CVE-2009-1908

Cross-site scripting XSS vulnerability in Skip 1.0.2 and earlier, and 1.1RC2 and earlier 1.1RC versions, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-1909

SQL injection vulnerability in Skip 1.0.2 and earlier, and 1.1RC2 and earlier 1.1RC versions, allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-1909

SQL injection vulnerability in Skip 1.0.2 and earlier, and 1.1RC2 and earlier 1.1RC versions, allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-1908

Cross-site scripting XSS vulnerability in Skip 1.0.2 and earlier, and 1.1RC2 and earlier 1.1RC versions, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-1909

CVE-2009-1909 affects SKIP from SKIP User Group; versions 1.0.2 and earlier, and 1.1RC2 and earlier 1.1RC contain a SQL injection vulnerability that allows remote execution of arbitrary SQL via unspecified vectors. Root cause is improper input handling in SKIP’s SQL paths. Impact includes potenti...

Buffer overflow

Multiple buffer overflows in DigiMode Maya 1.0.2 allow remote attackers to execute arbitrary code via a long string in a malformed 1 .m3u or 2 .m3l playlist file...

MyFirstCMS 1.0.2 File Deletion

--+++==========================================================================+++-- --+++========== MyFirstCMS = 1.0.2 Remote File Delete Vulnerability ==========+++-- --+++==========================================================================+++-- + Author : darkjoker + Site :...

MyFirstCMS 1.0.2 - Arbitrary File Delete

MyFirstCMS 1.0.2 - Arbitrary File Delete --+++==========================================================================+++-- --+++========== MyFirstCMS = 1.0.2 Remote File Delete Vulnerability ==========+++-- --+++==========================================================================+++-- +...

DigiMode Maya 1.0.2 (.m3u / .m3l files) Buffer Overflow PoCs

No description provided by source. DigiMode Maya 1.0.2 .M3U File Local Buffer Overflow PoC Discovered by SirGod - www.mortal-team.net & www.h4cky0u.org my $chars= "A" x 1337; my $file="sirgod.m3u"; openmy $FILE, "$file" or die "Cannot open $file: $!"; print $FILE $chars; close$FILE; print "$file...

DigiMode Maya 1.0.2 - '.m3u' / '.m3l' Buffer Overflow (PoC)

DigiMode Maya 1.0.2 .M3U File Local Buffer Overflow PoC Discovered by SirGod - www.mortal-team.net & www.h4cky0u.org my $chars= "A" x 1337; my $file="sirgod.m3u"; openmy $FILE, "$file" or die "Cannot open $file: $!"; print $FILE $chars; close$FILE; print "$file was created"; print "SirGod -...

DigiMode Maya 1.0.2 - .m3u .m3l Buffer Overflow (PoC)

DigiMode Maya 1.0.2 - .m3u .m3l Buffer Overflow PoC DigiMode Maya 1.0.2 .M3U File Local Buffer Overflow PoC Discovered by SirGod - www.mortal-team.net & www.h4cky0u.org my $chars= "A" x 1337; my $file="sirgod.m3u"; openmy $FILE, "$file" or die "Cannot open $file: $!"; print $FILE $chars;...

Code injection

Static code injection vulnerability in user/internettoolbar/edit.php in YourPlace 1.0.2 and earlier allows remote authenticated users to execute arbitrary PHP code into user/internettoolbar/index.php via the 1 fav1url, 2 fav1name, 3 fav2url, 4 fav2name, 5 fav3url, 6 fav3name, 7 fav4url, 8 fav4nam...

CVE-2008-6773

Static code injection vulnerability in user/internettoolbar/edit.php in YourPlace 1.0.2 and earlier allows remote authenticated users to execute arbitrary PHP code into user/internettoolbar/index.php via the 1 fav1url, 2 fav1name, 3 fav2url, 4 fav2name, 5 fav3url, 6 fav3name, 7 fav4url, 8 fav4nam...

Information disclosure

internettoolbar/edit.php in YourPlace 1.0.2 and earlier does not end execution when an invalid username is detected, which allows remote attackers to bypass intended restrictions and edit toolbar settings via an invalid username. NOTE: the provenance of this information is unknown; the details ar...

CVE-2008-6770

YourPlace 1.0.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to a database containing user credentials via a direct request for users.txt...

CVE-2008-6774

internettoolbar/edit.php in YourPlace 1.0.2 and earlier does not end execution when an invalid username is detected, which allows remote attackers to bypass intended restrictions and edit toolbar settings via an invalid username. NOTE: the provenance of this information is unknown; the details ar...

CVE-2008-6771

YourPlace 1.0.2 and earlier allows remote attackers to obtain sensitive system information via a direct request via a direct request to user/uploads/phpinfo.php, which calls the phpinfo function...

CVE-2008-6769

Unrestricted file upload vulnerability in upload.php in YourPlace 1.0.2 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file...

CVE-2008-6773

The CVE-2008-6773 entry concerns YourPlace 1.0.2 and earlier, where a static code injection flaw in user/internettoolbar/edit.php allows remote authenticated users to execute arbitrary PHP via 10 fav parameters, resulting in partial impact to confidentiality, integrity, and availability. The root...

CVE-2008-6773

Static code injection vulnerability in user/internettoolbar/edit.php in YourPlace 1.0.2 and earlier allows remote authenticated users to execute arbitrary PHP code into user/internettoolbar/index.php via the 1 fav1url, 2 fav1name, 3 fav2url, 4 fav2name, 5 fav3url, 6 fav3name, 7 fav4url, 8 fav4nam...