php-atm.txt

PHP Advanced Transfer Manager Download users password hashes PHP Advanced Transfer Manager 1. Site:http://phpatm.free.fr/ ---------------------------------------------------- Bugs: http://victim.com/path/users/username ---------------------------------------------------- example:...

CVE-2006-0160

SQL injection vulnerability in addpost.php3 in Venom Board 1.22 allows remote attackers to execute arbitrary SQL commands via the 1 parent, 2 root, and 3 topicid parameters to post.php3...

CVE-2006-0160

CVE-2006-0160 affects Venom Board 1.22, with a SQL injection in add_post.php3/post.php3. The vulnerability allows a remote attacker to inject arbitrary SQL via the (1) parent, (2) root, and (3) topic_id parameters, enabling potential data compromise. No explicit exploit details are provided in th...

CVE-2003-1288

CVE-2003-1288 concerns multiple race conditions in Linux-VServer 1.22 running on Linux kernel 2.4.23 with SMP. The vulnerability enables local users to trigger a denial of service (kernel oops) via attack vectors affecting the s_info and ip_info data structures and through the forget_original_par...

CVE-2005-2576

CaLogic 1.22, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to 1 doclsqlres.php, 2 clmcpreload.php, 3 viewhistlog.php, 4 mcconfig.php, 5 doclsqlbak.php, 6 defcalsel.php, or 7 clminical.php, which reveals the path in an error message...

CVE-2005-1875

Exhibit Engine (EE) 1.22 is affected by multiple SQL injection vulnerabilities in list.php, exploitable via the parameters (1) search_row, (2) sort_row, (3) order, or (4) perpage, allowing remote attackers to execute arbitrary SQL. The connected sources confirm the vulnerable component and parame...

FTGatePro.txt

Multiple Buffer Overflow Vulnerabilities Found in FTGate Pro Mail Server v. 1.22 1328 http://www.ftgate.com Discovered by Dennis Rand www.Infowarfare.dk ------------------------------------------------------------------------ -----SUMMARY FTGatePro is Floosietek's flagship server. The comprehensi...

CVE-2002-1504

This CVE-2002-1504 entry pertains to WebServer 4 Everyone 1.22 and describes a directory traversal vulnerability where remote attackers can read arbitrary files through URL dot-dot backslash sequences ("..\"). The described root cause is improper normalization of path traversal in user-supplied U...