VMware Virtual 8086 - Linux Local Ring0

Bugtraq ID: 36841 Class: Design Error Published: Oct 27 2009 12:00AM Updated: Oct 27 2009 09:18PM Credit: Tavis Ormandy and Julien Tinnes of the Google Security Team Vulnerable: VMWare Workstation 6.5.3 VMWare Workstation 6.5.2 build 156735 VMWare Workstation 6.5.2 VMWare Workstation 6.5.1 VMWare...

CVE-2009-3649

PBBoard (Power Bulletin Board) suffers a cross-site scripting (XSS) vulnerability in forums/index.php, affecting version 2.0.2 and earlier. The issue arises in the id parameter of the "new_topic" action, allowing remote attackers to inject arbitrary web script or HTML. Affected software is PBBoar...

PBBoard <= 2.0.2 - Full Path Disclosure

Exploit for unknown platform in category web applications ====================================== PBBoard GET as $sqlget if eregi"select", $sqlget or eregi"union", $sqlget or eregi"%", $sqlget $this-error'?? ????? ± ??±???!'; ================ ================ 2. Full Path Disclosure...

PBBoard 2.0.2 Cross Site Scripting

Sec-Area Advisorypbboard Back to forums You will find the code works -------------------------------------------- World Defacers Team http://www.Sec-area.com --------------------------------------------...

PBBoard 2.0.2 - Full Path Disclosure

AdvisoryPBBoard GET as $sqlget if eregi"select", $sqlget or eregi"union", $sqlget or eregi"%", $sqlget $this-error'?? ¨¹??? ± ?´±?¹?!'; ================ ================ 2. Full Path Disclosure ----------------------------------- allow attackers to gather the real path of the server side script...

CVE-2009-2919

Boonex Orca 2.0 and 2.0.2 are affected by an XSS vulnerability that allows remote authenticated users to inject arbitrary web script or HTML via the topic title field. Affected component: Boonex Orca (versions 2.0, 2.0.2). Root cause details are not provided in the documents. No remediation or ex...

Directory traversal

Multiple directory traversal vulnerabilities in e-Vision CMS 2.0.2 and earlier, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 an adminlang cookie to admin/index.php; or the module parameter to 2...

e-Vision CMS Multiple Local File Include Vulnerabilities

e-Vision CMS is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to view local files and execute local scripts within the context of the webserver process...

Orca 2.0.2 Cross Site Scripting

--------------------------------------------------------------------------\ + Script : Orca-v.2.0.2 + Bug: Xss + By: J-Hacker || Jerusalem Hacker || From : soqor.net + Email : [email protected] + Download : http://www.boonex.com/thankyou.php?p=Orca-v.2.0 + D0rk :Powered by Orca Interactive Forum...

Orca 2.0.2 - 'topic ' Cross-Site Scripting

--------------------------------------------------------------------------\ + Script : Orca-v.2.0.2 + Bug: Xss + By: J-Hacker || Jerusalem Hacker || From : soqor.net + Email : [email protected] + Download : http://www.boonex.com/thankyou.php?p=Orca-v.2.0 + D0rk :Powered by Orca Interactive Forum...

Orca 2.0.2 (Topic) Remote XSS Vulnerability

No description provided by source. --------------------------------------------------------------------------\ + Script : Orca-v.2.0.2 + Bug: Xss + By: J-Hacker || Jerusalem Hacker || From : soqor.net + Email : [email protected] + Download : http://www.boonex.com/thankyou.php?p=Orca-v.2.0 + D0rk...

Orca 2.0.2 - topic Cross-Site Scripting

Orca 2.0.2 - topic Cross-Site Scripting --------------------------------------------------------------------------\ + Script : Orca-v.2.0.2 + Bug: Xss + By: J-Hacker || Jerusalem Hacker || From : soqor.net + Email : [email protected] + Download : http://www.boonex.com/thankyou.php?p=Orca-v.2.0 +...

Orca 2.0.2 (Topic) Remote XSS Vulnerability

Exploit for unknown platform in category web applications =========================================== Orca 2.0.2 Topic Remote XSS Vulnerability =========================================== --------------------------------------------------------------------------\ + Script : Orca-v.2.0.2 + Bug: Xs...

Remote file inclusion

PHP remote file inclusion vulnerability in layout/default/params.php in Boonex Orca 2.0 and 2.0.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the gConfdirlayouts parameter...

e-Vision CMS <= 2.0.2 Multiple Local File Inclusion Exploit

Exploit for unknown platform in category web applications =========================================================== e-Vision CMS = 2.0.2 Multiple Local File Inclusion Exploit =========================================================== ?php errorreporting0; iniset"defaultsockettimeout",5; /...

Solaris 5.9 (sparc) : 139382-01

GNOME 2.0.2: libpng Patch. Date this patch was last updated by Sun : Oct/03/08 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Kwalbum <= 2.0.2 Arbitary File Upload Vulnerability

Exploit for unknown platform in category web applications =================================================== Kwalbum = 2.0.2 Arbitary File Upload Vulnerability =================================================== ========================================================== Kwalbum = 2.0.2 Arbitrary...

CVE-2008-4337

Cross-site scripting XSS vulnerability in Bitweaver 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to 1 edit.php and 2 list.php in articles/; 3 listblogs.php and 4 rankings.php in blogs/; 5 calendar/index.php; 6 calendar.php, 7 index.php, and 8...

CVE-2008-4337

CVE-2008-4337 is an XSS vulnerability in Bitweaver 2.0.2. The provided documents describe multiple vectors: arbitrary script/HTML injection via URL parameters across numerous pages (articles/edit/list; blogs/list_blogs/rankings; calendar and events pages; fisheye galleries; liberty/list_content; ...

CVE-2008-4337

Cross-site scripting XSS vulnerability in Bitweaver 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to 1 edit.php and 2 list.php in articles/; 3 listblogs.php and 4 rankings.php in blogs/; 5 calendar/index.php; 6 calendar.php, 7 index.php, and 8...