CVE-2004-2636

TinyWeb 1.9 allows remote attackers to read source code of scripts via "/./" in the URL...

ASPS Shopping Cart Professional and Lite XSS vuln

ASPS Shopping Cart Professional and Lite XSS vuln Vuln. dicovered by : r0t Date: 3 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/asps-shopping-cart-professional-and.html Vendor:http://www.aspsolutions.com.au/ affected version: ASPS Shopping Cart Professional 2.9d and prior ASPS...

Free ClickBank Search Engine SQL inj. vuln.

Free ClickBank Search Engine SQL inj. vuln. Vuln. dicovered by : r0t Date: 1 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/free-clickbank-search-engine-sql-inj.html Vendor:http://phpfreebies.com/free-clickbank-search-engine-script.php affected version:1.0 and prior Product...

QualityPPC XSS vuln.

QualityPPC XSS vuln. Vuln. dicovered by : r0t Date: 1 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/qualityppc-xss-vuln.html Vendor:http://www.qualityebiz.com/main/qppc.php affected version:1553 and prior Product Description: QualityPPC has the latest technology which offers you...

Confluence – the Enterprise Wiki, XSS vuln.

Confluence – the Enterprise Wiki, XSS vuln. Vuln. dicovered by : r0t Date: 2 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/confluence-enterprise-wiki-xss-vuln.html Vendor:http://www.atlassian.com/software/confluence/ affected version: 2.0.1 Build:321 Nov 28, 2005 Product...

NetClassifieds all versions SQL inj. vuln

NetClassifieds all versions SQL inj. vuln Vuln. dicovered by : r0t Date: 1 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/netclassifieds-all-versions-sql-inj.html Vendor:http://scriptdevelopers.net/ affected version: NetClassifieds Premium Edition 1.0.1 NetClassifieds Professional...

Lore SQL inj. vuln.

Lore SQL inj. vuln. Vuln. dicovered by : r0t Date: 1 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/lore-sql-inj-vuln.html Vendor:http://www.pineappletechnologies.com/products/lore/ affected version: Tested on 1.5.4 Product Description: Lore is a professional knowledge base...

AngelShell: let all the forward program to achieve the reverse connection application papers-the vulnerability warning-the black bar safety net

Nowserviceis almost entirely put in a hardware firewall, hard to penetrate, only to find that with a hardware Firewall, the party pooper! What TerminalService, what Radmin and the like in a controlled manner do not even think. Tried, found that almost all support reverse connection, the forward...

gmailbug.txt

Gmail Bug - INTRODUCTION This bug has already been corrected, that's why it's been published. In this manual you will see step by step how to exploit Gmail's vulnerability, that gave you access to any account, reported by Anelkaos, colaborator of elhacker.net's forum and patched by Google by...

Have to say by the campus network see Network Security status-vulnerability warning-the black bar safety net

Preface originally really do not want to write this article, but really can not let people endure. Did not expect the school campus network security situation is actually so bad, one of the most impressive Willy-nilly. Or administrator of quality and safety awareness. Status of the recall a year...

KBase Express SQL inj. vuln.

KBase Express SQL inj. vuln. Vuln. dicovered by : r0t Date: 29 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/kbase-express-sql-inj-vuln.html Vendor:http://www.sensationdesigns.com/products/scripts/kbaseexpress/ affected version: 1.0.0 and prior Product Description: KBase Express ...

phpWTF Full Path Disclosure vuln.

phpWTF Full Path Disclosure vuln. Vuln. dicovered by : r0t Date: 29 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/phpwtf-full-path-disclosure-vuln.html Vendor:http://retran.com/phpWTF/ affected version:v0.2.3 and prior Product Description: The phpWTF project: when you don't know...

SocketKB 1.1.x Vuln.

SocketKB 1.1.x Vuln. Vuln. dicovered by : r0t Date: 29 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/socketkb-11x-vuln.html Vendor:http://www.socketkb.com affected version: 1.1.0 and prior 1. Input passed to the "node" and "artid" parameter isn't properly sanitised before being...

Netzbrett 1.5.1 SQL inj. vuln.

Netzbrett 1.5.1 SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/netzbrett-151-sql-inj-vuln.html Vendor:http://www.weaverslave.ws/index.32.html affected version: 1.5.1 and prior Product Description: Netzbrett is a Web board / forum...

K-Search Multiple vuln.

K-Search Multiple vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/k-search-multiple-vuln.html Vendor:http://turn-k.net/k-search affected version:1.0 and prior Product Description: K-Search is very fast and highly customizable meta-search...

SDMS 2.0 SQL inj. vuln.

Simple Document Management System SQL injection Vuln. Vuln. dicovered by : r0t Date: 27 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/sdms-20-sql-inj-vuln.html Vendor:http://sdms.cafuego.net/ affected version: 2.0-CVS and prior Product Description: SDMS uses PHP to provide you wi...

Geeklog 1.4.x Full Path Disclosure vuln.

Geeklog 1.4.x Full Path Disclosure vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/geeklog-14x-full-path-disclosure-vuln.html Vendor:http://www.geeklog.net/ affected version:1.4.0 Beta 1 and prior Product Description: Geeklog is a Web Portal...

edmoBBS SQL inj. vuln.

edmoBBS SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/edmobbs-sql-inj-vuln.html Vendor:http://www.upyournet.com/edmobbs/index.php affected version: V0.9 and prior Product Description: edmoBBS is not a cluttered and complex board...

Zainu 2.x SQL inj. vuln.

Zainu 2.x SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/zainu-2x-sql-inj-vuln.html Vendor:http://www.zainu.com affected version: 2.x and prior Product Description: Zainu lets you create and maintain professional music videos websit...

Babe Logger V2 Sql inj. vuln.

Babe Logger V2 Sql inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/babe-logger-v2-sql-inj-vuln.html Vendor:http://13scripts.com/ affected version: V2 and prior Product Description: This script is geared towards babe blog type sites but c...