ActiveVotes 2.2 - Authentication Bypass

ActiveVotes 2.2 - Authentication Bypass ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor: www.activewebsoftwares.com Software: ActiveVotes v 2.2 author: я3d D3v!L Date: 28.11.2008 Home:...

CVE-2008-5273

The CVE-2008-5273 entry describes an SQL injection vulnerability in viewnews.asp of Todd Woolums ASP News Management 2.2, exploitable via the newsID parameter to execute arbitrary SQL commands remotely. Connected records confirm affected software/version and the underlying cause (unsafely handled...

CVE-2008-5194

The provided connected documents confirm a concrete vulnerability: SQL injection in SoftVisions Software Online Booking Manager (obm) 2.2, exploitable through the id parameter in checkavail.php. This allows remote attackers to execute arbitrary SQL commands. The issue is documented across CVE-200...

CVE-2008-5137

tkman in tkman 2.2 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/tkman or 2 /tmp/ll temporary file...

CVE-2008-5137

CVE-2008-5137 affects tkman 2.2 and is due to insecure handling of temporary files (/tmp/tkman##### and /tmp/ll), enabling local symlink attacks to overwrite arbitrary files. The issue is documented across multiple sources (Gentoo GLSA 200909-07, SUSE/OpenSUSE advisories, and OpenVAS/Nessus entri...

mxCamArchive 2.2 Bypass Config Download Vulnerability

Exploit for unknown platform in category web applications ===================================================== mxCamArchive 2.2 Bypass Config Download Vulnerability ===================================================== Bypass Config Download Vulnerability script: mxcamarchive 2.2 download...

Linux Kernel 'do_splice_from()'本地安全绕过漏洞

BUGTRAQ ID: 31903 CVE ID：CVE-2008-4554 CNCVE ID：CNCVE-20084554 Linux是一款开放源代码的操作系统。 Linux在执行部分文件操作时'dosplicefrom'函数不正确拒绝文件描述符，本地攻击者可以利用漏洞绕过本地安全限制。 攻击者可以绕过append-only限制，破坏系统文件。 RedHat Fedora 9 0 RedHat Fedora 8 0 Linux kernel 2.6.26 4 Linux kernel 2.6.26 3 Linux kernel 2.6.26 .6 Linux kernel 2.6.26...

CVE-2008-4752

TlNews 2.2 allows remote attackers to bypass authentication and gain administrative access by setting the tlNewslogin cookie to admin...

CVE-2008-4752

TlNews 2.2 contains an authentication bypass: remote attackers can gain administrative access by setting the tlNews_login cookie to admin. The flaw allows bypass of login via cookie manipulation, enabling admin privileges. The CVE entry cites a base score of 7.5 (HIGH) under CVSS v2.0 with networ...

tlnews-insecure.txt

Tlnews 2.2 Admin Login Bypass via Cookie Found by X0r - EvolutionTeaM Email: evolutionteam.x0atgmaildotcom Cms Download: http://www.easy-script.com/scripts-dl/tlnews-22.zip Exploit: javascript:document.cookie = "tlNewslogin=admin; content=admin; path=/" Beby y0ur system g0t d0wn :P // X0r -...

Tlnews 2.2 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ================================================= Tlnews 2.2 Insecure Cookie Handling Vulnerability ================================================= Tlnews 2.2 Admin Login Bypass via Cookie Found by X0r - EvolutionTeaM Cms Download:...

Tlnews 2.2 - Insecure Cookie Handling

Tlnews 2.2 - Insecure Cookie Handling Tlnews 2.2 Admin Login Bypass via Cookie Found by X0r - EvolutionTeaM Email: evolutionteam.x0atgmaildotcom Cms Download: http://www.easy-script.com/scripts-dl/tlnews-22.zip Exploit: javascript:document.cookie = "tlNewslogin=admin; content=admin; path=/" Beby...

miniPortail <= 2.2 (XSS/LFI) Remote Vulnerabilities

No description provided by source. / miniPortail = 2.2 XSS/LFI Remote Vulnerabilities ------------------------------------------------------- By StAkeR - StAkeRathotmaildotit http://www.easy-script.com/scripts-dl/miniportail.zip ------------------------------------------------------- -1 Local Fil...

MindDezign Photo Gallery 2.2 - Arbitrary Add Admin

MindDezign Photo Gallery 2.2 - Arbitrary Add Admin !/usr/bin/perl ============================================================= MindDezign Photo 2.2 Gallery Arbitrary Add Admin Exploit ============================================================= ,--^----------,--------,-----,-------^--, |...

miniportail-xsslfi.txt

/ miniPortail javascript /...

minddezignpg-sql.txt

================================================================================== MindDezign Photo Gallery 2.2 index.php id Remote SQL Injection Vulnerability ================================================================================== ,--^----------,--------,-----,-------^--, | |||||||||...

Invision Power Board 'name'参数SQL注入漏洞

BUGTRAQ ID: 31288 CNCAN ID：CNCAN-2008092307 Invision Power Board是一款基于PHP的论坛程序。 Invision Power Board不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息或可操作数据库。 问题是脚本对'name'参数缺少过滤，构建恶意的SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 Invision Power Services Invision Power Board 2.3.5 Invision Power Services Invision Power Boa...

Gentoo Security Advisory GLSA 200409-03 (Python)

The remote host is missing updates announced in advisory GLSA 200409-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-4170

The CVE-2008-4170 entry concerns osCommerce 2.2 RC 2a, where the create_account.php handler exposes sensitive information because an invalid dob parameter triggers an error message that reveals the installation path. This is an information-disclosure vulnerability in the input validation/error ha...

Linux Kernel 'SCTP'模块存在漏洞

BUGTRAQ ID: 31121 CVE ID：CVE-2008-3792 CNCVE ID：CNCVE-20083792 Linux是一款开放源代码的操作系统。 Linux内核'SCTP'模块存在多个安全问题，本地攻击者可以利用漏洞获得敏感信息或使内核崩溃。 问题代码如下： file: net/sctp/socket.c ... SCTPSTATIC int sctpgetsockoptstruct sock sk, int level, int optname, char user optval, int user optlen int retval = 0; int len;...