LoveCMS 1.6.2 Final - Arbitrary File Delete

+-------------------------------------------------------------------------------------------------------+ | | | Name : LoveCMS 1.6.2 Final Arbitrary File Delete Vulnerability | | Author : cOndmened | | Greetz : ZaBeaTy, rtgn, doctor, elmasterlow, str0ke, t0pP8uZz & all friends | | Details : Ofc, ...

LoveCMS 1.6.2 Final Arbitrary File Delete Vulnerability

Exploit for unknown platform in category web applications ======================================================= LoveCMS 1.6.2 Final Arbitrary File Delete Vulnerability =======================================================...

CVE-2008-4438

Cross-site scripting XSS vulnerability in search.php in Datafeed Studio 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

LoveCMS 1.6.2 Final Update Settings Remote Exploit

Exploit for unknown platform in category web applications ================================================== LoveCMS 1.6.2 Final Update Settings Remote Exploit ================================================== !/usr/bin/ruby Exploit by PoMdaPiMp! --------------------- LoveCMS Exploit Series...

Joomla Component joomlaXplorer <= 1.6.2 Remote Vulnerabilities

No description provided by source. ------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo -------- ------------------------------------------------------------- = Author : HouSSaMix = Script : Joomla and Mambo Component joomlaxplorer = versi...

Joomla! Component JoomlaXplorer 1.6.2 - Remote s

Joomla! Component JoomlaXplorer 1.6.2 - Remote s ------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo -------- ------------------------------------------------------------- = Author : HouSSaMix = Script : Joomla and Mambo Component...

Joomla! Component JoomlaXplorer 1.6.2 - Remote s

------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo -------- ------------------------------------------------------------- = Author : HouSSaMix = Script : Joomla and Mambo Component joomlaxplorer = version : 1.6.0 = Download :...

krb5 RPC library buffer overflow

Stack-based buffer overflow in the svcauthgssvalidate function in lib/rpc/svcauthgss.c in the RPCSECGSS RPC library librpcsecgss in MIT Kerberos 5 krb5 1.4 through 1.6.2, as used by the Kerberos administration daemon kadmind and some third-party applications that use krb5, allows remote attackers...

krb5 incomplete fix for CVE-2007-3999

The original patch for CVE-2007-3999 in svcauthgss.c in the RPCSECGSS RPC library in MIT Kerberos 5 krb5 1.4 through 1.6.2, as used by the Kerberos administration daemon kadmind and other applications that use krb5, does not correctly check the buffer length in some environments and architectures...

Code injection

httpsv.exe in HTTP Server 1.6.2 allows remote attackers to obtain sensitive information script source code via a URI with a trailing %20 encoded space...

CVE-2007-3327

httpsv.exe in HTTP Server 1.6.2 allows remote attackers to obtain sensitive information script source code via a URI with a trailing %20 encoded space...

HTTP SERVER (httpsv) 1.6.2 (GET 404) Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ===================================================================== HTTP SERVER httpsv 1.6.2 GET 404 Remote Denial of Service Exploit ===================================================================== !/usr/bin/perl GetOpt STD module use...

BugHunter HTTP Server 1.6.2 - Parse Error Information Disclosure

source: https://www.securityfocus.com/bid/24566/info BugHunter HTTP Server is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information. Information obtained may lead to further attacks. This issue affects HTTP Server 1.6.2; other...

BugHunter HTTP Server 1.6.2 - Parse Error Information Disclosure

BugHunter HTTP Server 1.6.2 - Parse Error Information Disclosure source: https://www.securityfocus.com/bid/24566/info BugHunter HTTP Server is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information. Information obtained may lea...

MediaWiki AJAX未明跨站脚本漏洞

MediaWiki AJAX是一款著名的wiki知识库引擎。 MediaWiki AJAX不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 目前没有详细漏洞细节提供。 MediaWiki MediaWiki 1.8.2 MediaWiki MediaWiki 1.8.1 MediaWiki MediaWiki 1.8 MediaWiki MediaWiki 1.7.1 MediaWiki MediaWiki 1.7 MediaWiki MediaWiki 1.6.8 MediaWiki MediaWiki 1.6.7 MediaWiki MediaWiki...

moodle162.txt

// http://www.w4cking.com Product: moodle 1.6.2 http://www.moodle.org Vulnerability: SQL injection Notes: - SQL injection can be used to obtain password hash - the moodle blog "module" must be enabled - guest access to the blog must be enabled POC:...

CVE-2006-5219

SQL injection vulnerability in blog/index.php in the blog module in Moodle 1.6.2 allows remote attackers to execute arbitrary SQL commands via a double-encoded tag parameter...

CVE-2006-5219

Moodle 1.6.2 is affected by CVE-2006-5219 due to an SQL injection in blog/index.php of the blog module. The vulnerability is triggered via a double-encoded tag parameter, enabling remote attackers to execute arbitrary SQL commands. The issue impacts the Moodle 1.6.2 blog feature; CVSSv2 base scor...

CVE-2006-4938

help.php in Moodle before 1.6.2 does not check the existence of certain help files before including them, which might allow remote authenticated users to obtain the path in an error message...

Sql injection in Moodle

Hi, There is a sql injection in Moodle 1.6.1+ and maybe before versions : The "$blogEntry" parameter passed to "insertrecord" function in /blog/edit.php, is not checked properly . Version 1.6.2 has been released moodle.org. - Omid...