2521 matches found
CVE-2009-1731
SQL injection vulnerability in panel/index.php in MLFFAT 2.1 allows remote attackers to execute arbitrary SQL commands via a base64-encoded supervisor cookie...
Sql injection
SQL injection vulnerability in panel/index.php in MLFFAT 2.1 allows remote attackers to execute arbitrary SQL commands via a base64-encoded supervisor cookie...
CVE-2009-1731
SQL injection vulnerability in panel/index.php in MLFFAT 2.1 allows remote attackers to execute arbitrary SQL commands via a base64-encoded supervisor cookie...
CVE-2009-1731
The provided documents contain concrete details for CVE-2009-1731: MLFFAT 2.1 is affected, specifically the panel/index.php component. The vulnerability is an SQL injection caused by processing a base64-encoded supervisor cookie, enabling remote attackers to execute arbitrary SQL commands. Impact...
Miffat 2.1 Insecure Cookie
|| || | || o,7 || . o7 || q||| ow, : / / . MLFFAT 2.1 - insecure Cookie Handling Qabandi | iqaahotmail.fr From Kuwait, Peace. Salamz: Killer Hack, Ghost-R00t, Mr.Mn7os, all Muslims Buy: http://mlffat.com/emm/index.php?action=order Dork: "Powered by mlffat"...
Mlffat 2.1 (Auth Bypass / Cookie) SQL Injection Vulnerability
No description provided by source. || || | || o,7 || . o7 || q||| ow, : / / . MLFFAT 2.1 - insecure Cookie Handling Qabandi | iqaahotmail.fr From Kuwait, Peace. Salamz: Killer Hack, Ghost-R00t, Mr.Mn7os, all Muslims Buy: http://mlffat.com/emm/index.php?action=order Dork: "Powered by mlffat"...
Mlffat 2.1 (Auth Bypass / Cookie) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================= Mlffat 2.1 Auth Bypass / Cookie SQL Injection Vulnerability ============================================================= MLFFAT 2.1 - insecure Cookie Handling Buy:...
Mlffat 2.1 - Cookie Authentication Bypass
Mlffat 2.1 - Cookie Authentication Bypass || || | || o,7 || . o7 || q||| ow, : / / . MLFFAT 2.1 - insecure Cookie Handling Qabandi | iqaahotmail.fr From Kuwait, Peace. Salamz: Killer Hack, Ghost-R00t, Mr.Mn7os, all Muslims Buy: http://mlffat.com/emm/index.php?action=order Dork: "Powered by mlffat...
GlassFish Enterprise Server Multiple Cross Site Scripting Vulnerabilities
GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Attacker-supplied HTML and script code would run in the context of the affected site, potentially allowing the attacker to steal cookie-based...
CVE-2009-1553
Multiple cross-site scripting XSS vulnerabilities in the Admin Console in Sun GlassFish Enterprise Server 2.1 allow remote attackers to inject arbitrary web script or HTML via the query string to 1 applications/applications.jsf, 2 configuration/configuration.jsf, 3 customMBeans/customMBeans.jsf, ...
CVE-2009-1553
Multiple cross-site scripting XSS vulnerabilities in the Admin Console in Sun GlassFish Enterprise Server 2.1 allow remote attackers to inject arbitrary web script or HTML via the query string to 1 applications/applications.jsf, 2 configuration/configuration.jsf, 3 customMBeans/customMBeans.jsf, ...
CVE-2009-1553
CVE-2009-1553 covers multiple XSS vulnerabilities in Sun GlassFish Enterprise Server 2.1 Admin Console. Vulnerable components: admin JSF endpoints (applications.jsf, configuration.jsf, customMBeans.jsf, resourceNode/resources.jsf, sysnet/registration.jsf, webService/webServicesGeneral.jsf) and na...
Apache Tiles Multiple XSS Vulnerability
This host has Apache Tiles installed and is prone to Cross-Site Script Vulnerability OpenVAS Vulnerability Test $Id: secpodapachetilesxssvuln.nasl 8695 2018-02-06 16:42:37Z cfischer $ Apache Tiles Multiple XSS Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 2009 SecPod,...
Solaris 5.4 (sparc) : 104075-01
Firewall-1 2.1: Unix FW-1 VPN manager module creates zombie proces. Date this patch was last updated by Sun : Oct/03/96 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...
Solaris 5.3 (x86) : 104077-01
Firewall-1 2.1: Unix FW-1 VPN manager module creates zombie proces. Date this patch was last updated by Sun : Oct/04/96 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...
Solaris 5.4 (x86) : 104077-01
Firewall-1 2.1: Unix FW-1 VPN manager module creates zombie proces. Date this patch was last updated by Sun : Oct/04/96 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...
Linux Kernel CIFS 'decode_unicode_ssetup()'远程缓冲区溢出漏洞
BUGTRAQ ID: 34612 CNCAN ID：CNCAN-2009042104 Linux是一款开放源代码的操作系统。 Linux Kernel CIFS 'decodeunicodessetup'存在缓冲区溢出，远程攻击者可以利用漏洞使系统崩溃。 在处理unicode字符串域对齐时存在错误，decodeunicodessetup存在不且当的假设，无论何时都进行垫字节处理，因此如果字符串域词对齐的情况下，组合serverDomain字符串的不正确缓冲区大小，可导致内存破坏。 Linux kernel 2.6.29 1 Linux kernel 2.6.29 -git8 Linux...
CUPS '_cupsImageReadTIFF()'整数溢出漏洞
BUGTRAQ ID: 34571 CVE ID：CVE-2009-0163 CNCVE ID：CNCVE-20090163 Common Unix Printing SystemCUPS是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS处理TIFF图像存在整数溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。...
CVE-2008-6729
Multiple cross-site request forgery CSRF vulnerabilities in password.php in PHPmotion 2.1 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that modify an account via the 1 password or 2 emailaddress parameter...