8651 matches found
phpAddEdit 1.3 - editform Local File Inclusion
phpAddEdit 1.3 - editform Local File Inclusion phpaddedit-1.3 LFI Author: nuclear script:http://sourceforge.net/projects/phpaddedit/ vuln:http://target.com/addedit-render.php?editform=../../../../../../../etc/passwd%00 vulnerable code: if !$formname && $GET"editform" $formname = $GET"editform";...
CVE-2008-5382
Cross-site request forgery CSRF vulnerability in I-O DATA DEVICE HDL-F160, HDL-F250, HDL-F300, and HDL-F320 firmware before 1.02 allows remote attackers to 1 change a configuration or 2 delete files as an authenticated user via unknown vectors. NOTE: the provenance of this information is unknown;...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in I-O DATA DEVICE HDL-F160, HDL-F250, HDL-F300, and HDL-F320 firmware before 1.02 allows remote attackers to 1 change a configuration or 2 delete files as an authenticated user via unknown vectors. NOTE: the provenance of this information is unknown;...
CVE-2008-5382
Cross-site request forgery CSRF vulnerability in I-O DATA DEVICE HDL-F160, HDL-F250, HDL-F300, and HDL-F320 firmware before 1.02 allows remote attackers to 1 change a configuration or 2 delete files as an authenticated user via unknown vectors. NOTE: the provenance of this information is unknown;...
CVE-2008-5382
The CVE concerns I-O DATA DEVICE HDL-F series (HDL-F160, HDL-F250, HDL-F300, HDL-F320) firmware prior to 1.02, where the web-based management interface is vulnerable to Cross-Site Request Forgery (CSRF). The underlying issue is CSRF in the administrative web UI, enabling remote attackers to perfo...
orkut-sqlxss.txt
Orkut clone By i-netsolutionXss/sql Multiple Remort Vulnerabilities + Script home : http://www.i-netsolution.com/orkutclone.html - Discovered By : d3b4g - Greetz : str0ke / All my freind Dork:N/A You Must register and login to perform this exploit Sql...
Design/Logic Flaw
os-prober in os-prober 1.17 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/mounted-map or 2 /tmp/raided-map temporary file. NOTE: the vendor disputes this issue, stating "the insecure code path should only ever run inside a d-i environment, which has no non-roo...
CVE-2008-5135
os-prober in os-prober 1.17 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/mounted-map or 2 /tmp/raided-map temporary file. NOTE: the vendor disputes this issue, stating "the insecure code path should only ever run inside a d-i environment, which has no non-roo...
CVE-2008-5135
os-prober in os-prober 1.17 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/mounted-map or 2 /tmp/raided-map temporary file. NOTE: the vendor disputes this issue, stating "the insecure code path should only ever run inside a d-i environment, which has no non-roo...
jobsiteinet-sql.txt
Job site scriptt Design by i-netsolution id SQL Injection Vulnerability Author: d3b4g Home : www.hotlism.org email: bl4ckendatgmaildotcom HomE script : http://www.demo.2daytemplates.com/ijobsearch/ Language : PHP Risk: High DorK : N/A -------------------------------------------------------------...
CVE-2008-4638
qioadmin in the Quick I/O for Database feature in Symantec Veritas File System VxFS on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, allows local users to read arbitrary files by causing qioadmin to write a file's content to standard error in an error message...
Code injection
qioadmin in the Quick I/O for Database feature in Symantec Veritas File System VxFS on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, allows local users to read arbitrary files by causing qioadmin to write a file's content to standard error in an error message...
CVE-2008-4638
qioadmin in the Quick I/O for Database feature in Symantec Veritas File System VxFS on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, allows local users to read arbitrary files by causing qioadmin to write a file's content to standard error in an error message...
Unfixed XSS vulnerability at www.sensizasla.net
Security researcher Alaim-i zaaf, has submitted on 14/10/2008 a cross-site-scripting XSS vulnerability affecting www.sensizasla.net, which at the time of submission ranked 424541 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/07/2009. It is...
CVE-2008-4468
SQL injection vulnerability in viewnews.php in Vastal I-Tech Share Zone allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4465
SQL injection vulnerability in viewmags.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2008-4466
SQL injection vulnerability in viewproductscat.php in Vastal I-Tech Cosmetics Zone allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2008-4464
SQL injection vulnerability in viewmags.php in Vastal I-Tech Mag Zone allows remote attackers to execute arbitrary SQL commands via the catid parameter...