Format string

Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow 1 remote attackers to execute arbitrary code via format string specifiers in a GET request to the HTTP server component when logging is enabled, and allow 2 remote authenticated users t...

CVE-2009-4769: Use of Externally-Controlled Format String

Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow 1 remote attackers to execute arbitrary code via format string specifiers in a GET request to the HTTP server component when logging is enabled, and allow 2 remote authenticated users t...

stftp 1.10 - PWD Response Remote Stack Overflow (PoC)

stftp 1.10 - PWD Response Remote Stack Overflow PoC !/usr/bin/python stftp C: " + command else: print"S - C: " + command0:80 + " ..." self.s.sendcommand+'\r\n' def getCommandself, size=1024: ret = self.s.recvsize; if lenret S: " +ret else: print "C - S: " +ret0:80 + " ..." return ret def initself...

stftp <= 1.10 (PWD Response) Remote Stack Overflow PoC

Exploit for linux platform in category dos / poc ====================================================== stftp C: " + command else: print"S - C: " + command0:80 + " ..." self.s.sendcommand+'\r\n' def getCommandself, size=1024: ret = self.s.recvsize; if lenret S: " +ret else: print "C - S: " +ret0:...

CVE-2008-6639

Cross-site request forgery CSRF vulnerability in admin.php in AjaXplorer 2.3.3 and 2.3.4 allows remote attackers to hijack the authentication of administrators for requests that modify passwords via the updateuserpwd action...

CVE-2008-6479: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the "change password" feature in the VZPP web interface for Parallels Virtuozzo 25.4.swsoft build 3.0.0-25.4.swsoft allows remote attackers to modify the password via a link or IMG tag to vz/cp/pwd...

CVE-2008-6258

SQL injection vulnerability in users.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the 1 UserID and 2 Pwd parameters. NOTE: this might be related to CVE-2004-2108...

CVE-2008-6258: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in users.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the 1 UserID and 2 Pwd parameters. NOTE: this might be related to CVE-2004-2108...

Graugon Forum 1 - id Command Injection SQL Injection

Graugon Forum 1 - id Command Injection SQL Injection !/usr/bin/perl |--------------------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

CVE-2009-0458: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in admin/loginsubmit.php in Whole Hog Ware Support 1.x allow remote attackers to execute arbitrary SQL commands via 1 the uid parameter aka Username field or 2 the pwd parameter aka Password field. NOTE: some of these details are obtained from third party...

CVE-2009-0459: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in admin/loginsubmit.php in Whole Hog Password Protect: Enhanced 1.x allow remote attackers to execute arbitrary SQL commands via 1 the uid parameter aka Username field or 2 the pwd parameter aka Password field. NOTE: some of these details are obtained from...

Sql injection

SQL injection vulnerability in the login directory in AlstraSoft Web Host Directory allows remote attackers to execute arbitrary SQL commands via the pwd parameter...

CVE-2008-5650: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the login directory in AlstraSoft Web Host Directory allows remote attackers to execute arbitrary SQL commands via the pwd parameter...

CVE-2008-4321

Buffer overflow in FlashGet formerly JetCar FTP 1.9 allows remote FTP servers to execute arbitrary code via a long response to the PWD command...

CVE-2008-4321: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in FlashGet formerly JetCar FTP 1.9 allows remote FTP servers to execute arbitrary code via a long response to the PWD command...

FlashGet FTP PWD buffer overflow

Added: 08/27/2008 CVE: CVE-2008-4321 BID: 30685 OSVDB: 47457 Background FlashGet is an FTP client formerly known as JetCar. Problem A buffer overflow in FlashGet allows command execution when a user connects to an FTP server which sends a specially crafted PWD response. Resolution Use a different...

FlashGet FTP PWD buffer overflow

Added: 08/27/2008 CVE: CVE-2008-4321 BID: 30685 OSVDB: 47457 Background FlashGet is an FTP client formerly known as JetCar. Problem A buffer overflow in FlashGet allows command execution when a user connects to an FTP server which sends a specially crafted PWD response. Resolution Use a different...

FlashGet FTP PWD Response Remote Buffer Overflow Vulnerability

This host is running FlashGet, which is prone to Remote Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: secpodflashgetftppwdbofvuln900203.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: FlashGet FTP PWD Response Remote Buffer Overflow Vulnerability. Authors: Veerendra GG Copyrigh...

FlashGet FTP PWD Response Remote Buffer Overflow Vulnerability

FlashGet is prone to a remote buffer overflow vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FlashGet 1.9.0.1012 (FTP PWD Response) BOF Exploit (safeseh)

No description provided by source. !/usr/bin/perl ksOSe 08/17/2008 bypass safeseh using flash9f.ocx. use warnings; use strict; use IO::Socket; win32exec - EXITFUNC=seh CMD=calc Size=160 Encoder=PexFnstenvSub http://metasploit.com my $shellcode =...