362 matches found
Oceandir 2.9 - show_vote.php SQL Injection
Oceandir 2.9 - showvote.php SQL Injection / @title Oceandir = 2.9 showvote.php id Remote SQL injection @author JEEN HACKER TEAM Jeen + Secertry @cost 250$ @script http://www.oceandir.com @copyright 2008 @homepage http://www.hackteach.org/cc/teach.php @email [email protected] , [email protected] /...
Oceandir 2.9 - 'show_vote.php' SQL Injection
/ @title Oceandir = 2.9 showvote.php id Remote SQL injection @author JEEN HACKER TEAM Jeen + Secertry @cost 250$ @script http://www.oceandir.com @copyright 2008 @homepage http://www.hackteach.org/cc/teach.php @email [email protected] , [email protected] / Exploit : user...
microtik-poc.txt
/ -------------------------------------------------------------------------- c ShadOS 2008 | || || | | |/ / | || | | / - | | ' SNMP Service General Information Summary ... RouterOS supports only Get, which means that you can use this implementation only for network monitoring. The MikroTik Router...
Pages that inherit page restrictions are not respecting those restrictions after upgrade to Confluence 2.9
Tested and verified in both customer enviornment and in test enviornment. In the event that you have a parent page restriction and a child page that inherits that restriction, upon upgrade, 2.9 will only respect the explicit parent permission in terms of security trims and actual access but not...
[SECURITY] [DSA 1566-1] New cpio packages fix denial of service
------------------------------------------------------------------------ Debian Security Advisory DSA-1566-1 [email protected] http://www.debian.org/security/ Steve Kemp May 02, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------...
CNStats 2.9 (who_r.php) Remote File Include Vulnerability
CNStats 2.9 whor.php Remote File Include Vulnerability ----------------------------------------------------------------------------------------- Scripts : CNStats 2.9 Discovered By : irvian scripts site : http://www.cnstats.com/ dork : "CNStats 2.9"...
CVE-2007-2086
Multiple PHP remote file inclusion vulnerabilities in CNStats 2.9 allow remote attackers to execute arbitrary PHP code via a URL in the bj parameter to 1 whor.php or 2 whos.php in reports/...
CVE-2007-2086
CNStats 2.9 is affected by multiple PHP remote file inclusion flaws that allow an attacker to execute arbitrary PHP code by supplying a URL in the bj parameter to reports/who_r.php or reports/who_s.php. Root cause is RFI in those scripts, enabling arbitrary code execution over the network. CVSSv2...
cnstats-rfi.txt
CNStats 2.9 whor.php Remote File Include Vulnerability ----------------------------------------------------------------------------------------- Scripts : CNStats 2.9 Discovered By : irvian scripts site : http://www.cnstats.com/ dork : "CNStats 2.9"...
CNStats 2.9 (who_r.php bj) Remote File Inclusion Vulnerability
No description provided by source. CNStats 2.9 whor.php Remote File Include Vulnerability ----------------------------------------------------------------------------------------- Scripts : CNStats 2.9 Discovered By : irvian scripts site : http://www.cnstats.com/ dork : "CNStats 2.9"...
CNStats 2.9 - who_r.php?bj Remote File Inclusion
CNStats 2.9 - whor.php?bj Remote File Inclusion CNStats 2.9 whor.php Remote File Include Vulnerability ----------------------------------------------------------------------------------------- Scripts : CNStats 2.9 Discovered By : irvian scripts site : http://www.cnstats.com/ dork : "CNStats 2.9"...
CNStats 2.9 (who_r.php bj) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ============================================================== CNStats 2.9 whor.php bj Remote File Inclusion Vulnerability ============================================================== CNStats 2.9 whor.php Remote File Include Vulnerabilit...
CVE-2007-1942
FastStone Image Viewer 2.9 is affected by CVE-2007-1942 due to an integer overflow while processing BMP images. The vulnerability allows a context‑dependent attacker to cause a denial of service and potentially execute arbitrary code, as demonstrated by crafted BMPs wh3intof.bmp and wh4intof.bmp....
CVE-2006-3165
SQL injection vulnerability in propview.php in Free Realty 2.9-0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the sort parameter...
CVE-2006-3166
The CVE-2006-3166 entry describes a Cross-site scripting (XSS) vulnerability in propview.php of Free Realty (versions 2.9-0.6 and earlier). The issue allows remote attackers to cause execution of arbitrary web scripts or HTML by manipulating the sort parameter. Affected component: Free Realty’s p...
CVE-2006-2997
The CVE-2006-2997 entry describes an XSS in ZMS 2.9 and earlier when register_globals is enabled. The vulnerability is triggered via the raw parameter in the search field, allowing remote injection of arbitrary web script/HTML. Affected product/version: ZMS 2.9 and earlier. Underlying cause: inpu...
CVE-2006-2997
Cross-site scripting XSS vulnerability in ZMS 2.9 and earlier, when registerglobals is enabled, allows remote attackers to inject arbitrary web script or HTML via the raw parameter in the search field...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Belchior Foundry vCard 2.9 allow remote attackers to inject arbitrary web script or HTML via the page parameter in 1 toprated.php and 2 newcards.php. NOTE: the cardid vector is already covered by CVE-2006-1230...
CVE-2006-2810
Multiple cross-site scripting XSS vulnerabilities in Belchior Foundry vCard 2.9 allow remote attackers to inject arbitrary web script or HTML via the page parameter in 1 toprated.php and 2 newcards.php. NOTE: the cardid vector is already covered by CVE-2006-1230...
CVE-2006-2810
CVE-2006-2810 describes multiple cross-site scripting (XSS) vulnerabilities in Belchior Foundry vCard 2.9. The issue allows remote attackers to inject arbitrary web script or HTML via the page parameter in (1) toprated.php and (2) newcards.php. The card_id vector is noted as being covered by CVE-...