Lucene search
+L

8610 matches found

securityvulns
securityvulns
added 2009/08/25 12:00 a.m.54 views

Infinity <= v2.X.X (Local File Disclosure/Auth Bypass) Vulnerabilities

-----------------Infinity = v2.X.X Local File Disclosure/Auth Bypass Vulnerabilities------------------------- Script : Infinity version : 2.X.X Language: PHP Site: http://www.dimofinf.net/ Author: SwEET-DeViL need magicquotesgpc = Off -----...

0.5AI score
SaveExploits0
zdt
zdt
added 2009/08/24 12:00 a.m.23 views

humanCMS (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================== humanCMS Auth Bypass SQL Injection Vulnerability ================================================== f KHatr Zfaft Zenta9 f Zfaft Galo ya khir CHirbakhzer + humanCMS Auth Bypass SQL Injecti...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2009/08/24 12:00 a.m.36 views

Squid < 3.1.4 External Auth Header Parser DoS Vulnerabilities

Squid is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

5CVSS6.3AI score0.34031EPSS
SaveExploits1References3
seebug.org
seebug.org
added 2009/08/24 12:00 a.m.23 views

Arcade Trade Script 1.0b (Auth Bypass) Insecure Cookie Handling Vuln

No description provided by source. ====================================================================== » Script : Arcade Trade Script v.1.0 Insecure Cookie Handling Vuln » Language : php » Script site : http://www.arcadetradescript.com » Founder: Mr.tro0oqy - from Yemen » Gr44tz to: H-...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2009/08/24 12:00 a.m.18 views

humanCMS (Auth Bypass) SQL Injection Vulnerability

No description provided by source. f KHatr Zfaft Zenta9 f Zfaft Galo ya khir CHirbakhzer + humanCMS Auth Bypass SQL Injection Vulnerability + Discovered by next + www.sa3eka.com www.m4r0c-s3curity.cc + vie.0athotmail.com + Home Page : http://www.squarelabel.com "humanCMS site description" + Auth...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2009/08/24 12:00 a.m.25 views

humanCMS SQL Injection

f KHatr Zfaft Zenta9 f Zfaft Galo ya khir CHirbakhzer + humanCMS Auth Bypass SQL Injection Vulnerability + Discovered by next + www.sa3eka.com www.m4r0c-s3curity.cc + vie.0athotmail.com + Home Page : http://www.squarelabel.com "humanCMS site description" + Auth Bypass + expolit : username : ' or'...

0.2AI score
SaveExploits0
Prion
Prion
added 2009/08/18 9:00 p.m.29 views

Code injection

The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function...

5CVSS6.3AI score0.34031EPSS
SaveExploits1References12Affected Software1
NVD
NVD
added 2009/08/18 9:00 p.m.28 views

CVE-2009-2855

The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function...

5CVSS6.2AI score0.34031EPSS
SaveExploits1References12
OSV
OSV
added 2009/08/18 9:00 p.m.15 views

CVE-2009-2855

The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function...

6.2AI score
SaveExploits0References12
OSV
OSV
added 2009/08/18 9:00 p.m.10 views

DEBIAN-CVE-2009-2855

The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function...

5CVSS6.8AI score0.34031EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2009/08/18 8:41 p.m.66 views

CVE-2009-2855

The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function...

5CVSS5.8AI score0.34031EPSS
SaveExploits1
Cvelist
Cvelist
added 2009/08/18 8:41 p.m.38 views

CVE-2009-2855

The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function...

6.1AI score0.34031EPSS
SaveExploits1References12
Packet Storm
Packet Storm
added 2009/08/18 12:00 a.m.23 views

Infinity 2.x.x Local File Disclosure

------------------Infinity ---------------------------------------------------------------------------------------------------------------- - +LFD Exploit: http://WWW.Site.Com/inf/?optionsstyledir=../include/db.php%00 http://WWW.Site.Com/inf/?optionsstyledir=../../../../../../etc/passwd%00...

7.4AI score
SaveExploits0
seebug.org
seebug.org
added 2009/08/18 12:00 a.m.23 views

Infinity &lt;= 2.x.x options[style_dir] Local File Disclosure Vulnerability

No description provided by source. ------------------Infinity = v2.X.X Local File Disclosure / Auth Bypass Vulnerabilities------------------------- ---------------------------------------------------------------------------------------------------------------- Script : Infinity version : 2.X.X...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2009/08/18 12:00 a.m.39 views

Infinity 2.x - 'options[style_dir]' Local File Disclosure

------------------Infinity ---------------------------------------------------------------------------------------------------------------- - +LFD Exploit: http://WWW.Site.Com/inf/?optionsstyledir=../include/db.php%00 http://WWW.Site.Com/inf/?optionsstyledir=../../../../../../etc/passwd%00...

6.8CVSS5.8AI score0.01917EPSS
SaveExploits2
exploitpack
exploitpack
added 2009/08/18 12:00 a.m.17 views

Infinity 2.x - options[style_dir] Local File Disclosure

Infinity 2.x - optionsstyledir Local File Disclosure ------------------Infinity ---------------------------------------------------------------------------------------------------------------- - +LFD Exploit: http://WWW.Site.Com/inf/?optionsstyledir=../include/db.php%00...

7.4AI score
SaveExploits0
UbuntuCve
UbuntuCve
added 2009/08/18 12:00 a.m.34 views

CVE-2009-2855

The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function...

5CVSS5.9AI score0.34031EPSS
SaveExploits1References2
seebug.org
seebug.org
added 2009/08/13 12:00 a.m.23 views

Shorty 0.7.1b (Auth Bypass) Insecure Cookie Handling Vulnerability

No description provided by source. Vulnerable Software -------------------------------------------------------------------------------- Script: Shorty v0.7.1 Beta maybe other versions URL:http://get-shorty.com/ Download:http://get-shorty.com/beta?force=download Google dork: intitle:"Shorty Beta"...

7.1AI score
SaveExploits0
zdt
zdt
added 2009/08/12 12:00 a.m.60 views

Shorty 0.7.1b (Auth Bypass) Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ================================================================== Shorty 0.7.1b Auth Bypass Insecure Cookie Handling Vulnerability ================================================================== Vulnerable Software...

7.1AI score
SaveExploits0
Prion
Prion
added 2009/08/10 4:30 p.m.17 views

Authentication flaw

profileedit.php TaskDriver 1.3 and earlier allows remote attackers to bypass authentication and gain administrative access by setting the auth cookie to "fook!admin."...

7.5CVSS7.8AI score0.02511EPSS
SaveExploits2References4Affected Software1
Rows per page
Query Builder