CVE-2007-1167

CVE-2007-1167 affects deV!L`z Clanportal (DZCP) prior to or including 1.4.5. The issue resides in inc/filebrowser/browser.php, where an attacker can trigger information disclosure by using the inc/mysql.php value of the file parameter, allowing remote retrieval of MySQL data. This is a remote, un...

CVE-2007-1167: Exposure of Sensitive Information to an Unauthorized Actor

inc/filebrowser/browser.php in deV!Lz Clanportal DZCP 1.4.5 and earlier allows remote attackers to obtain MySQL data via the inc/mysql.php value of the file parameter...

DZCP (deV!L_z Clanportal) 1.4.5 - Remote File Disclosure

DZCP deV!Lz Clanportal 1.4.5 - Remote File Disclosure DZCP Devilz Clanportal = 1.4.5 Mysql Data viewable Found by: Kiba Solution: Install security Fix! Exploit: http://SITE/PATH/inc/filebrowser/browser.php?file=inc/mysql.php Example:...

DZCP (deV!L_z Clanportal) 1.4.5 - Remote File Disclosure

DZCP Devilz Clanportal = 1.4.5 Mysql Data viewable Found by: Kiba Solution: Install security Fix! Exploit: http://SITE/PATH/inc/filebrowser/browser.php?file=inc/mysql.php Example: http://www.example.com/dzcp/inc/filebrowser/browser.php?file=inc/mysql.php milw0rm.com 2007-02-21...

deV!Lz Clanportal [DZCP] <= 1.4.5 Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ====================================================================== deV!Lz Clanportal DZCP = 1.4.5 Remote File Disclosure Vulnerability ====================================================================== DZCP Devilz Clanportal = 1.4....

CVE-2006-7019

phpwcms 1.2.5-DEV and earlier, and 1.1 before RC4, allows remote attackers to execute arbitrary code via crafted arguments to the 1 textevento and 2 emaileventonomeevento parameters to phpwcmscodesnippets/mailfileform.php and sampleextphp/mailfileform.php, which is processed by the renderPHPcode...

Advanced Poll <= 2.0.5-dev Remote Code Execution Exploit

Exploit for unknown platform in category web applications ======================================================== Advanced Poll = 2.0.5-dev textfile RCE. date: 30/07/06 PHCKSEC c 2001-2006. Hey, what a mad world! use strict; use warnings; use LWP::UserAgent; use MD5; args: http://url/apollpath c...

Exploits Dev-C++ 4.9.9.2 Stack Overflow

No description provided by source. !/usr/bin/env python print "--------------------------------------------------------------" print "Dev-C++ 4.9.9.2 Stack Overflow" print "url: http://www.bloodshed.net/" print "author: shinnai" print "mail: shinnaiatautisticidotorg" print "site:...

Bloodshed Dev-C++ buffer overflow

Buffer overflow on oversized string in .cpp file...

Bloodshed Dev-C++ CPP源文件缓冲区溢出漏洞

Bloodshed Dev-C++是一款C++ 开发工具。 Bloodshed Dev-C++处理CPP文件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 构建恶意CPP文件，诱使用户打开可触发此漏洞。 Bloodshed Software Dev-C++ 4.9.9 .2 目前没有解决方案提供,请关注以下链接： http://www.bloodshed.net/dev/devcpp.html !/usr/bin/env python print...

Stack overflow

Stack-based buffer overflow in Bloodshed Dev-C++ 4.9.9.2 allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long line in a .cpp file...

CVE-2007-0643

Stack-based buffer overflow in Bloodshed Dev-C++ 4.9.9.2 allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long line in a .cpp file...

CVE-2007-0643

CVE-2007-0643 affects Bloodshed Dev-C++ 4.9.9.2. It is a stack-based buffer overflow triggered by a long line in a .cpp file, allowing user-assisted remote attackers to cause a denial of service and potentially execute arbitrary code. No remediation details are provided in the supplied documents....

EUVD-2007-0641

Stack-based buffer overflow in Bloodshed Dev-C++ 4.9.9.2 allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long line in a .cpp file...

CVE-2007-0643

Stack-based buffer overflow in Bloodshed Dev-C++ 4.9.9.2 allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long line in a .cpp file...

Sql injection

Multiple SQL injection vulnerabilities in the generatecsv function in classes/class.news.php in X-dev xNews 1.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id, 2 from, and 3 q parameters, different vectors than CVE-2007-0569. NOTE: The provenance of this...

CVE-2007-0630

Multiple SQL injection vulnerabilities in the generatecsv function in classes/class.news.php in X-dev xNews 1.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id, 2 from, and 3 q parameters, different vectors than CVE-2007-0569. NOTE: The provenance of this...

CVE-2007-0630

CVE-2007-0630 describes multiple SQL injection vulnerabilities in the generate_csv function of X-dev xNews 1.3 and earlier. The affected component is generate_csv in classes/class.news.php, with vulnerable parameters (id, from, q). The issue enables remote attackers to execute arbitrary SQL comma...

CVE-2007-0630

Multiple SQL injection vulnerabilities in the generatecsv function in classes/class.news.php in X-dev xNews 1.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id, 2 from, and 3 q parameters, different vectors than CVE-2007-0569. NOTE: The provenance of this...

CVE-2007-0630: Undefined Security Weakness

Multiple SQL injection vulnerabilities in the generatecsv function in classes/class.news.php in X-dev xNews 1.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id, 2 from, and 3 q parameters, different vectors than CVE-2007-0569. NOTE: The provenance of this...