99 matches found
CVE-2007-0405
CVE-2007-0405 affects Django 0.95: the LazyUser class in AuthenticationMiddleware does not properly cache the username across requests, allowing remote authenticated users to gain the privileges of a different user. Impact and exploit details are not provided beyond this description in the suppli...
CVE-2007-0404
bin/compile-messages.py in Django 0.95 does not quote argument strings before invoking the msgfmt program through the os.system function, which allows attackers to execute arbitrary commands via shell metacharacters in a 1 .po or 2 .mo file...
CVE-2007-0405
The LazyUser class in the AuthenticationMiddleware for Django 0.95 does not properly cache the user name across requests, which allows remote authenticated users to gain the privileges of a different user...
phpBB Admin Topic Action Logging Mod <= 0.94b File Include Vuln
No description provided by source. / \ \ \ ,, / / '-./.-' .--' '--. / / /""\ \ \ SpiderZ Hacking Security | | | | \ \ / / '..' Author: SpiderZ Admin Topic Action Logging Remote File Inclusion Vulnerability Version 0.95 Admin Topic Action Logging For: phpBB 2.0.x - 2.0.21 Site:...
phpBB Admin Topic Action Logging Mod 0.94b - Remote File Inclusion
phpBB Admin Topic Action Logging Mod 0.94b - Remote File Inclusion / \ \ \ ,, / / '-./.-' .--' '--. / / /""\ \ \ SpiderZ Hacking Security | | | | \ \ / / '..' Author: SpiderZ Admin Topic Action Logging Remote File Inclusion Vulnerability Version 0.95 Admin Topic Action Logging For: phpBB 2.0.x -...
phpBB Admin Topic Action Logging Mod <= 0.94b File Include Vuln
Exploit for unknown platform in category web applications =============================================================== phpBB Admin Topic Action Logging Mod | | \ \ / / '..' Author: SpiderZ Admin Topic Action Logging Remote File Inclusion Vulnerability Version 0.95 Admin Topic Action Logging Fo...
phpBB Admin Topic Action Logging Mod 0.94b - Remote File Inclusion
/ \ \ \ ,, / / '-./.-' .--' '--. / / /""\ \ \ SpiderZ Hacking Security | | | | \ \ / / '..' Author: SpiderZ Admin Topic Action Logging Remote File Inclusion Vulnerability Version 0.95 Admin Topic Action Logging For: phpBB 2.0.x - 2.0.21 Site: www.spiderz.altervista.org Site02:...
[SA21611] PHP iAddressBook "cat_name" Script Insertion Vulnerability
TITLE: PHP iAddressBook "catname" Script Insertion Vulnerability SECUNIA ADVISORY ID: SA21611 VERIFY ADVISORY: http://secunia.com/advisories/21611/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: PHP iAddressbook 0.x http://secunia.com/product/11678/ DESCRIPTION:...
Dia 0.8x/0.9x - Filename Remote Format String
source: https://www.securityfocus.com/bid/18078/info Dia is prone to a remote format-string vulnerability. This issue arises when the application handles specially crafted filenames. An attacker can exploit this vulnerability by crafting a malicious filename that contains format specifiers and th...
Exponent CMS 0.95 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/12358/info Exponent is reported prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user facilitating theft of cookie-based authentication...
CVE-2005-2736
CVE-2005-2736 describes a cross-site scripting (XSS) vulnerability in the web gallery application YaPiG (versions ≤ 0.95). The flaw arises from processing EXIF data (e.g., the Camera Model Tag) without sufficient sanitization, allowing an attacker to inject arbitrary web script or HTML that can b...
GTChat <= 0.95 Alpha (adduser) Remote Denial of Service Exploit
Exploit for cgi platform in category web applications =============================================================== GTChat newPeerAddr=$host,PeerPort=80,Proto='tcp' || die "Oh No! You broke teh server!"; print $ox "GET $lol HTTP/1.1\r\n"; print $ox "Accept: /\r\n"; print $ox "Accept-Language:...
GTChat 0.95 Alpha - adduser Remote Denial of Service
GTChat 0.95 Alpha - adduser Remote Denial of Service Use a high user for best results. /str0ke !/usr/bin/perl codez0red by VTECin5th Feel free to modify/break this script Crappy code is more effective = I accept no responsibility for misuse or abuse Usage: xxx.pl www.server.com /directorytochat/...
gtchatDoS.txt
!/usr/bin/perl use LWP::Simple; if @ARGV 3 print "\nUsage: $0 server path mode count for DoS\n"; print "sever - URL chat\n"; print "path - path to chat.pl\n"; print "mode - poc or dos,\n"; print " poc - simple check without DoS and exit,\n"; print " dos - DoS, you must set count for requests in 4...
GTChat <= 0.95 Alpha Remote Denial of Service Exploit
No description provided by source. !/usr/bin/perl use LWP::Simple; if @ARGV 3 print "\nUsage: $0 server path mode count for DoS\n"; print "sever - URL chat\n"; print "path - path to chat.pl\n"; print "mode - poc or dos,\n"; print " poc - simple check without DoS and exit,\n"; print " dos - DoS, y...
CVE-2005-0310
Exponent 0.95 allows remote attackers to obtain sensitive information via a direct HTTP request to 1 search.info.php, 2 permissions.info.php, 3 security.info.php, 4 formcontrol.php, or 5 filemodules.php, which reveals the path in an error message because the pathoscoreversion variable is undefine...
CVE-2005-0309
Multiple cross-site scripting XSS vulnerabilities in 1 index.php or 2 mod.php in Exponent 0.95 allow remote attackers to inject arbitrary web script or HTML via the module parameter...
CVE-2005-0309
The CVE-2005-0309 entry affects Exponent 0.95, with two vulnerable entry points: index.php and mod.php. The underlying issue is multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML through the module parameter. The description expl...
CVE-2002-0297
The CVE-2002-0297 entry applies to ScriptEase MiniWeb Server 0.95, where a buffer overflow in URL handling during HTTP requests can lead to a denial of service and may allow arbitrary code execution. Impact is described as availability impact (DoS) with potential code execution, but exploitation ...