797
PHP remote file inclusion vulnerability in theme/settings.php in bluevirus-design SMA-DB 0.3.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pfadz parameter...
EUVD-2007-0794
PHP remote file inclusion vulnerability in theme/settings.php in bluevirus-design SMA-DB 0.3.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pfadz parameter...
CVE-2007-0797
The CVE-2007-0797 entry describes a PHP remote file inclusion in the framework/theme/settings.php of bluevirus-design SMA-DB 0.3.9 and earlier . The underlying issue is that an attacker can supply a URL via the pfad_z parameter to cause the PHP interpreter to include remote code, enabling arbitra...
Sql injection
SQL injection vulnerability in news.php in dB Masters Curium CMS 1.03 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter...
CVE-2007-0765
SQL injection vulnerability in news.php in dB Masters Curium CMS 1.03 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter...
CVE-2007-0765
CVE-2007-0765 affects the dB Masters Curium CMS (version 1.03 and earlier). The vulnerability is a SQL injection in news.php where the attacker can manipulate the c_id parameter to execute arbitrary SQL commands. The NVD entry lists a NETWORK -based, LOW -complexity exploit with no authentication...
MySQL 4.x5.0 (Windows) - User-Defined Function Command Execution
MySQL 4.x5.0 Windows - User-Defined Function Command Execution -- raptorwinudf.sql - A MySQL UDF backdoor kit for Windows -- Copyright c 2007 Marco Ivaldi -- -- This is a MySQL backdoor kit for Windows based on the UDFs User Defined -- Functions mechanism. Use it to spawn a reverse shell netcat U...
MySQL 4.x/5.0 (Windows) - User-Defined Function Command Execution
-- raptorwinudf.sql - A MySQL UDF backdoor kit for Windows -- Copyright c 2007 Marco Ivaldi -- -- This is a MySQL backdoor kit for Windows based on the UDFs User Defined -- Functions mechanism. Use it to spawn a reverse shell netcat UDF on port -- 80/tcp or to execute single OS commands exec UDF...
SMA-DB 0.3.9 - settings.php Remote File Inclusion
SMA-DB 0.3.9 - settings.php Remote File Inclusion To ConTacT mE:wWw.Asb-May.net/bb ScRiPt:-http://people.ee.ethz.ch/dmaeder/bluevirus/downloader.php?filename=U01BLURC&referrer=hots Discovered By:- ThE dE@Th Settings.php:- includeonce$pfadz."scripts/session.php";...
SMA-DB 0.3.9 - 'settings.php' Remote File Inclusion
To ConTacT mE:wWw.Asb-May.net/bb ScRiPt:-http://people.ee.ethz.ch/dmaeder/bluevirus/downloader.php?filename=U01BLURC&referrer=hots Discovered By:- ThE dE@Th Settings.php:- includeonce$pfadz."scripts/session.php"; ExPlOiT:-http://www.Site.com/theme/settings.php?pfadz=Shell milw0rm.com 2007-02-05...
SMA-DB <= 0.3.9 (settings.php) Remote File Inclusion Vulnerability
No description provided by source. To ConTacT mE:wWw.Asb-May.net/bb ScRiPt:-http://people.ee.ethz.ch/dmaeder/bluevirus/downloader.php?filename=U01BLURC&referrer=hots Discovered By:- ThE dE@Th AsB-MaY DiScOvEr ExPlIoTs Gr0uP Settings.php:- includeonce$pfadz."scripts/session.php";...
SMA-DB <= 0.3.9 (settings.php) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================== SMA-DB Settings.php:- includeonce$pfadz."scripts/session.php"; ExPlOiT:-http://www.Site.com/theme/settings.php?pfadz=Shell 0day.today 2018-04-11...
dB Masters' Curium CMS <= 1.03(c_id) Remote Blind SQL Injection Vulnerability
Title : dB Masters' Curium CMS = 1.03cid Remote Blind SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.dbmasters.net $$ : Free Dork : Powered by dB Masters' Curium CMS 1 DorkEx : http://www.google.com.tr/search?q=Powered+by+dB+Masters27+Curium+CMS+1&hl=tr&start=0&sa=N In...
dB Masters Curium CMS <= 1.03 (c_id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ======================================================================= dB Masters Curium CMS = 1.03 cid Remote SQL Injection Vulnerability ======================================================================= Title : dB Masters' Curium...
dB Masters Curium CMS 1.03 - c_id SQL Injection
dB Masters Curium CMS 1.03 - cid SQL Injection Title : dB Masters' Curium CMS = 1.03cid Remote Blind SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.dbmasters.net $$ : Free Dork : Powered by dB Masters' Curium CMS 1 DorkEx :...
Stack overflow
Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control NCTAudioFile2.dll, as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include 1 NCTsoft NCTAudioStudio, NCTAudioEdito...