Eaton xComfort Ethernet Communication Interface (ECI) Information Disclosure Vulnerability

The xComfort Ethernet Communication Interface ECI is a building automation system. An information disclosure vulnerability exists in Eaton xComfort Ethernet Communication Interface ECI versions 1.07 and earlier, which can be exploited by remote attackers to access backup files and system logs...

DeluxeBB <= 1.07 (cp.php) Create Admin Exploit

No description provided by source. !/usr/bin/perl DeluxeBB = 1.07 Create Admin Exploit www.h4ckerz.com / www.hackerz.ir / www.aria-security.net ./2006-6-25 Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use IO::Socket; use LWP::UserAgent; use HTTP::Cookies; $host = $ARGV0; $uname = $ARGV...

XOOPS Module XFsection <= 1.07 (articleid) BLIND SQL Injection Exploit

No description provided by source. html head titleXOOPS Module XFsection = 1.07 articleid BLIND SQL Injection Exploit/title script type=text/javascript //'=============================================================================================== //'Script Name: XOOPS Module XFsection = 1.07...

TimThumb 2.8.13 Remote Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 | | / | \ | |/ |/ | / | | | | | | | | | | | | | / \ | | | || || | |\ | || | | / | | |/|| ||// \| Wordpress TimThumb 2.8.13 WebShot Remote Code Execution 0-day Affected website : a lot Wordpress Themes, Plugins, 3rd party components Exploit...

Mutiny 5 Arbitrary File Upload Vulnerability

This Metasploit module exploits a code execution flaw in the Mutiny 5 appliance. The EditDocument servlet provides a file upload function to authenticated users. A directory traversal vulnerability in the same functionality allows for arbitrary file upload, which results in arbitrary code executi...

odCMS 1.07 Cross Site Scripting

------------------------------------------------------------------------ Software................odCMS 1.07 Vulnerability...........Reflected XSS Download................http://odcms.org/index.php?Page=Download Release Date............7/5/2010 Tested On...............Windows Vista + XAMPP...

Fedora 10 : trickle-1.07-7.fc10 (2009-1694)

New patch for CVE-2009-0415 Fix for 484065 - CVE-2009-0415 trickle: Possibility to load arbitrary code from current working directory Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Fedora 9 : trickle-1.07-7.fc9 (2009-1675)

New patch for CVE-2009-0415 Fix for 484065 - CVE-2009-0415 trickle: Possibility to load arbitrary code from current working directory Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

CVE-2009-0415

Untrusted search path vulnerability in trickle 1.07 allows local users to execute arbitrary code via a Trojan horse trickle-overload.so in the current working directory, which is referenced in the LDPRELOAD path...

CVE-2009-0415

Untrusted search path vulnerability in trickle 1.07 allows local users to execute arbitrary code via a Trojan horse trickle-overload.so in the current working directory, which is referenced in the LDPRELOAD path...

CVE-2009-0415

CVE-2009-0415 affects trickle 1.07 and is an untrusted search path vulnerability that lets local users execute arbitrary code by supplying a Trojan horse trickle-overload.so in the current working directory, referenced via LD_PRELOAD. The root cause is loading a malicious shared object from the C...

CVE-2009-0415

Untrusted search path vulnerability in trickle 1.07 allows local users to execute arbitrary code via a Trojan horse trickle-overload.so in the current working directory, which is referenced in the LDPRELOAD path...

Pagetool 1.07 - search_term Cross-Site Scripting

Pagetool 1.07 - searchterm Cross-Site Scripting source: https://www.securityfocus.com/bid/27653/info Pagetool is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Pagetool 1.07 - 'search_term' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27653/info Pagetool is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...

DeluxeBB CP.PHP安全绕过漏洞

DeluxeBB是一款基于PHP的WEB应用程序。 DeluxeBB不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞更改管理员信息。 问题是由于'cp.php'脚本对用户提交的WEB参数缺少过滤，当更新自身的档案时，DeluxeBB执行如下有问题代码： $db-unbufferedquery"UPDATE ".$prefix."users SET email='$xemail', msn='$xmsn', icq='$xicq', ... WHERE username='$membercookie'"; 因此可更改cookie "membercookie"，如更改远程用户的EMAI...

CVE-2007-5312

Cross-site scripting XSS vulnerability in TorrentTrader Classic 1.07 allows remote attackers to inject arbitrary web script or HTML via the 1 color parameter to pjirc/css.php and the 2 cat parameter to browse.php...

CVE-2007-5311

Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic Edition 1.07 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the ssuri parameter...

CVE-2007-5311

CVE-2007-5311 concerns TorrentTrader Classic Edition 1.07. The vulnerability is in the backend/admin-functions.php component and is triggered by a directory traversal through a .. (dot dot) in the ss_uri parameter, allowing remote attackers to cause inclusion and execution of arbitrary local file...

CVE-2007-5312

TorrentTrader Classic 1.07 is affected by a cross-site scripting (XSS) vulnerability. An attacker can inject arbitrary script/HTML via the (1) color parameter to pjirc/css.php and (2) the cat parameter to browse.php, indicating insufficient input sanitization for these parameters. No remediation ...

TorrentTrader Classic 1.07 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== TorrentTrader Classic 1.07 Multiple Remote Vulnerabilities ========================================================== TorrentTrader Classic Mutiple Remote vulnerabilities Discovere...