1738 matches found
CVE-2009-2585
CVE-2009-2585: SQL injection in Mlffat 2.2 (index.php) via a member cookie during the editprofile action. Exploitation details are not provided in the connected records beyond the stated vector; CVE-2009-1731 uses a different vector.
Miffat 2.2 SQL Injection
?php iniset"maxexecutiontime",0; printr' || || | || o,7 || . o7 || q||| o///, : / / . /QQQQQQQQQQQQQQQQQQQ\ q Mlffat 2.2 Blind SQL Inj. /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ q Cookie 3 /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ q http://www.mlffat.com |QQQQ/ By Qabandi \QQQQ| |QQQQ| |QQQQ| |QQQQ| From Kuwait, PEACE...
Mlffat 2.2 Remote Blind SQL Injection Exploit
No description provided by source. ?php iniset"maxexecutiontime",0; printr' || || | || o,7 || . o7 || q||| o///, : / / . /QQQQQQQQQQQQQQQQQQQ\ q Mlffat 2.2 Blind SQL Inj. /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ q Cookie 3 /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ q http://www.mlffat.com |QQQQ/ By Qabandi \QQQQ| |QQQQ| |QQQ...
Mlffat 2.2 Remote Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================= Mlffat 2.2 Remote Blind SQL Injection Exploit ============================================= ?php iniset"maxexecutiontime",0; printr' || || | || o,7 || . o7 || q||| o///, : / /...
iPhone Safari Phone Auto Dial
Released since Apple published the iPhone 3.0 security fixes. Vulnerability Report --- BEGIN ADVISORY --- Manufacturer: Apple www.apple.com Device: iPhone 3G iPhone 1st Gen Firmware: 2.1 possible earlier versions Device Type: smart phone Subsystems: Safari and mobile telephony...
Arab Portal 2.2 SQL Injection
Script Name : Arab portal 2.2 Remote Auth SQL Bypass Vulnerabilitiy Script home : http://www.arab-portal.info/arabportal22.zip Exploit risk level : High Found By : RoMaNcYxHaCkEr RXH Written By : Sniper Code S.C.T - 443 Our home : WwW.Sec-Code.CoM Security - Codes TeaM...
Code injection
The admin module in MindDezign Photo Gallery 2.2 allows remote attackers to add administrative users and gain privileges via a modified username parameter in an edit account action to index.php...
CVE-2008-6788
SQL injection vulnerability in MindDezign Photo Gallery 2.2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in an info action to index.php...
CVE-2008-6789
CVE-2008-6789 : A SQL injection vulnerability affects MindDezign Photo Gallery 2.2. The vulnerability is triggered by the username parameter in the login action to the admin module in index.php, allowing remote attackers to execute arbitrary SQL commands. This is a different vector from CVE-2008-...
Solaris 5.3 (sparc) : 103502-07
Solstice AdminSuite 2.2: AdminSuite patch. Date this patch was last updated by Sun : Aug/20/97 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
Solaris 5.6 (sparc) : 109211-08
Sun Cluster 2.2: Comm Patch. Date this patch was last updated by Sun : Aug/31/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrando...
Fedora 10 : drupal-cck-6.x.2.2-1.fc10 (2009-2869)
Fixes DRUPAL-SA-CONTRIB-2009-013 - XSS issue: http://drupal.org/node/406520 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introduci...
Linux Kernel CIFS 'decode_unicode_ssetup()'远程缓冲区溢出漏洞
BUGTRAQ ID: 34612 CNCAN ID：CNCAN-2009042104 Linux是一款开放源代码的操作系统。 Linux Kernel CIFS 'decodeunicodessetup'存在缓冲区溢出，远程攻击者可以利用漏洞使系统崩溃。 在处理unicode字符串域对齐时存在错误，decodeunicodessetup存在不且当的假设，无论何时都进行垫字节处理，因此如果字符串域词对齐的情况下，组合serverDomain字符串的不正确缓冲区大小，可导致内存破坏。 Linux kernel 2.6.29 1 Linux kernel 2.6.29 -git8 Linux...
Linux Kernel 'exit_notify()' CAP_KILL校验本地特权提升漏洞
BUGTRAQ ID: 34405 CNCAN ID：CNCAN-2009040803 Linux是一款开放源代码的操作系统。 Linux exitnotify中CAPKILL检查存在问题，本地攻击者可以利用漏洞提升特权。 无论怎样重置-exitsignal，恶意用户可以绕过检查，使得恶意应用程序可以在退出前执行setuid两进制程序。导致特权提升。 Linux kernel 2.6.29 -git8 Linux kernel 2.6.29 -git1 Linux kernel 2.6.29 Linux kernel 2.6.28 9 Linux kernel 2.6.28 8 Linu...
osCommerce 2.2/3.0 - 'oscid' Session Fixation
source: https://www.securityfocus.com/bid/34348/info osCommerce is prone to a session-fixation vulnerability. Attackers can exploit this issue to hijack a user's session and gain unauthorized access to the affected application. The following are vulnerable: osCommerce 2.2 osCommerce 3.0 Beta Othe...
CVE-2009-0862
Cross-site scripting XSS vulnerability in the hookcntrlrerroroutput function in modules/page/hooks/listeners.php in the admincp component in TangoCMS 2.2.x aka Eagle before 2.2.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details ar...
CVE-2009-0862
Cross-site scripting XSS vulnerability in the hookcntrlrerroroutput function in modules/page/hooks/listeners.php in the admincp component in TangoCMS 2.2.x aka Eagle before 2.2.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details ar...
EFS Easy Chat Server (XSRF) Change Admin Pass Vulnerability
Exploit for unknown platform in category remote exploits =========================================================== EFS Easy Chat Server XSRF Change Admin Pass Vulnerability =========================================================== EFS Easy Chat Server XSRF Change Admin Pass Vulnerability...