CVE-2010-1452

CVE-2010-1452 affects Apache HTTP Server 2.2.x (before 2.2.16) via the mod_cache and mod_dav components. A request that lacks a path can crash the server, causing a denial of service. Debian advisories and related vendor notes confirm the issue and describe fixes/upgrades to 2.2.16 (and subsequen...

WebAd 2.2 Local File Inclusion Vulnerability

Exploit for php platform in category web applications ============================================ WebAd 2.2 Local File Inclusion Vulnerability ============================================ Script Name : WebAd 2.2 Version : 2.2 / 2010 Bug Type : LFI local file inclusion Found by : Metropolis Home ...

ECMall 2.2 app/groupbuy.app.php 延迟注射漏洞

No description provided by source. /index.php?app=groupbuy&act=index&id=2 and ifselect asciimidusername,1,1 from ecmmember where userid=1=97,Benchmark3000000,md51,1%23...

iScripts MultiCart 2.2 SQL Injection

iScripts MultiCart 2.2 Multiple SQL Injection Vulnerability Name iScripts MultiCart Vendor http://www.iscripts.com Versions Affected 2.2 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-03-07 X. INDEX I. ABOUT THE...

Fedora 12 : mod_auth_shadow-2.2-8.fc12 (2010-6359)

Fixes CVE-2010-1151 modauthshadow: bad wait2 call causes randomized authorization behaviour 578168. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 11 : nss_db-2.2-46.fc11 (2010-6331)

Stephane Chazelas reported that the nssdb module attempts to read a DBCONFIG file in the current directory when it is used. If the contents of the file can't be parsed properly, the copy of libdb which nssdb uses will print an error message. If nssdb is invoked from a setuid process, it may then...

osCommerce 2.2-MS2 phpinfo() Disclosure

Exploit Title: osCommerce 2.2-MS2 phpinfo disclosure vulnerability Date: 21 June 2010 Author: Neo-Gabriel Download: http://www.oscommerce.com/solutions/downloads Version: 2.2-MS2 Tested on: Windows 95 . .. . . . | | | /|| / \ / \ | | | | | | / / | | / | | |/ \ \ / \ \ / /\ | | | | \ \ | | \ \ |/...

Sql injection

SQL injection vulnerability in members.php in Arab Portal 2.2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the by parameter in the msearch action...

CVE-2010-2340

Arab Portal 2.2 is affected by an SQL injection in members.php when magic_quotes_gpc is disabled. Attackers can exploit the by parameter in the msearch action to execute arbitrary SQL commands. The issue is documented across multiple feeds (NVD, Red Hat, CVE records) with the same description. Th...

CVE-2010-2340

SQL injection vulnerability in members.php in Arab Portal 2.2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the by parameter in the msearch action...

Dalogin 2.2 Cross Site Scripting / File Disclosure / SQL Injection

dalogin 2.2 multiple vulnerabilites app desc: Configurable WebSite. PHP + Mysql: news zone with rss feed, private zone, languages, themes, administration panel app source: http://dalogin.sourceforge.net/ author: hc0 1 config file disclosure you can access config.ini file from...

DaLogin 2.2 (FCKeditor) Remote Arbitrary File Upload Exploit

Exploit for php platform in category web applications ============================================================ DaLogin 2.2 FCKeditor Remote Arbitrary File Upload Exploit ============================================================ Exploit database separated by exploit 0 0 // type local,...

DaLogin 2.2 - FCKeditor Arbitrary File Upload

DaLogin 2.2 - FCKeditor Arbitrary File Upload Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm eidelweiss member from Inj3ct0r Team 1 1...

DaLogin 2.2 - 'FCKeditor' Arbitrary File Upload

Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm eidelweiss member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-...

OSCommerce Online Merchant 2.2 Shell Upload

| \ | | | | | |/ / | | | | | // \ \ / / | | | | | | |/ | ' \ | |\ \ /\ V / | | || | || | | | | | | \| / /||,|||/|| || | | | || | | | | |/' || || | | |/ / | ' \ | /| |\ | | | / | | | | | | | \ |/ /./ / /|,|| || || / / DEFACEMENT it's for script kiddies... $ Exploit Title : Oscommerce...

Open Forum Server 2.2 b005 Arbitrary File Write

============================================================================================================ //\ /\ /\ /\ /\ /\ ///\ //\ /\ /\///\ // \ // //\ \ / //\ \ / // //\ \ /\\ \ \ \ / / / / // \ \ // // // // \ // //\ \\ \ // /// \ \ / \ / // / // / / / / / \ \ / / / ...

Open Forum Server 2.2 b005 Directory Traversal

============================================================================================================ //\ /\ /\ /\ /\ /\ ///\ //\ /\ /\///\ // \ // //\ \ / //\ \ / // //\ \ /\\ \ \ \ / / / / // \ \ // // // // \ // //\ \\ \ // /// \ \ / \ / // / // / / / / / \ \ / / / ...

CVE-2010-1089

SQL injection vulnerability in vedifaq.php in PHP Trouble Ticket 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-1089

CVE-2010-1089 is a SQL injection in PHP Trouble Ticket 2.2, affecting vedi_faq.php via the id parameter. The vulnerability allows remote execution of arbitrary SQL commands and has a CVSS v2 base score of 7.5 (HIGH). Supporting references from NVD, Red Hat, OpenVAS and CVE lists confirm the affec...

CVE-2010-1053

CVE-2010-1053 affects Zen Time Tracking 2.2 and earlier. The vulnerability arises from multiple SQL injection flaws in login paths (userlogin.php and managerlogin.php) where the input parameters (username, password) can be exploited when magic_quotes_gpc is disabled. This allows remote attackers ...