Mod_Security ASCIIZ字节绕过安全限制漏洞

modsecurity是经常与PHP结合使用的Web应用防火墙。 modsecurity在处理特定的HTTP数据时存在漏洞，远程攻击者可能利用此漏洞绕过某些安全限制。 在接收到请求后modsecurity会将其解析成为Web应用参数。由于解析入站数据的方式遵循RFC中所定义的规则而不一定是Perl、Python、Java或PHP中的HTTP请求解析器所兼容的方式，因此如果RFC与实际实现方式不匹配时可能存在一些限制绕过漏洞。...

Wordpress <= v2.1.0

If you're logged in into wordpress as an admin, your comments aren't properly sanitized, thus allowing an XSS to be posted. This can be exploited using XSRF techniques. More info & PoC: http://www.virtuax.be/advisories/Advisory4-20022007.txt...

Mailman 2.1.x - Multiple Input Validation Vulnerabilities

Mailman 2.1.x - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/20021/info Mailman is prone to multiple input-validation vulnerabilities because the application fails to sanitize user-input. These issues include multiple cross-site scripting vulnerabilities and...

Mailman 2.1.x - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/20021/info Mailman is prone to multiple input-validation vulnerabilities because the application fails to sanitize user-input. These issues include multiple cross-site scripting vulnerabilities and a CRLF-injection vulnerability. A successful exploit of...

CVE-2006-4444

Multiple SQL injection vulnerabilities in Cybozu Garoon 2.1.0 for Windows allow remote authenticated users to execute arbitrary SQL commands via the 1 tid parameter in the a todo/view aka TODO List View, b todo/modify aka TODO List Modify, or c todo/delete functionality; the 2 pid parameter in th...

Cybuzu Garoon 2.1.0 Multiple Remote SQL Injection Vulnerabilities

Exploit for cgi platform in category web applications ================================================================= Cybuzu Garoon 2.1.0 Multiple Remote SQL Injection Vulnerabilities ================================================================= Cybozu Garoon 2 SQL Injection Vulnerabilities...

Cybuzu Garoon 2.1.0 - Multiple SQL Injections

Cybozu Garoon 2 SQL Injection Vulnerabilities by Tan Chew Keong Release Date: 2006-08-28 Summary Some SQL injection vulnerabilities have been found in Cybozu Garoon 2. When exploited by a logon user, the vulnerabilities allow manipulation of SQL statements which can lead to disclosure of...

CVE-2006-3913

Buffer overflow in Freeciv 2.1.0-beta1 and earlier, and SVN 15 Jul 2006 and earlier, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a 1 negative chunklength or a 2 large chunk-offset value in a PACKETPLAYERATTRIBUTECHUNK packet in the...

Two crash vulnerabilities in Freeciv 2.1.0-beta1 (SVN 15 Jul 2006)

Luigi Auriemma Application: Freeciv http://www.freeciv.org Versions: = 2.1.0-beta1 and SVN = 15 Jul 2006 Platforms: Windows, nix, BSD, MacOS and more Bugs: A memcpy crash in generichandleplayerattributechunk B invalid memory access in handleunitorders Exploitation: remote, versus server Date: 23...

Code injection

The editing form in RWiki 2.1.0pre1 through 2.1.0 allows remote attackers to execute arbitrary Ruby code via unknown attack vectors...

CVE-2006-2581

Cross-site scripting XSS vulnerability in Wiki content in RWiki 2.1.0pre1 through 2.1.0 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors...

CVE-2006-2582

The editing form in RWiki 2.1.0pre1 through 2.1.0 allows remote attackers to execute arbitrary Ruby code via unknown attack vectors...

CVE-2006-2582

The editing form in RWiki 2.1.0pre1 through 2.1.0 allows remote attackers to execute arbitrary Ruby code via unknown attack vectors...

Remote file inclusion

PHP remote file inclusion vulnerability in classifiedright.php in phpBazar 2.1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the languagedir parameter...

CVE-2006-2528

CVE-2006-2528 affects phpBazar 2.1.0 and earlier, where a vulnerability in classified_right.php allows remote attackers to execute arbitrary PHP code via a URL supplied to the language_dir parameter (PHP remote file inclusion). The issue is caused by insufficient validation of the language_dir in...

[SA19776] Help Center Live osTicket SQL Injection Vulnerabilities

TITLE: Help Center Live osTicket SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA19776 VERIFY ADVISORY: http://secunia.com/advisories/19776/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Help Center Live 2.x http://secunia.com/product/6127/...

CVE-2006-1979

CVE-2006-1979 is a Cross-site Scripting (XSS) vulnerability in mwguest.php of Manic Web MWGuest 2.1.0. The flaw allows remote attackers to inject arbitrary web script or HTML via the homepage parameter. Connected documents confirm the affected component and vulnerability class but do not provide ...

CVE-2006-1405

CVE-2006-1405 is a reported Cross-site Scripting (XSS) vulnerability in the SweetSuite.NET Content Management System (ssCMS) prior to or including version 2.1.0, affecting the search.aspx functionality. The flaw enables remote attackers to inject arbitrary web script or HTML through the keywords ...

SweetSuite.NET - ssCMS 2.1.x XSS vuln.

SweetSuite.NET - ssCMS 2.1.x XSS vuln. Vuln. discovered by : r0t Date: 25 march 2006 vendor: www.sweetsuite.net/ssCMSMain.aspx affected versions: 2.1.0 and prior orginal advisory: http://pridels.blogspot.com/2006/03/sweetsuitenet-sscms-21x-xss-vuln.html Vuln. Description: ssCMS contains a flaw th...

чтение произвольного файла в ODFaq 2.1.0

Программа: ODFaq 2.1.0 http://www.oodie.com/project/odfaq/ Описание: в интерактивной системе ODFaq 2.1.0 существует возможность обхода ограничения на чтение файлов с сервера. В файле config.inc.php в ассоциативном массиве $PAGE прописаны все страницы, доступные для выполнения через параметр P в...