aflog 1.01 comments.php XSS / SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= aflog 1.01 comments.php XSS / SQL Injection Vulnerability ========================================================= Name: aflog 1.01 and possibly earlier Webiste: http://aflog.org/...

Integer overflow

Unspecified vulnerability in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6355...

DEBIAN-CVE-2007-6355

Integer overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6354...

DEBIAN-CVE-2007-6354

Unspecified vulnerability in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6355...

CVE-2007-6356

The CVE-2007-6356 issue affects exiftags prior to version 1.01, where cyclical EXIF IFD references in JPEG metadata can cause a denial of service (infinite loop). Public references show remediation across Debian/Etch and Sarge updates fixing these issues (0.98-1.1+etch1 and 0.98-1.1+0sarge1; late...

ezchatbox-xss.txt

EZChatbox 1.01 XSS --------------------- Author : ShAy6oOoN --------------------- Group : PitBull Crew --------------------- Script : EZChatbox 1.01 --------------------- Download : http://downloads.sourceforge.net/ezchatbox/EzChatBox-1.01.zip?modtime=1115115847&bigmirror=0 ---------------------...

CVE-2007-5163

PHP remote file inclusion vulnerability in includes/functions/layout.php in Nexty 1.01.A Beta allows remote attackers to execute arbitrary PHP code via a URL in the rel parameter. NOTE: this issue is disputed by CVE because the applicable include is in a function that is not called on a direct...

CVE-2007-5163

The CVE concerns Nexty 1.01.A Beta and a PHP remote file inclusion in includes/functions/layout.php exploited via the rel parameter to run arbitrary PHP. The issue is disputed by CVE because the include occurs in a function not called on direct request. Connected sources corroborate the vulnerabi...

Sql injection

SQL injection vulnerability in viewitem.php in DL PayCart 1.01 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

CVE-2007-4604

SQL injection vulnerability in viewitem.php in DL PayCart 1.01 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

paycart-sql.txt

!/usr/bin/perl -w use HTTP::Request; use LWP::UserAgent; --------------------------------------------------------------------------------- scripts : DL PayCart 1.01 - c 2006 Discovered By : irvian scripts site : http://www.dinkumsoft.com/ Thanks To bot : sqlscan, hantuinternet, xcart chanell :...

DL PayCart 1.01 - viewitem.php?ItemID Blind SQL Injection

DL PayCart 1.01 - viewitem.php?ItemID Blind SQL Injection !/usr/bin/perl -w use HTTP::Request; use LWP::UserAgent; --------------------------------------------------------------------------------- scripts : DL PayCart 1.01 - c 2006 Discovered By : irvian scripts site : http://www.dinkumsoft.com/...

sPHPell 1.01 - Multiple Remote File Inclusions

sPHPell 1.01 - Multiple Remote File Inclusions sphpell - 1.01 Remote File Include --------------------------------------------------------------------------------- Bulan: Cyber-security // Cyber-security.org --------------------------------------------------------------------------------- script...

sPHPell 1.01 Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== sPHPell 1.01 Multiple Remote File Inclusion Vulnerabilities =========================================================== sphpell - 1.01 Remote File Include...

Authentication flaw

TutorialCMS 1.01 and earlier, when registerglobals is enabled, allows remote attackers to bypass authentication via the 1 loggedIn and 2 activated parameters to a login.php, b headerLinks.php, c submit1.php, d myFav.php, and e userCP.php...

Directory traversal

Directory traversal vulnerability in Rajneel Lal TotaRam USP FOSS Distribution 1.01 allows remote attackers to read arbitrary files via a .. dot dot in the dnld parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in signup.php in CLBOX 1.01 allows remote attackers to execute arbitrary PHP code via a URL in the header parameter. NOTE: this issue has been disputed by a reliable third party, stating that header is defined through an include file before use...

CVE-2007-1631

PHP remote file inclusion vulnerability in signup.php in CLBOX 1.01 allows remote attackers to execute arbitrary PHP code via a URL in the header parameter. NOTE: this issue has been disputed by a reliable third party, stating that header is defined through an include file before use...

CVE-2007-1631

PHP remote file inclusion vulnerability in signup.php in CLBOX 1.01 allows remote attackers to execute arbitrary PHP code via a URL in the header parameter. NOTE: this issue has been disputed by a reliable third party, stating that header is defined through an include file before use...

CVE-2007-1631

CVE-2007-1631 concerns CLBOX 1.01, where the vulnerable file is signup.php and a remote attacker can cause arbitrary PHP code execution via a URL in the header parameter. The underlying cause is described as a PHP remote file inclusion vulnerability, with the header being defined through an inclu...