CVE-2008-0375: Undefined Security Weakness

Unspecified vulnerability in OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 allows remote attackers to set the password and obtain administrative access via unspecified vectors...

mds-disclose.txt

-------------------------------------------------------------- Million Dollar Script 2.0.14 Remote File Disclosure Vulnerability. -------------------------------------------------------------- download : http://www.milliondollarscript.com author : p4imi0 contact : [email protected] exploit :...

CVE-2007-6647

SQL injection vulnerability in index.php in w-Agora 4.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter...

Sql injection

SQL injection vulnerability in index.php in w-Agora 4.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2007-6647

SQL injection vulnerability in index.php in w-Agora 4.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2007-6647

SQL injection vulnerability in index.php in w-Agora 4.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2007-6647

CVE-2007-6647 is a SQL injection vulnerability in the web app component w-Agora ≤ 4.2.1, exploitable via the cat parameter in index.php. The connected sources confirm the affected product and vulnerability class but do not provide a patch version or remediation steps within the available document...

CVE-2007-6647: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in w-Agora 4.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter...

w-Agora 'index.php' SQL注入漏洞

BUGTRAQ ID: 27070 CNCAN ID:CNCAN-2008010213 w-Agora是一款基于PHP的WEB应用程序。 w-Agora不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于'index.php'脚本对用户提交的WEB参数处理缺少充分过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 W-Agora 4.2.1 目前没有解决方案提供： http://www.w-agora.net/en/index.php...

w-Agora <= 4.2.1 (cat) Remote SQL Injection Vulnerability

No description provided by source. W-Agora = 4.2.1 Class: SQL Injection Found: 30/12/2007 Remote: Yes Site: http://w-agora.net Download: http://sourceforge.net/project/showfiles.php?groupid=3413 Author: R00TATI Contact: [email protected] - http://www.ihteam.net Exploit :...

w-Agora <= 4.2.1 (cat) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= w-Agora = 4.2.1 cat Remote SQL Injection Vulnerability ========================================================= W-Agora = 4.2.1 Class: SQL Injection Found: 30/12/2007 Remote: Yes...

w-Agora 4.2.1 - cat SQL Injection

w-Agora 4.2.1 - cat SQL Injection W-Agora = 4.2.1 Class: SQL Injection Found: 30/12/2007 Remote: Yes Site: http://w-agora.net Download: http://sourceforge.net/project/showfiles.php?groupid=3413 Exploit :...

w-Agora 4.2.1 - 'cat' SQL Injection

W-Agora = 4.2.1 Class: SQL Injection Found: 30/12/2007 Remote: Yes Site: http://w-agora.net Download: http://sourceforge.net/project/showfiles.php?groupid=3413 Exploit :...

xeCMS 1.x - view.php Remote File Disclosure

xeCMS 1.x - view.php Remote File Disclosure -------------------------------------------------------------- xeCMS 1.x.x Remote File Disclosure Vulnerability. -------------------------------------------------------------- download : http://xecms.sunsite.dk/ author : p4imi0 contact : [email protected]...

ezcontents-disclosure.txt

-------------------------------------------------------------- ezContents Version 1.4.5 Remote File Disclosure Vulnerability. -------------------------------------------------------------- download : http://www.visualshapers.com/ author : p4imi0 contact : [email protected] exploit :...

EZContents 1.4.5 - 'index.php?link' Remote File Disclosure

-------------------------------------------------------------- ezContents Version 1.4.5 Remote File Disclosure Vulnerability. -------------------------------------------------------------- download : http://www.visualshapers.com/ author : p4imi0 contact : [email protected] exploit :...

Unfixed XSS vulnerability at www.a-w-p.com

Security researcher zuppergazi, has submitted on 09/03/2007 a cross-site-scripting XSS vulnerability affecting www.a-w-p.com, which at the time of submission ranked 8373173 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/03/2007. It is...

CVE-2007-3044

Unspecified vulnerability in the Map I/O Service xpwmap in Hitachi XP/W on HI-UX/WE2 before 20070319, and XP/W on HP-UX before 20070405, allows remote attackers to cause a denial of service via certain data to the service port...

Code injection

Unspecified vulnerability in the Map I/O Service xpwmap in Hitachi XP/W on HI-UX/WE2 before 20070319, and XP/W on HP-UX before 20070405, allows remote attackers to cause a denial of service via certain data to the service port...

CVE-2007-3044

The CVE-2007-3044 entry affects Hitachi XP/W on HI-UX/WE2 (before 20070319) and XP/W on HP-UX (before 20070405) where the Map I/O Service (xpwmap) is vulnerable. The issue allows remote attackers to cause a denial of service by sending certain data to the service port. The underlying root cause i...