DNET Live-Stats 0.8 Local File Inclusion

Exploit Title: DNET Live-Stats 0.8 Local File Inclusion Date: 10-04-10 Author: Blake Software Link: http://sourceforge.net/projects/dnetlivestats/files/0.8/dnet-live-stats-0.8-rc8.zip/download Version: 0.8 rc8 Tested on: Windows XP SP3 running xampp lite The showlang parameter does not properly...

Sql injection

SQL injection vulnerability in statistics.php in PHPKick 0.8 allows remote attackers to execute arbitrary SQL commands via the gameday parameter in an overview action...

CVE-2010-3029

CVE-2010-3029 : PHPKick 0.8 has an SQL injection in the statistics.php file, exploitable via the gameday parameter in an overview action, allowing remote attackers to execute arbitrary SQL. The affected component is statistics.php within PHPKick 0.8; root cause is a vulnerability in input handlin...

CVE-2010-3029

SQL injection vulnerability in statistics.php in PHPKick 0.8 allows remote attackers to execute arbitrary SQL commands via the gameday parameter in an overview action...

PHPKick 0.8 - Statistics.php SQL Injection

PHPKick 0.8 - Statistics.php SQL Injection Exploit Title: PHPKick v0.8 statistics.php SQL Injection Date: August 8th, 2010 Time: 03:45am ; Author: garwga Version: 0.8 Google dork : "© 2004 PHPKick.de Version 0.8" Category: webapps/0day Code: see below ?php echo"\n\n"; echo"|=================PHPKi...

CVE-2009-4757

Stack-based buffer overflow in BrotherSoft EW-MusicPlayer 0.8 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long string in a malformed playlist .m3u file. NOTE: some of these details are obtained from third party information...

Mandriva Update for virt-manager MDVA-2010:055 (virt-manager)

Check for the Version of virt-manager OpenVAS Vulnerability Test Mandriva Update for virt-manager MDVA-2010:055 virt-manager Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in editprofile.php in Viscacha 0.8 Gold allow remote authenticated users to inject arbitrary web script or HTML via the 1 skype, 2 yahoo, 3 aol, 4 msn, or 5 jabber parameter in a profile2 action. NOTE: some of these details are obtained from third...

CVE-2009-4567

Multiple cross-site scripting XSS vulnerabilities in editprofile.php in Viscacha 0.8 Gold allow remote authenticated users to inject arbitrary web script or HTML via the 1 skype, 2 yahoo, 3 aol, 4 msn, or 5 jabber parameter in a profile2 action. NOTE: some of these details are obtained from third...

CVE-2009-4567

Multiple cross-site scripting XSS vulnerabilities in editprofile.php in Viscacha 0.8 Gold allow remote authenticated users to inject arbitrary web script or HTML via the 1 skype, 2 yahoo, 3 aol, 4 msn, or 5 jabber parameter in a profile2 action. NOTE: some of these details are obtained from third...

CVE-2009-4144

NetworkManager NM 0.7.2 does not ensure that the configured Certification Authority CA certificate file for a 1 WPA Enterprise or 2 802.1x network remains present upon a connection attempt, which might allow remote attackers to obtain sensitive information or cause a denial of service connectivit...

Viscacha 0.8 Gold persistant XSS vulnerability

No description provided by source. Viscacha 0.8 Gold persistant XSS vulnerability Found By: mrme Download: http://www.viscacha.org/ Tested On: Windows Vista Note: For educational purposes only POC Info: A regular user of the board can embed javascript code that could be executed within the contex...

Viscacha 0.8 Gold Cross Site Scripting

Viscacha 0.8 Gold persistant XSS vulnerability Found By: mrme Download: http://www.viscacha.org/ Tested On: Windows Vista Note: For educational purposes only POC Info: A regular user of the board can embed javascript code that could be executed within the context of the admin's browser. If the us...

Viscacha 0.8 Gold - Persistent Cross-Site Scripting

Viscacha 0.8 Gold - Persistent Cross-Site Scripting Viscacha 0.8 Gold persistant XSS vulnerability Found By: mrme Download: http://www.viscacha.org/ Tested On: Windows Vista Note: For educational purposes only POC Info: A regular user of the board can embed javascript code that could be executed...

Viscacha 0.8 Gold - Persistent Cross-Site Scripting

Viscacha 0.8 Gold persistant XSS vulnerability Found By: mrme Download: http://www.viscacha.org/ Tested On: Windows Vista Note: For educational purposes only POC Info: A regular user of the board can embed javascript code that could be executed within the context of the admin's browser. If the us...

httpdx 0.8 - FTP Server DeleteGetCreate DirectoriesFiles

httpdx 0.8 - FTP Server DeleteGetCreate DirectoriesFiles / Httpdx Server FTP v0.8 Remote Arbitrary Directories & files Vulnerability ------------------------------------------------------------------------- Arbitrary: ---------- The vulnerability is caused due to an input validation error when...

EW-MusicPlayer 0.8 - '.m3u' Local Buffer Overflow (PoC)

EW-MusicPlayer0.8 .M3U File Local Buffer Overflow PoC Discovered by SirGod - www.mortal-team.net & www.h4cky0u.org Download : http://www.brothersoft.com/ew-musicplayer-download-97163.html my $chars= "A" x 1337; my $file="sirgod.m3u"; openmy $FILE, "$file" or die "Cannot open $file: $!"; print $FI...

CVE-2009-1444

CVE-2009-1444 describes a PHP remote file inclusion vulnerability in WebPortal CMS 0.8-beta, affecting indexk.php via the lib_path parameter to execute arbitrary PHP code. The CVE entry cites a network attack vector with low complexity and no authentication, producing partial confidentiality, int...

PHPizabi 0.8 - notepad_body SQL Injection

PHPizabi 0.8 - notepadbody SQL Injection source: https://www.securityfocus.com/bid/34223/info PHPizabi is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromi...

PHPizabi 0.8 - 'notepad_body' SQL Injection

source: https://www.securityfocus.com/bid/34223/info PHPizabi is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data...