CVE-2009-4728

SQL injection vulnerability in the administrative interface in Questions Answered 1.3 allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: some of these details are obtained from third party information...

SA-CONTRIB-2010-018 - Content Distribution - Multiple Vulnerabilities

Content Distribution module allows calling a method to delete particular nodes using a XML-RPC call. When this method is allowed to be called by anonymous users in user permissions, an attacker might delete a random node. In addition, certain actions require Content Distribution to temporarily...

SyntaxCMS 1.3 Remote File Inclusion

SyntaxCMS Download: Date: 13.02.2010 Remote: yes Vuln : SyntaxCMSpath/public/admin/testing/tests/0004initurls.php includeonce $initpath . '/init.urls.php' ; PoC : SyntaxCMSpath/admin/testing/tests/0004initurls.php?initpath=Shell GreetZ : myself...

Dodo Upload 1.3 - Arbitrary File Upload (Bypass)

Dodo Upload 1.3 - Arbitrary File Upload Bypass ======================================================================================== | Title : Dodo Upload Version 1.3 Upload Shell By pass Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El...

Dodo Upload Version 1.3 Upload Shell (By pass) Vulnerability

Exploit for unknown platform in category web applications ============================================================ Dodo Upload Version 1.3 Upload Shell By pass Vulnerability ============================================================...

File Upload Manager 1.3 - Web Shell File Upload

File Upload Manager 1.3 - Web Shell File Upload Version: v1.3 ============================================================ www.sec-war.com ============================================================ 1- upload shell with: shell.php.jpg shell.php.gif shell.php.htm shell.htm shell.php.jpeg...

Solaris Update for Apache 1.3 122912-19

Check for the Version of Apache 1.3 OpenVAS Vulnerability Test Solaris Update for Apache 1.3 122912-19 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Solaris Update for Apache 1.3 122911-19

Check for the Version of Apache 1.3 OpenVAS Vulnerability Test Solaris Update for Apache 1.3 122911-19 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Solaris Update for Apache 1.3 122912-19

Check for the Version of Apache 1.3 OpenVAS Vulnerability Test Solaris Update for Apache 1.3 122912-19 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2010-0455

PunBB 1.3 is affected by a cross-site scripting (XSS) vulnerability in forum/viewtopic.php via the pid parameter. The root cause is insufficient sanitization of user-supplied pid, allowing remote attackers to inject script or HTML and execute in victims’ browsers (e.g., to steal cookies) as descr...

Mod_proxy From Apache 1.3 Integer Overflow

Name: Modproxy from apache 1.3 - Integer overflow which causes heap overflow. Author: Adam Zabrocki or Date: Jan 27, 2010 Issue: Modproxy from apache 1.3.xx tested on latest version - 1.3.41 allows local and remote attackers to overflow buffer on heap via integer overflow vulnerability...

Mod_proxy from apache 1.3 - Integer overflow which causes heap overflow.

Name: Modproxy from apache 1.3 - Integer overflow which causes heap overflow. Author: Adam Zabrocki [email protected] or [email protected] Date: Jan 27, 2010 Issue: Modproxy from apache 1.3.xx tested on latest version - 1.3.41 allows local and remote attackers to overflow buffer on heap via integer...

MCnews 1.3 SQL Injection

:: MCnews 1.3 :: Download: http://www.phpforums.net/mcNews1.3.zip link off :: Vendor: www.phpforums.net :: Author: s4r4d0 :: mail: [email protected] :: Bug: Sql Injection found on lire.php file :: Exploit: http://host/mcNews/lire.php?n=-1+UNION+SELECT+1,2,@@version,4,5,6,7,8,9,10,11,12,13,14-- ::...

PunBB 1.3 Cross Site Scripting

oo PunBB 1.3 oo Download: http://punbb.informer.com/downloads.php oo Vendor: www.punbb.com oo Author: s4r4d0 oo mail: [email protected] oo Bug: Cross site scripting has benn found on viewtopic.php file oo Exploit: http://host/forum/viewtopic.php?pid=Xss oo Demo:...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in Hitmaaan Gallery 1.3 allow remote attackers to inject arbitrary web script or HTML via the 1 gall and 2 levela parameters...

CVE-2010-0371

Affected software: Hitmaaan Gallery 1.3 (vulnerability in index.php). The flaw enables cross-site scripting (XSS) via the gall and levela parameters, allowing remote attackers to inject arbitrary web script or HTML. The NVD notes a medium base score (4.3, CVSS2) with no authentication needed and ...

Al3jeb Remote Change Password

Exploit Title :al3jeb script Remote Change Password Exploit Author: alnjm33 Software Link: http://www.traidnt.net/vb/attachment.php?attachmentid=354606&d=1237376300 Version: 1.3 Tested on:1.3 MY home : Sec-war.com :::::::::::::::exploit::::::::::::::::::::: al3jeb script Remote Change Password...

al3jeb script - Remote Change Password

al3jeb script - Remote Change Password al3jeb script Remote Change Password Exploit For More visit us http://sec-war.com/cc/index.php User: Pass: Email...

al3jeb script Remote Change Password Exploit

Exploit for unknown platform in category web applications ============================================ al3jeb script Remote Change Password Exploit ============================================ al3jeb script Remote Change Password Exploit For More visit us http://sec-war.com/cc/index.php User: Pas...

XSS Vulnerability in Drupal's Node Blocks contributed module (6.x-1.3 and 5.x-1.1)

XSS Vulnerability in Drupal's Node Blocks contributed module 6.x-1.3 and 5.x-1.1 Discovered by Martin Barbella [email protected] Description of Vulnerability: ----------------------------- Drupal is a free software package that allows an individual or a community of users to easily publish,...