PT-2007-3012 · Clbox · Clbox

Name of the Vulnerable Software and Affected Versions: CLBOX version 1.01 Description: A remote file inclusion issue in the signup.php file allows remote attackers to execute arbitrary PHP code via a URL in the header parameter. However, it's noted that this issue has been disputed by a reliable...

CVE-2006-7014

admin.php in BloggIT 1.01 and earlier does not properly establish a user session, which allows remote attackers to gain privileges via a direct request...

LushiNews 1.01 - 'comments.php' SQL Injection

exploit2.asp 'Update: + Get Header 'Update: + Get Whois Info '=============================================================================================== % function functionControl1 setTimeout"functionControl2",2000; function functionControl2 ifdocument.form1.field1.value=="" alert"Exploit...

PT-2006-6442 · Rhadrix · Rhadrix If-Cms

Name of the Vulnerable Software and Affected Versions: Rhadrix If-CMS versions 1.01 through 2.07 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the rns parameter in the index.php...

CVE-2006-5496

Multiple cross-site scripting XSS vulnerabilities in Timothy Claason KnowledgeBank 1.01 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 index.php, 2 addknowledge.php, and 3 addscreenshot.php...

CVE-2006-5496

CVE-2006-5496 covers multiple XSS vulnerabilities in the Timothy Claason KnowledgeBank 1.01. The affected components are the web application scripts: index.php, addknowledge.php, and addscreenshot.php, where unspecified request parameters can be crafted to inject arbitrary web script or HTML. The...

BusyBox 1.01 - HTTPd Directory Traversal

source: https://www.securityfocus.com/bid/20067/info The httpd daemon of BusyBox is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the...

BusyBox 1.01 - HTTPd Directory Traversal

BusyBox 1.01 - HTTPd Directory Traversal source: https://www.securityfocus.com/bid/20067/info The httpd daemon of BusyBox is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary fil...

CVE-2006-4524

Multiple SQL injection vulnerabilities in loginverif.asp in Digiappz Freekot 1.01 allow remote attackers to execute arbitrary SQL commands via the 1 login or 2 password parameters. NOTE: some of these details are obtained from third party information...

CVE-2006-3056

SQL injection vulnerability in language.php in VBZooM 1.01 allows remote attackers to execute arbitrary SQL commands via the Action parameter...

CVE-2006-2254

Buffer overflow in filecpnt.exe in FileCOPA 1.01 allows remote attackers to cause a denial of service application crash via a username with a large number of newline characters...

php-atm.txt

PHP Advanced Transfer Manager Download users password hashes PHP Advanced Transfer Manager 1. Site:http://phpatm.free.fr/ ---------------------------------------------------- Bugs: http://victim.com/path/users/username ---------------------------------------------------- example:...

myquiz101.pl.txt

This Perl Exploit for MyQuiz 1.01 Arbitrary Command Execution Exploit. Athour : Hessam-x - www.hessamx.net +IHST : iran hackerz security team hackerz.ir Perl exploit !/usr/bin/perl = MyQuiz Remote Command Execution Exploit - By Hessam-x / www.hackerz.ir manual exploiting --...

[SA18281] MyBB Multiple Vulnerabilities

TITLE: MyBB Multiple Vulnerabilities SECUNIA ADVISORY ID: SA18281 VERIFY ADVISORY: http://secunia.com/advisories/18281/ CRITICAL: Moderately critical IMPACT: Unknown, Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: MyBB formerly MyBulletinBoard 1.x...

Ocean12 ASP Calendar Manager 1.0 - Authentication Bypass

Ocean12 ASP Calendar Manager 1.0 - Authentication Bypass source: https://www.securityfocus.com/bid/15329/info Ocean12 ASP Calendar Manager is prone to an authentication bypass vulnerability. This is due to to an access validation error in the application. The application does properly verify acce...

Ocean12 ASP Calendar Manager 1.0 - Authentication Bypass

source: https://www.securityfocus.com/bid/15329/info Ocean12 ASP Calendar Manager is prone to an authentication bypass vulnerability. This is due to to an access validation error in the application. The application does properly verify access privileges and allows the attacker to gain access to...

CVE-2002-1734

NewsPro 1.01 allows remote attackers to gain unauthorized administrator access by setting their authentication cookie to "logged,true"...

CVE-2002-1734

NewsPro 1.01 is vulnerable: remote attackers can gain unauthorized administrator access by setting the authentication cookie to "logged,true". The described root cause is a cookie-based authentication bypass. The available documents do not provide deeper technical details such as affected compone...

CVE-2004-1850

The Rage 1.01 and earlier allows remote attackers to cause a denial of service infinite loop via a TCP packet with the port and IP address set to zero...

CVE-2005-1424

StumbleInside GoText 1.01 stores sensitive username, mail address,and phone number information in plaintext in the GoText.bin file, which allows local users to obtain that information...