phpaddressbook211-sql.txt

phpAddressBook Remote Sql İnj. Vuln. Download: http://downloads.coronamatrix.org/phpAddressBookv2.11.zip Version : All My Version Founder: Cr@zyKing HomePage: http://coderx.org Greatz : str0ke & All My Friends Contact: [email protected] PoC:...

Directory traversal

Multiple directory traversal vulnerabilities in CoronaMatrix phpAddressBook 2.11 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the skin parameter to 1 index.php and 2 install.php. NOTE: it was later reported that vector 1 is also present in 2.0...

phpAddressBook 2.11 Multiple Local File Inclusion Vulnerabilities

No description provided by source. / \ /\ /\ / \ / \ | | | | \ / / ||| | | | | | | | | | \ / \ | | | | | | || | / \ \ | | || | / / /\ \ |/ / / / phpAddressBook v2.11 Multiple Local File Inclusion Vulnerabilities Download: http://downloads.coronamatrix.org/phpAddressBookv2.11.zip Founder: 0x90...

CVE-2006-6538

D-LINK DWL-2000AP+ firmware 2.11 allows remote attackers to cause 1 a denial of service device reset via a flood of ARP replies on the wired or wireless radio link and 2 a denial of service device crash via a flood of ARP requests on the wireless link...

D-Link DWL-2000AP 2.11 (ARP Flood) Remote Denial of Service Exploit

No description provided by source. / ARP FLOODER v0.1 - [email protected] - 2006-12-04 designed to crash D-LINK DWL-2000AP+ compile with: gcc arpflood.c -o arpflood / define BSDSOURCE 1 define GNUSOURCE include stdio.h include stdlib.h include string.h include stdarg.h include fcntl.h include...

FreeWPS 2.11 - 'upload.php' Remote Command Execution

source: https://www.securityfocus.com/bid/20494/info FreeWPS is prone to a remote command-execution vulnerability. Attackers can exploit this issue to execute arbitrary system commands with the privileges of the webserver process. FreeWPS version 2.11 is vulnerable to this issue; other versions m...

Design/Logic Flaw

images.php in Justin White aka YTZ Free Web Publishing System FreeWPS 2.11 allows remote attackers to execute arbitrary PHP code by uploading a .php file into the /upload directory as specified in the dirPath parameter, then performing a direct request to that file...

CVE-2006-1363

images.php in Justin White aka YTZ Free Web Publishing System FreeWPS 2.11 allows remote attackers to execute arbitrary PHP code by uploading a .php file into the /upload directory as specified in the dirPath parameter, then performing a direct request to that file...

FreeWPS 2.11 - 'images.php' Remote Code Execution

? errorreportingEERROR; function exploitinit if !extensionloaded'phpcurl' && !extensionloaded'curl' if !dl'curl.so' && !dl'phpcurl.dll' die "oo error - cannot load curl extension!"; function exploitheader echo "\noooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo";...

FuzzyMonkey 2.11 - MyClassifieds Email Variable SQL Injection

FuzzyMonkey 2.11 - MyClassifieds Email Variable SQL Injection source: https://www.securityfocus.com/bid/8863/info It has been reported that FuzzyMonkey MyClassifieds may be prone to a SQL injection vulnerability that may allow an attacker to disclose user passwords by supplying malicious SQL code...

FuzzyMonkey 2.11 - MyClassifieds Email Variable SQL Injection

source: https://www.securityfocus.com/bid/8863/info It has been reported that FuzzyMonkey MyClassifieds may be prone to a SQL injection vulnerability that may allow an attacker to disclose user passwords by supplying malicious SQL code to the Email variable. This attack may cause the software to...

CVE-2002-0306

CVE-2002-0306 affects Avenger's News System (ANS) up to version 2.11. The flaw allows remote attackers to execute arbitrary commands by supplying shell metacharacters in the p (plugin) parameter of ans.pl. This is a command‑injection vulnerability impacting the plugin parameter, with the NVD indi...

CVE-2002-0307

The CVE-2002-0307 vulnerability affects Avenger's News System (ANS) versions 2.11 and earlier, specifically in the script file ans.pl. The flaw is a directory traversal via the p parameter, allowing an attacker to read arbitrary files and, by feeding content to Perl’s eval, potentially execute co...