Lucene search
+L

7630 matches found

Exploit DB
Exploit DB
•added 2009/02/17 12:00 a.m.•41 views

pHNews Alpha 1 - 'mod' SQL Injection

0x01 Informations: Name : pHNews Alpha 1 Download : http://www.hotscripts.com/listings/jump/download/50111/ Vulnerability : Sql Injection Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/header.php Code $mod = $GET"mod"; // If no mod is select...

5.8AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2009/02/17 12:00 a.m.•39 views

Fedora Update for libxml2 FEDORA-2008-7395

Check for the Version of libxml2 OpenVAS Vulnerability Test Fedora Update for libxml2 FEDORA-2008-7395 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

4.3CVSS6.8AI score0.02507EPSS
SaveExploits1References2
exploitpack
exploitpack
•added 2009/02/17 12:00 a.m.•25 views

pHNews Alpha 1 - mod SQL Injection

pHNews Alpha 1 - mod SQL Injection 0x01 Informations: Name : pHNews Alpha 1 Download : http://www.hotscripts.com/listings/jump/download/50111/ Vulnerability : Sql Injection Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/header.php Code $mod ...

0.7AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2009/02/17 12:00 a.m.•36 views

pHNews Alpha 1 SQL Injection

0x01 Informations: Name : pHNews Alpha 1 Download : http://www.hotscripts.com/listings/jump/download/50111/ Vulnerability : Sql Injection Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/header.php Code $mod = $GET"mod"; // If no mod is select...

0.6AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2009/02/17 12:00 a.m.•27 views

Fedora Update for libxml2 FEDORA-2008-8582

Check for the Version of libxml2 OpenVAS Vulnerability Test Fedora Update for libxml2 FEDORA-2008-8582 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

5CVSS6.7AI score0.08534EPSS
SaveExploits3References2
zdt
zdt
•added 2009/02/17 12:00 a.m.•29 views

pHNews Alpha 1 (header.php mod) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== pHNews Alpha 1 header.php mod SQL Injection Vulnerability =========================================================== 0x01 Informations: Name : pHNews Alpha 1 Download :...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2009/02/16 12:00 a.m.•33 views

Fedora Update for horde FEDORA-2008-2087

Check for the Version of horde OpenVAS Vulnerability Test Fedora Update for horde FEDORA-2008-2087 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

5.8CVSS7.6AI score0.01774EPSS
SaveExploits1References2
Prion
Prion
•added 2009/02/14 2:30 a.m.•21 views

Directory traversal

Directory traversal vulnerability in faqsupport/wce.download.php in WebBiscuits Modules Controller 1.1 allows remote attackers to read arbitrary files via a .. dot dot in the download parameter...

5CVSS7.2AI score0.02672EPSS
SaveExploits2References3Affected Software1
Prion
Prion
•added 2009/02/14 2:30 a.m.•28 views

Remote file inclusion

PHP remote file inclusion vulnerability in adminhead.php in WebBiscuits Modules Controller 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter...

7.5CVSS8.1AI score0.02294EPSS
SaveExploits2References3Affected Software1
NVD
NVD
•added 2009/02/14 2:30 a.m.•24 views

CVE-2008-6138

PHP remote file inclusion vulnerability in adminhead.php in WebBiscuits Modules Controller 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter...

7.5CVSS7.6AI score0.02294EPSS
SaveExploits2References3
NVD
NVD
•added 2009/02/14 2:30 a.m.•29 views

CVE-2008-6139

Directory traversal vulnerability in faqsupport/wce.download.php in WebBiscuits Modules Controller 1.1 allows remote attackers to read arbitrary files via a .. dot dot in the download parameter...

5CVSS6.7AI score0.02672EPSS
SaveExploits2References3
CVE
CVE
•added 2009/02/14 2:00 a.m.•62 views

CVE-2008-6138

The CVE-2008-6138 entry concerns a PHP remote file inclusion in adminhead.php of WebBiscuits Modules Controller 1.1 and earlier. The vulnerability allows an attacker to execute arbitrary PHP code by supplying a crafted URL in the path[docroot] parameter, enabling remote code execution. Affected s...

7.5CVSS7.8AI score0.02294EPSS
SaveExploits2References3Affected Software1
CVE
CVE
•added 2009/02/14 2:00 a.m.•59 views

CVE-2008-6139

CVE-2008-6139 describes a directory traversal vulnerability in WebBiscuits Modules Controller 1.1, where the download parameter in faqsupport/wce.download.php can be manipulated with .. to read arbitrary files. Supported by NVD/NIST records and multiple references; exploitation details are not de...

5CVSS6.8AI score0.02672EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
•added 2009/02/14 2:00 a.m.•37 views

CVE-2008-6138

PHP remote file inclusion vulnerability in adminhead.php in WebBiscuits Modules Controller 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter...

7.6AI score0.02294EPSS
SaveExploits2References3
Cvelist
Cvelist
•added 2009/02/14 2:00 a.m.•41 views

CVE-2008-6139

Directory traversal vulnerability in faqsupport/wce.download.php in WebBiscuits Modules Controller 1.1 allows remote attackers to read arbitrary files via a .. dot dot in the download parameter...

6.7AI score0.02672EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/02/14 12:00 a.m.•4 views

CVE-2008-6139: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in faqsupport/wce.download.php in WebBiscuits Modules Controller 1.1 allows remote attackers to read arbitrary files via a .. dot dot in the download parameter...

5CVSS6AI score0.02672EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/02/14 12:00 a.m.•4 views

CVE-2008-6138: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in adminhead.php in WebBiscuits Modules Controller 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter...

7.5CVSS6.4AI score0.02294EPSS
SaveExploits2References2
Fedora
Fedora
•added 2009/02/13 4:56 a.m.•40 views

[SECURITY] Fedora 9 Update: dahdi-tools-2.0.0-1.fc9

DAHDI stands for Digium Asterisk Hardware Device Interface. This package contains the userspace tools to configure the DAHDI kernel modules. DAHDI is the replacement for Zaptel, which must be renamed due to trademark issues...

5CVSS3.1AI score0.02715EPSS
SaveExploits1
Fedora
Fedora
•added 2009/02/12 8:38 p.m.•27 views

[SECURITY] Fedora 10 Update: python-fedora-0.3.9-1.fc10

Python modules that help with building Fedora Services. This includes a JS ON based auth provider for authenticating against FAS2 over the network and a client that handles communication with the servers. The client module can be used to build programs that communicate with Fedora Infrastructure'...

3.6AI score
SaveExploits0
Fedora
Fedora
•added 2009/02/12 8:37 p.m.•28 views

[SECURITY] Fedora 9 Update: python-fedora-0.3.9-1.fc9

Python modules that help with building Fedora Services. This includes a JS ON based auth provider for authenticating against FAS2 over the network and a client that handles communication with the servers. The client module can be used to build programs that communicate with Fedora Infrastructure'...

3.6AI score
SaveExploits0
Rows per page
Query Builder