ItCMS 1.9 (boxpop.php) Remote Code Execution Vulnerability

No description provided by source. =========================================================================================================================== | | / | | | | | | | / / / || \ '| / | ' / - | / \ V V / - ' \ / - || | \/,|/| /| |||||///|./ |,|...

ItCMS 1.9 - boxpop.php Remote Code Execution

ItCMS 1.9 - boxpop.php Remote Code Execution =========================================================================================================================== | | / | | | | | | | / / / || \ '| / | ' / - | / \ V V / - ' \ / - || | \/,|/| /| |||||///|./ |,|...

ItCMS 1.9 (boxpop.php) Remote Code Execution Vulnerability

Exploit for unknown platform in category web applications ========================================================== ItCMS 1.9 boxpop.php Remote Code Execution Vulnerability ==========================================================...

Ruby 1.8.6/1.9 (WEBick HTTPd 1.3.1) - Directory Traversal

------------------------------------------------------------------------------------ Digital Security Research Group DSecRG Advisory DSECRG-08-018 Application: Ruby 1.8.6 WEBrick Web server Toolkit and applications that used WEBrick, like Metasploit 3.1 Versions Affected: 1.8.4 and all prior...

Directory traversal

Directory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1.9 through 1.9.0-1, when running on systems that support backslash \ path separators or case-insensitive file names, allows remote attackers to access arbitrary files via 1 "..%5c" encoded backslash...

PT-2008-2739 · Ruby +1 · Ruby +1

Name of the Vulnerable Software and Affected Versions: Ruby versions 1.8 before 1.8.5-p115 Ruby versions 1.8.6 before 1.8.6-p114 Ruby versions 1.9 through 1.9.0-1 Description: A directory traversal issue exists when running on systems that support backslash path separators or case-insensitive fil...

Simple Forum Version 1.7-1.9(pagename)

Simple Forum Version 1.7-1.9pagename AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 : allinurl: "index.php?pagename"forum DORK 2 : Simple Forum - Version 1.7 Simple Forum - Version 1.9 EXPLOIT :...

Yellow Swordfish Simple Forum 1.7/1.9 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/27824/info Simple Forum is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

wpsf17-sql.txt

Simple Forum Version 1.7-1.9pagename AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl: "index.php?pagename"forum DORK 2 : Simple Forum - Version 1.7 Simple Forum - Version 1.9 EXPLOIT :...

CVE-2003-1510

TinyWeb 1.9 allows remote attackers to cause a denial of service CPU consumption via a ".%00." in an HTTP GET request to the cgi-bin directory...

HP-UX Security Patch : PHSS_35466

HP DCE 1.9 client cumulative patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26864; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/01/11...

HP-UX Security Patch : PHSS_33321

HP DCE 1.9 client cumulative patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26795; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/01/11...

CVE-2007-5035

OpenEngine 1.9 beta1 is associated with a PHP remote file inclusion risk in html/modules/extranet_profile/main.php via the this_module_path parameter. The underlying issue is disputed by CVE because PHP may terminate with a fatal function-call error on direct requests before the include, which af...

CVE-2007-4290

Multiple PHP remote file inclusion vulnerabilities in Guestbook Script 1.9 allow remote attackers to execute arbitrary PHP code via a URL in the scriptroot parameter to 1 delete.php, 2 edit.php, or 3 inc/common.inc.php; or 4 database.php, 5 entries.php, 6 index.php, 7 logout.php, or 8 settings.ph...

CVE-2007-4290

CVE-2007-4290 concerns Guestbook Script 1.9, where multiple PHP remote file inclusion vulnerabilities allow an attacker to execute arbitrary PHP code via a URL in the script_root parameter to files in the admin/ area (delete.php, edit.php, inc/common.inc.php) and in (database.php, entries.php, in...

PT-2007-5481 · Unknown · X-Script Guestbook

Name of the Vulnerable Software and Affected Versions: Guestbook Script version 1.9 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the script root parameter to various PHP files, including 'delete.php', 'edit.php', 'inc/common.inc.php', 'database.php',...

Guestbook Script 1.9 RFI

Guestbook Script 1.9 Remote File Include Dork:"Guestbook Script 1.9" Vuln Code: /admin/database.php /admin/entries.php /admin/index.php /admin/logout.php /admin/settings.php /delete.php /edit.php /inc/common.inc.php Exploit: www.server.com/path/file.php?scriptroot=Sh3ll =====================...

PrecisionID Barcode ActiveX 1.9 Remote Arbitrary File Overwrite Exploit

No description provided by source. pre span style="font: 14pt Courier New;"p align="center"b2007/05/16/b/p/span codespan style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------------------------------- bIE 6 Precision...

Stack overflow

Stack-based buffer overflow in the PrecisionID Barcode 1.9 ActiveX control in PrecisionIDBarcode.dll allows remote attackers to cause a denial of service Internet Explorer 6 crash, and possibly execute arbitrary code, via a long argument to the SaveBarCode method. NOTE: this issue might overlap...

CVE-2007-2744

The CVE-2007-2744 entry concerns the PrecisionID Barcode 1.9 ActiveX control (PrecisionID_Barcode.dll). The vulnerability is a stack-based buffer overflow triggered by a long argument to the SaveBarCode method, allowing a remote attacker to cause an Internet Explorer 6 crash and potentially execu...