Debian Security Advisory DSA 2039-1 (cacti)

The remote host is missing an update to cacti announced via advisory DSA 2039-1. OpenVAS Vulnerability Test $Id: deb20391.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2039-1 cacti Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

AskMe Pro 2.1 SQL Injection

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- AskMe Pro...

Alstrasoft AskMe Pro 2.1 - que_id SQL Injection

Alstrasoft AskMe Pro 2.1 - queid SQL Injection / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...

Almnzm 2.1 - SQL Injection

Title: almnzm 2.1 1 Vulnerability Type = SQL Injection Example URL = index.php?a=pages&id=3' and 1=0 UnIon aLL Select 1,2,concatusername,0x3a,password,4,5,6,7 from almnzmcustomers--%20 ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...

Tribisur Multiple Vulnerabilities

Tribisur is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Kernel 'fasync_helper()' Local Privilege Escalation Vulnerability

Exploit for linux platform in category local exploits ======================================================================= Linux Kernel 'fasynchelper' Local Privilege Escalation Vulnerability ======================================================================= Credit: Tavis Ormandy...

EIMS editor vulnerability-vulnerability warning-the black bar safety net

The specific use of the method He is Division 2. 1 2.0 two versions of the enterprise information management system eimsforaccess2. 1 real estate management system eimshouseforaccess2. 1 Using the method posted Version 2.1 The first step to build the SHELL. ASP folder...

Buffer overflow

Buffer overflow in qoslist in bos.net.tcp.server in IBM AIX 6.1 and VIOS 2.1 allows local users to gain privileges via unspecified vectors...

CVE-2010-0961

Buffer overflow in qoslist in bos.net.tcp.server in IBM AIX 6.1 and VIOS 2.1 allows local users to gain privileges via unspecified vectors...

Directory traversal

Directory traversal vulnerability in modules/hayoo/index.php in Tribisur 2.1, 2.0, and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary files via directory traversal sequences in the theme parameter. NOTE: some of these details are obtained from...

Microsoft Security Bulletin MS10-016 - Important Vulnerability in Windows Movie Maker Could Allow Remote Code Execution (975561)

Microsoft Security Bulletin MS10-016 - Important Vulnerability in Windows Movie Maker Could Allow Remote Code Execution 975561 Published: March 09, 2010 Version: 1.0 General Information Executive Summary This security update addresses a privately reported vulnerability in Windows Movie Maker and...

CVE-2010-0958

CVE-2010-0958 describes a directory traversal vulnerability in Tribisur (versions 2.1, 2.0 and earlier) affecting the file modules/hayoo/index.php when magic_quotes_gpc is disabled. Attackers could use directory traversal sequences in the theme parameter to include and execute arbitrary files. Th...

Linux Kernel 64bit Personality Handling Local DoS Vulnerability

Exploit for linux platform in category dos / poc ============================================================================= Linux Kernel 64bit Personality Handling Local Denial of Service Vulnerability ============================================================================= Vulnerable:...

Killmonster 2.1 SQL Injection

Killmonster + Download : http://scripts.ringsworld.com/games-and-entertainment/km2/ + Vuln Code : login.php Type Username Here: Type Password Here: authenticate.php $isadmin=$POST'isadmin'; $password=$POST'password'; $password=md5$password; $query = "select from kmadmins where username='$isadmin'...

Killmonster 2.1 - Authentication Bypass

Killmonster + Download : http://scripts.ringsworld.com/games-and-entertainment/km2/ + Vuln Code : login.php Type Username Here: Type Password Here: authenticate.php $isadmin=$POST'isadmin'; $password=$POST'password'; $password=md5$password; $query = "select from kmadmins where username='$isadmin'...

CoreFTP 2.1 b1637 - Password field Universal Buffer Overflow

CoreFTP 2.1 b1637 - Password field Universal Buffer Overflow !/usr/bin/python Vulnerability : CoreFTP v2.1 b1637 password field Universal BOF exploit Found by : mrme seeleymagic at hotmail dot com Coded by : mrme & corelanc0d3r Download from : http://www.coreftp.com/download.html Tested on : XP S...

CVE-2010-0457

SQL injection vulnerability in home.php in magic-portal 2.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-0457

SQL injection vulnerability in home.php in magic-portal 2.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-0457

The CVE-2010-0457 entry describes an SQL injection in the Magic-Portal 2.1 application, specifically in home.php where the id parameter is unsafely used in SQL queries. Root cause: lack of input sanitization/parameterization for id, enabling remote attackers to execute arbitrary SQL commands. Imp...

Magic Portal 2.1 SQL Injection

:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: Exploit Title :magic-portal SQL injection Vulnerability Author: alnjm33 Software Link: Version: 2.1 Tested on: Version 2.1 My home : Sec-war.com...