1496 matches found
rpm2html 1.6 XSS Vulnerability
----------------------------------------------------------------------| My Name: Vladiii | My Country: Romania | My Site: http://www.rstzone.net | My Team: I hope to enter in RST-Crew : | Contact me: [email protected] | Special Shoutz: kw3rln fluffybunny, floflowsupremacy, mozi2weed, | & all...
CVE-2007-2090
CVE-2007-2090 is a Cross-site scripting (XSS) vulnerability in TuMusika Evolution 1.6, fixed by abusing index.php via the msg parameter to inject arbitrary script/HTML. The vulnerability’s CVSS v2 base score is 6.8 (Medium) with partial impact on confidentiality, integrity, and availability, and ...
CVE-2007-2090
Cross-site scripting XSS vulnerability in index.php in TuMusika Evolution 1.6 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
CVE-2007-1990
PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0 through 1.6, allows remote attackers to execute arbitrary PHP code via a URL in the id parameter, a different vector than CVE-2007-1968. NOTE: the provenance of this information is unknown; the details are...
TuMusika Evolution 1.6 - index.php Cross-Site Scripting
TuMusika Evolution 1.6 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/23452/info TuMusika Evolution is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...
CVE-2007-1968
PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0 through 1.6, allows remote attackers to execute arbitrary PHP code via a URL in the scoreid parameter...
CVE-2007-0927
Heap-based buffer overflow in uTorrent 1.6 allows remote attackers to execute arbitrary code via a torrent file with a crafted announce header...
Heap overflow
Heap-based buffer overflow in uTorrent 1.6 allows remote attackers to execute arbitrary code via a torrent file with a crafted announce header...
utorrent16-heap.txt
/ This is a PoC remote exploit for uTorrent 1.6 Author: defsec http://www.defacedsecurity.com Works on XP SP1 and w2k sp1-4 / include include define NASIZE 4880 unsigned char niceannounceNASIZE; unsigned char xorops="\x33\xc0\x33\xdb"; // win32exec - EXITFUNC=process CMD=calc Size=343...
uTorrent 1.6 Remote Heap Overflow Exploit PoC
No description provided by source. / This is a PoC remote exploit for uTorrent 1.6 Author: defsec [email protected] http://www.defacedsecurity.com Works on XP SP1 and w2k sp1-4 / include stdio.h include stdlib.h define NASIZE 4880 unsigned char niceannounceNASIZE;...
μTorrent (uTorrent) 1.6 build 474 - announce Key Remote Heap Overflow
μTorrent uTorrent 1.6 build 474 - announce Key Remote Heap Overflow / This is a PoC remote exploit for uTorrent 1.6 Author: defsec http://www.defacedsecurity.com Works on XP SP1 and w2k sp1-4 / include include define NASIZE 4880 unsigned char niceannounceNASIZE; unsigned char...
EUVD-2007-0636
show.php in Vlad Alexa Mancini PHPFootball 1.6 allows remote attackers to obtain sensitive information database contents via a % percent character in the dbfieldv parameter...
phpfootball16-disclose.txt
Title : PHPFootball 1.6 show.php Remote Database Disclosure Vulnerability Author : ajann Contact : : S.Page : http://phpfootball.sourceforge.net $$ : Free Dork : inurl:/phpfootball/ DBREAD--------------------------------------------------------- http://target/path//show.php VARIABLES Example:...
MediaWiki AJAX未明跨站脚本漏洞
MediaWiki AJAX是一款著名的wiki知识库引擎。 MediaWiki AJAX不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 目前没有详细漏洞细节提供。 MediaWiki MediaWiki 1.8.2 MediaWiki MediaWiki 1.8.1 MediaWiki MediaWiki 1.8 MediaWiki MediaWiki 1.7.1 MediaWiki MediaWiki 1.7 MediaWiki MediaWiki 1.6.8 MediaWiki MediaWiki 1.6.7 MediaWiki MediaWiki...
CVE-2006-6928
Multiple cross-site scripting XSS vulnerabilities in Rialto 1.6 allow remote attackers to inject arbitrary web script or HTML via the 1 cat parameter to a listmain.asp or b searchmain.asp, the 2 the Keyword parameter to c searchkey.asp, or the 3 refno parameter to d forminfo.asp...
CVE-2006-6927
Multiple SQL injection vulnerabilities in Rialto 1.6 allow remote attackers to execute arbitrary SQL commands via 1 the uname username and 2 pword passwd fields in a admin/default.asp; the 3 ID parameter to b listfull.asp or c printmain.asp; the 4 cat parameter to d listmain.asp, e...
CVE-2006-6927
CVE-2006-6927 describes multiple SQL injection vulnerabilities in Rialto 1.6, allowing remote attackers to execute arbitrary SQL commands via various input fields/parameters in the web application (examples include uname, pword in admin/default.asp; IDs in listfull.asp/printmain.asp; cat in listm...
CVE-2006-6928
Multiple cross-site scripting XSS vulnerabilities in Rialto 1.6 allow remote attackers to inject arbitrary web script or HTML via the 1 cat parameter to a listmain.asp or b searchmain.asp, the 2 the Keyword parameter to c searchkey.asp, or the 3 refno parameter to d forminfo.asp...
CVE-2006-6928
CVE-2006-6928 describes multiple cross-site scripting (XSS) vulnerabilities in Rialto 1.6. The issues allow remote attackers to inject arbitrary web script or HTML via: (1) the cat parameter to listmain.asp or searchmain.asp, (2) the Keyword parameter to searchkey.asp, and (3) the refno parameter...