CMS Faethon 2.2 Ultimate (RFI/XSS) Multiple Remote Vulnerabilies

No description provided by source. -========================================== ViVa Islam + YeMeN ====================================- Name : CMS Faethon 2.2 Ultimate Multiple Remote Vulnerabilies Download From : http://cmsfaethon.org Found By : RoMaNcYxHaCkEr RoMaNTiC-TeaM BlackxHat , BlackBox ...

CMS Faethon 2.2 Ultimate - Remote File Inclusion / Cross-Site Scripting

-========================================== ViVa Islam + YeMeN ====================================- Name : CMS Faethon 2.2 Ultimate Multiple Remote Vulnerabilies Download From : http://cmsfaethon.org Found By : RoMaNcYxHaCkEr RoMaNTiC-TeaM BlackxHat , BlackBox , aLwHEeD Home Page : WwW.4RxH.CoM...

Sql injection

Multiple SQL injection vulnerabilities in 1 setupmysql.php and 2 setupoptions.php in miniBB 2.2 and possibly earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary SQL commands via the xtr parameter in a userinfo action to index.php...

CVE-2008-2029

CVE-2008-2029 concerns miniBB 2.2 (and possibly earlier) with vulnerabilities in setup_mysql.php and setup_options.php. The root cause is multiple SQL injection weaknesses when register_globals is enabled, permitting remote attackers to inject arbitrary SQL via the xtr parameter in a userinfo act...

CVE-2008-2022

Mulatiple cross-site scripting XSS vulnerabilities in PD9 Software MegaBBS 2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 toid parameter to send-private-message.asp and the 2 redirect parameter to admin/impersonate.asp. NOTE: vector 2 requires authentication...

Sql injection

Multiple SQL injection vulnerabilities in PD9 Software MegaBBS 2.2 allow remote attackers to execute arbitrary SQL commands via the 1 invisible and 2 timeoffset parameters to profile/controlpanel.asp and the 3 attachmentid parameter to forums/attach-file.asp...

Cross site scripting

Mulatiple cross-site scripting XSS vulnerabilities in PD9 Software MegaBBS 2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 toid parameter to send-private-message.asp and the 2 redirect parameter to admin/impersonate.asp. NOTE: vector 2 requires authentication...

CVE-2008-2023

Multiple SQL injection vulnerabilities in PD9 Software MegaBBS 2.2 allow remote attackers to execute arbitrary SQL commands via the 1 invisible and 2 timeoffset parameters to profile/controlpanel.asp and the 3 attachmentid parameter to forums/attach-file.asp...

CVE-2008-2023

CVE-2008-2023 affects PD9 Software MegaBBS 2.2. The vulnerability is a set of SQL injection flaws that allow remote attackers to execute arbitrary SQL commands via the following parameters: (1) invisible and (2) timeoffset in profile/controlpanel.asp, and (3) attachmentid in forums/attach-file.as...

MiniBB多个SQL注入和跨站脚本漏洞

BUGTRAQ ID: 28930 MiniBB（Minimalistic Bulletin Board）是一个线性的可定制电子布告栏程序。 MiniBB的实现上存在多个SQL注入漏洞，远程攻击者可能利用此漏洞对服务程序执行SQL注入攻击。 如果将action设置为registernew的话，MiniBB的index.php文件中没有正确地验证对lang参数的输入便返回给了用户，这可能允许攻击者在用户浏览器会话中执行任意HTML和脚本代码。...

minibb-xsssql.txt

Author: GiReX Homepage: girex.altervista.org Date: 21/04/2008 CMS: miniBB 2.2 and maybe prior Site: minibb.net Bug 1: Full Path Disclosure Bug 2: Cross Site Scripting Bug 3: Remote SQL Injection Need: registerglobals = On --------------------------------------- 21/04/2008 Vendor informed 22/04/20...

MiniBB 2.2 - Cross-Site Scripting SQL Injection Full Path Disclosure

MiniBB 2.2 - Cross-Site Scripting SQL Injection Full Path Disclosure Author: GiReX Homepage: girex.altervista.org Date: 21/04/2008 CMS: miniBB 2.2 and maybe prior Site: minibb.net Bug 1: Full Path Disclosure Bug 2: Cross Site Scripting Bug 3: Remote SQL Injection Need: registerglobals = On...

CVE-2008-1942

Foxit Reader 2.2 is affected by CVE-2008-1942. The vulnerability arises when processing a PDF containing (1) a malformed ExtGState resource with a /Font resource or (2) an XObject resource with a Rotate setting, leading to memory corruption that can cause a crash and may allow arbitrary code exec...

CVE-2008-1914

Stack-based buffer overflow in the AntServer module AntServer.exe in BigAnt IM Server in BigAnt Messenger 2.2 allows remote attackers to execute arbitrary code via a long URI in a request to TCP port 6080. NOTE: some of these details are obtained from third party information...

CVE-2008-1914

CVE-2008-1914 is a stack-based buffer overflow in the AntServer module (AntServer.exe) of BigAnt IM Server / BigAnt Messenger 2.2. The vulnerability can be triggered by a long URI in a request to TCP port 6080, enabling remote code execution. Multiple public references document this flaw, includi...

BigAnt Server 2.2 PreAuth Remote SEH Overflow Exploit (0day)

No description provided by source. !/usr/bin/python BigAnt Server Ver 2.2 PreAuth Remote SEH Overflow 0day Matteo Memelli aka ryujin www.be4mind.com - www.gray-world.net 04/13/2008 Tested on Windows 2000 Sp4 English Vulnerable process is AntServer.exe Offset for SEH overwrite is 954 Bytes...

BigAnt Server 2.2 PreAuth Remote SEH Overflow Exploit (0day)

Exploit for unknown platform in category remote exploits ============================================================ BigAnt Server 2.2 PreAuth Remote SEH Overflow Exploit 0day ============================================================ !/usr/bin/python BigAnt Server Ver 2.2 PreAuth Remote SEH...

Pragmatic Utopia PU Arcade 2.2 - 'gid' SQL Injection

source: https://www.securityfocus.com/bid/28701/info PU Arcade is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify dat...

CVE-2008-1698

CVE-2008-1698 is an XSS vulnerability in Simple Gallery 2.2, exploitable via the album parameter to index.php in gallery.php. The occurrence is described as a remote script/HTML injection. The NVD entry lists a MEDIUM risk (CVSS v2 base score 4.3) with network access and no authentication require...

CVE-2008-1698

Cross-site scripting XSS vulnerability in gallery.php in Simple Gallery 2.2 allows remote attackers to inject arbitrary web script or HTML via the album parameter to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...