174 matches found
Information disclosure
Pyftpd 0.8.4 creates log files with predictable names in a temporary directory, which allows local users to cause a denial of service and obtain sensitive information...
CVE-2010-2072
Pyftpd 0.8.4 creates log files with predictable names in a temporary directory, which allows local users to cause a denial of service and obtain sensitive information...
QNX Neutrino 0.8.4 Atomic Edition - Remote Code Execution
!/usr/bin/perl Neutrino 0.8.4 Atomic Edition Perl exploit discovered & written by Ams [email protected] DESCRIPTION: First exploit destroys "/data/sess.php" file simply strips tags, then we are able to bypass authorization and using admin privelegies our exploit uploads basic shell to...
Neutrino 0.8.4 Atomic Edition Remote Code Execution Exploit
Exploit for unknown platform in category web applications =========================================================== Neutrino 0.8.4 Atomic Edition Remote Code Execution Exploit =========================================================== !/usr/bin/perl Neutrino 0.8.4 Atomic Edition Perl exploit...
CVE-2007-3204
SQL injection vulnerability in auth.php in Just For Fun Network Management System JFFNMS 0.8.4-pre2 allows remote attackers to execute arbitrary SQL commands via the pass parameter. NOTE: this issue reportedly exists because of an initial incomplete fix for CVE-2007-3190. The provenance of this...
JFFNms 0.8.3 - 'admin/adm/test.php' PHP Information Disclosure
source: https://www.securityfocus.com/bid/24414/info Just For Fun Network Management and Monitoring System JFFNMS is prone to multiple remote vulnerabilities, including a cross-site scripting issue, an SQL-injection issue, and multiple information-disclosure issues. An attacker can exploit these...
ProjectButler <= 0.8.4 (rootdir) Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications ==================================================================== ProjectButler = 0.8.4 rootdir Remote File Include Vulnerabilities ==================================================================== projectbutler-0.8.4 Remote File...
ProjectButler 0.8.4 - rootdir Remote File Inclusion
ProjectButler 0.8.4 - rootdir Remote File Inclusion projectbutler-0.8.4 Remote File Inclusion Vulnerability Download: http://prdownloads.sourceforge.net/projectbutler/projectbutler-0.8.4.tar.gz?download Found By: the master exploit: http://Target/Path/classes/Cache.class.php?rootdir=http://cmd.gi...
ProjectButler 0.8.4 - 'rootdir' Remote File Inclusion
projectbutler-0.8.4 Remote File Inclusion Vulnerability Download: http://prdownloads.sourceforge.net/projectbutler/projectbutler-0.8.4.tar.gz?download Found By: the master exploit: http://Target/Path/classes/Cache.class.php?rootdir=http://cmd.gif?...
Buffer overflow
Buffer overflow in MP3Info 0.8.4 allows attackers to execute arbitrary code via a long command line argument. NOTE: if mp3info is not installed setuid or setgid in any reasonable context, then this issue might not be a vulnerability...
CVE-2005-3413
Cross-site scripting XSS vulnerability in desktop.php in eyeOS 0.8.4 allows remote attackers to inject arbitrary web script or HTML via the motd parameter...
CVE-2005-3413
Cross-site scripting XSS vulnerability in desktop.php in eyeOS 0.8.4 allows remote attackers to inject arbitrary web script or HTML via the motd parameter...
CVE-2005-3413
EyeOS 0.8.4 contains a Cross-site scripting (XSS) vulnerability in desktop.php where the motd parameter is not properly sanitized, allowing remote attackers to inject arbitrary script or HTML. This could lead to user’s browser executing malicious code in the context of the affected eyeOS session....
DoS on irssi 0.8.4
DoS on irssi 0.8.4 current version 1. Aplication description: Irssi is a modular IRC client for UNIX systems. It runs on text mode user interface, or on graphic mode user using GTK+. You can donwload irssi and get more information about it from official website, http://www.irssi.org 2. Problem...