Code injection

Static code injection vulnerability in admin.php in Frax.dk Php Recommend 1.3 and earlier allows remote attackers to inject arbitrary PHP code into phpreconfig.php via the formaula parameter...

CVE-2009-1781

Static code injection vulnerability in admin.php in Frax.dk Php Recommend 1.3 and earlier allows remote attackers to inject arbitrary PHP code into phpreconfig.php via the formaula parameter...

CVE-2009-1779

PHP remote file inclusion vulnerability in admin.php in Frax.dk Php Recommend 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the formincludetemplate parameter...

CVE-2009-1637

profile.php in Simple Customer 1.3 does not require administrative authentication, which allows remote attackers to change the admin e-mail address and password via the email and password parameters...

CVE-2009-1637

The CVE-2009-1637 entry concerns profile.php in Simple Customer 1.3, where administrative authentication is not required. This allows remote attackers to modify the admin email address and password by passing email and password parameters. The NVD data lists a CVSS v2 base score of 6.4 (Network a...

PHP recommend 1.3 - Authentication Bypass Remote File Inclusion Code Injection

PHP recommend 1.3 - Authentication Bypass Remote File Inclusion Code Injection Php Recommend "; $d = ""; $content = "".$b."?php // Php Recommmend // Created By Frax.dk // GNU Licens // Please do not delete this text $".$d."page = '".$formpage."'; $".$d."includetemplate = '".$formincludetemplate."...

Simple Customer 1.3 Arbitrary Change Admin Password Exploit

No description provided by source. ---- Remote Change admin Password---- ---------------------------- script:Simple Customer 1.3 ---------------------------- Author: ahmadbady email:[email protected] -------------------- download from:http://www.simplecustomer.com/ New Version 1.3...

Simple Customer 1.3 Password Changer

---- Remote Change admin Password---- ---------------------------- script:Simple Customer 1.3 ---------------------------- Author: ahmadbady email:[email protected] -------------------- download from:http://www.simplecustomer.com/ New Version 1.3 -------------------- xpl: coded by ahmadbady...

Realty Web-Base 1.0 SQL Injection

--------------------------------------------------------------- ------------------------------------------------------------ Realty Web-Base v1.0 Auth bypass SQL Injection Vulnerability --------------------------------------------------------------- Founder : ThE g0bL!N Home:WwW.h4ckF0u.CoM...

Realty Web-Base 1.0 - Authentication Bypass

--------------------------------------------------------------- ------------------------------------------------------------ Realty Web-Base v1.0 Auth bypass SQL Injection Vulnerability --------------------------------------------------------------- Founder : ThE g0bL!N Home:WwW.h4ckF0u.CoM...

Realty Web-Base 1.0 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Realty Web-Base 1.0 Auth Bypass SQL Injection Vulnerability =============================================================...

Simple Customer 1.3 - Arbitrary Change Admin Password

---- Remote Change admin Password---- ---------------------------- script:Simple Customer 1.3 ---------------------------- Author: ahmadbady email:[email protected] -------------------- download from:http://www.simplecustomer.com/ New Version 1.3 -------------------- xpl: coded by ahmadbady...

Simple Customer 1.3 Arbitrary Change Admin Password Exploit

Exploit for unknown platform in category web applications =========================================================== Simple Customer 1.3 Arbitrary Change Admin Password Exploit =========================================================== ---- Remote Change admin Password----...

PT-2009-1049 · International Color Consortium +4 · International Color Consortium (Icc) Format Library +4

Name of the Vulnerable Software and Affected Versions: Ghostscript versions 8.64 and earlier Argyll Color Management System CMS versions 1.0.3 and earlier hpijs package version 1.3 in Red Hat Enterprise Linux Description: The issue is related to multiple integer overflows in the International Col...

CVE-2008-6720

CVE-2008-6720 describes an SQL injection in DeltaScripts PHP Links 1.3 and earlier, affecting admin/adm_login.php via the admin_username parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands; CVSSv2 base score 7.5 (HIGH) with network access, low attack complexity,...

SWF Opener 1.3 (.swf File) Off By One Buffer Overflow PoC

No description provided by source. SWF Opener .swf Off By One / Underground Bof Poc Probably impossible to exploit, but who knows? -- At least, there still exist Underground stack overflows in :d Version: 1.3 http://www.browsertools.net/downloads/SWFOpenerSetup.exe usage perl poc.pl xpl.swf In Th...

SWF Opener 1.3 Buffer Overflow

SWF Opener .swf Off By One / Underground Bof Poc Probably impossible to exploit, but who knows? -- At least, there still exist Underground stack overflows in :d Version: 1.3 http://www.browsertools.net/downloads/SWFOpenerSetup.exe usage perl poc.pl xpl.swf In The Stack 0012BBE8 41 41 41 41 41 41 ...

SWF Opener 1.3 - .swf Off-by-One Buffer Overflow (PoC)

SWF Opener 1.3 - .swf Off-by-One Buffer Overflow PoC SWF Opener .swf Off By One / Underground Bof Poc Probably impossible to exploit, but who knows? -- At least, there still exist Underground stack overflows in :d Version: 1.3 http://www.browsertools.net/downloads/SWFOpenerSetup.exe usage perl...

SWF Opener 1.3 - '.swf' Off-by-One Buffer Overflow (PoC)

SWF Opener .swf Off By One / Underground Bof Poc Probably impossible to exploit, but who knows? -- At least, there still exist Underground stack overflows in :d Version: 1.3 http://www.browsertools.net/downloads/SWFOpenerSetup.exe usage perl poc.pl xpl.swf In The Stack 0012BBE8 41 41 41 41 41 41 ...

CVE-2009-1033

CVE-2009-1033 affects DeluxeBB 1.3 and earlier. A SQL injection flaw in misc.php allows remote attackers to execute arbitrary SQL via the qorder parameter, as described in the connected documents. Exploit details and fixes are not provided here.