Design/Logic Flaw

system/message.php in Admin News Tools 2.5 does not properly restrict access, which allows remote attackers to post news messages via a direct request...

CVE-2009-2558

CVE-2009-2558 affects Admin News Tools 2.5. The vulnerability is a failure to properly restrict access in system/message.php, enabling remote attackers to post news messages via a direct request. NVD lists a CVSSv2 base score of 7.5 (High) with NETWORK attack vector, LOW attack complexity, and pa...

CVE-2009-2557

The vulnerability CVE-2009-2557 affects Admin News Tools 2.5, with a directory traversal flaw in system/download.php that permits reading arbitrary files via a .. sequence in the fichier parameter. This is described across multiple sources (NVD entry for CVE-2009-2557 and OpenVAS detail for Admin...

Admin News Tools 2.5 Remote File Download Vulnerability

Securitylab.ir Application Info: Name: Admin News Tools Version: 2.5 Website: http://www.adminnewstools.fr.nf Download: http://www.adminnewstools.fr.nf/zip/ANT-2.5.zip Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability...

Admin News Tools 2.5 - fichier Remote File Disclosure

Admin News Tools 2.5 - fichier Remote File Disclosure Securitylab.ir Application Info: Name: Admin News Tools Version: 2.5 Website: http://www.adminnewstools.fr.nf Download: http://www.adminnewstools.fr.nf/zip/ANT-2.5.zip Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts:...

Admin News Tools 2.5 (fichier) Remote File Disclosure Vulnerability

No description provided by source. Securitylab.ir Application Info: Name: Admin News Tools Version: 2.5 Website: http://www.adminnewstools.fr.nf Download: http://www.adminnewstools.fr.nf/zip/ANT-2.5.zip Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir &...

Admin News Tools 2.5 (fichier) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications =================================================================== Admin News Tools 2.5 fichier Remote File Disclosure Vulnerability ===================================================================...

Admin News Tools 2.5 - 'fichier' Remote File Disclosure

Securitylab.ir Application Info: Name: Admin News Tools Version: 2.5 Website: http://www.adminnewstools.fr.nf Download: http://www.adminnewstools.fr.nf/zip/ANT-2.5.zip Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability...

Sql injection

SQL injection vulnerability in the new user registration feature in BigACE CMS 2.5, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2009-1778

CVE-2009-1778 affects BigACE CMS 2.5: SQL injection in the new user registration feature when magic_quotes_gpc is disabled, allowing remote attackers to execute arbitrary SQL via the username parameter. The provided documents do not include remediation details (patch/version) or explicit exploita...

CVE-2009-1778

SQL injection vulnerability in the new user registration feature in BigACE CMS 2.5, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter...

[SECURITY] Fedora 10 Update: ipsec-tools-0.7.2-1.fc10

This is the IPsec-Tools package. You need this package in order to really use the IPsec functionality in the linux-2.5+ kernels. This package builds: - setkey, a program to directly manipulate policies and SAs - racoon, an IKEv1 keying daemon...

[SECURITY] Fedora 9 Update: ipsec-tools-0.7.2-1.fc9

This is the IPsec-Tools package. You need this package in order to really use the IPsec functionality in the linux-2.5+ kernels. This package builds: - setkey, a program to directly manipulate policies and SAs - racoon, an IKEv1 keying daemon...

BIGACE CMS 2.5 (username) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

Unrestricted file upload

Unrestricted file upload vulnerability in upload-file.php in Adam Patterson Studio Lounge Address Book 2.5, as reachable from index2.php, allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...

CVE-2009-1483

Unrestricted file upload vulnerability in upload-file.php in Adam Patterson Studio Lounge Address Book 2.5, as reachable from index2.php, allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...

Enhanced CTorrent / dtorrent "btFiles::BuildFromMI()"缓冲区溢出漏洞

CNCAN ID：CNCAN-2009042102 Enhanced CTorrent是一款UNIX环境下的Bittorrent客户端。 Enhanced CTorrent存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 btfiles.cpp包含的"btFiles::BuildFromMI"函数存在边界错误，诱使用户打开特殊构建的torrent文件，可导致触发基于栈的缓冲区溢出，可能以应用程序权限执行任意指令。 Enhanced CTorrent 3.x 目前没有解决方案提供： http://sourceforge.net/projects/dtorrent/...

Studio Lounge Address Book 2.5 (profile) Shell Upload Vulnerability

No description provided by source. Address Book 2.5 profile Remote Shell Upload Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download: http://www.studiolounge.net/2007/08/17/address-book-25 - vuln file:...

Studio Lounge Address Book 2.5 - profile Arbitrary File Upload

Studio Lounge Address Book 2.5 - profile Arbitrary File Upload Address Book 2.5 profile Remote Shell Upload Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download:...

Address Book 2.5 Shell Upload

Address Book 2.5 profile Remote Shell Upload Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download: http://www.studiolounge.net/2007/08/17/address-book-25 - vuln file: upload-file.php The upload-file.php...