CVE-2007-6087

CVE-2007-6087 is a CSRF vulnerability in VigileCMS 1.4. The index.php changepass module accepts certain parameters that allow remote attackers to change the admin password. Affected component is the VigileCMS 1.4 web application; underlying issue is cross-site request forgery enabling unauthorize...

Underground CMS 1.x - 'Search.Cache.Inc.php' Backdoor Access

Ucms v. 1.8 Np exploit function sethostseite document.host.action = seite + 'index.php?&q=test&e=1'; document.all.data.innerHTML = document.host.action; Ucms v. 1.8 Np exploit Actual Request: Host: Password: Phpcode: phpinfo; ? !-- It�s just a crime to do such thigs, so please use this exploit ju...

VigileCMS 1.4 Multiple Remote Vulnerabilities

VigileCMS 1.4 Multiple Remote Vulnerabilities --------------------------------------------------------------------------------------- --------------------------------------------------------------------------------------- Author : DevilAuron http://devilsnight.altervista.org Vendor : VigileCMS 1....

X.org composite extension buffer overflow

Buffer overflow in the compNewPixmap function in compalloc.c in the Composite extension for the X.org X11 server before 1.4 allows local users to execute arbitrary code by copying data from a large pixel depth pixmap into a smaller pixel depth pixmap...

krb5 RPC library buffer overflow

Stack-based buffer overflow in the svcauthgssvalidate function in lib/rpc/svcauthgss.c in the RPCSECGSS RPC library librpcsecgss in MIT Kerberos 5 krb5 1.4 through 1.6.2, as used by the Kerberos administration daemon kadmind and some third-party applications that use krb5, allows remote attackers...

krb5 incomplete fix for CVE-2007-3999

The original patch for CVE-2007-3999 in svcauthgss.c in the RPCSECGSS RPC library in MIT Kerberos 5 krb5 1.4 through 1.6.2, as used by the Kerberos administration daemon kadmind and other applications that use krb5, does not correctly check the buffer length in some environments and architectures...

Joomla Component NeoRecruit <= 1.4 (id) SQL Injection Vulnerability

No description provided by source. Title : Joomla Component NeoRecruit = 1.4 id Remote Blind SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.neojoomla.com/ $$ : 54,90 鈧...

CVE-2007-4506

SQL injection vulnerability in index.php in the NeoRecruit component comneorecruit 1.4 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an offerview action...

CVE-2007-4103

The IAX2 channel driver chaniax2 in Asterisk Open 1.2.x before 1.2.23, 1.4.x before 1.4.9, and Asterisk Appliance Developer Kit before 0.6.0, when configured to allow unauthenticated calls, allows remote attackers to cause a denial of service resource exhaustion via a flood of calls that do not...

CVE-2007-4103

The CVE-2007-4103 issue affects the IAX2 channel driver (chan_iax2) in Asterisk Open 1.2.x (pre-1.2.23), Asterisk Open 1.4.x (pre-1.4.9), and Asterisk Appliance Developer Kit (pre-0.6.0). When configured to allow unauthenticated calls, remote attackers can cause denial of service by flooding call...

Asterisk IAX2隧道驱动IAX2_Write函数远程栈溢出漏洞

BUGTRAQ ID: 24949 CVECAN ID: CVE-2007-3762 Asterisk是开放源码的软件PBX，支持各种VoIP协议和设备。 Asterisk IAX2隧道驱动（chaniax2）中存在栈溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 如果向chaniax2传送了数据负载大于4 kB的RTP帧的话，就可能触发这个漏洞。如果要触发这个漏洞，调用iax2write的帧应满足以下条件： 语音或视频帧 4字节的时间戳与之前所发送帧高2字节相同 格式为预期格式 数据负载大于4kB...

igshop14-eval.txt

!/usr/bin/perl -w use LWP::UserAgent; iG Shop 1.4 eval Inclusion Vulnerability found by IFX nyubicrew Vulnerability on page.php if !$action $action = "make"; // here the function will be called. eval "page$action;"; die "Example: perl $0 http://www.planetgolfuk.co.uk/shop\n" unless @ARGV; $b =...

Mambo Component com_yanc 1.4 Beta - 'id' SQL Injection

------------------------------ ------------------------------- Mambo comyanc v1.4 beta id Blind Remote SQL Injection Vuln ------------------------------------------------------------- Bulan: Cyber-Security ------------------------------------------------------------- Exploit:...

iG Shop 1.4 (page.php) Remote SQL Injection Vulnerability

No description provided by source. Discovered by: gsy & kerem125 Website: www.kerem125.com Script Download: http://www.igeneric.co.uk/ig-shopping-cart.html exploit:/shop/page.php?pagetype=catalognavigate&typeid=-99%20union//select//password//from//users/...

iG Shop 1.4 - page.php SQL Injection

iG Shop 1.4 - page.php SQL Injection Discovered by: gsy & kerem125 Website: www.kerem125.com Script Download: http://www.igeneric.co.uk/ig-shopping-cart.html exploit:/shop/page.php?pagetype=catalognavigate&typeid=-99%20union//select//password//from//users/...

blogsystem 1.4 >> local & remote = -rfi & lfi & -xss

demo: blog23.com by : hackerz.ir userz ! ADMIN/index.php include$category."/".$folder."".$page.".php"; ADMIN/index.php include$category."/".$action.".php"; ADMIN/login.php include$lngTexts; ADMIN/login.php include$lngConfig; BO/index.php include$category."/".$folder."".$page.".php"; BO/index.php...

Directory traversal

Directory traversal vulnerability in file.php in JulmaCMS 1.4 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2007-2324

CVE-2007-2324 describes a directory traversal in JulmaCMS 1.4 where the file.php parameter accepts a dot-dot gesture (..), enabling a remote attacker to read arbitrary files. This is caused by insufficient validation of the file parameter and affects the ability to access files outside the intend...

JulmaCMS 1.4 (file.php file) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================= JulmaCMS 1.4 file.php file Remote File Disclosure Vulnerability ================================================================= JulmaCMS 1.4file.php fileRemote File...

JulmaCMS 1.4 - 'file.php' Remote File Disclosure

JulmaCMS 1.4file.php fileRemote File Disclosure D.Script: http://julmajanne.com/downloads/julma.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc V.Code In /file.php: /file.php dir . $file; $fname = basename$file; $mime = mimetype"mime", $fname; header"Content-Type: $mime";...