phpBB2 Plus 1.53 - Acronym Mod SQL Injection

Acronym Mod v0.9.5 Remote SQL Injection Vulnerability Download: http://www.codemonkeyx.net Found By: the master exploit: http://Target/Path/admin/adminacronyms.php?mode=edit&id=-1%20UNION%20SELECT%20null,userpassword,null%20FROM%20phpbbusers%20where%20userid=2&sid=AdminHash Greetz: str0ke , Dr Ma...

CVE-2006-6796

CVE-2006-6796 is a PHP remote file inclusion vulnerability in MTCMS 2.0 and earlier. The flaw exists in admin/admin_settings.php where an attacker can supply a URL in the ins_file parameter to trigger inclusion of arbitrary PHP code, potentially leading to remote code execution. Affected product/...

CVE-2006-6792

CVE-2006-6792 affects Calendar MX BASIC 1.0.2 and earlier, with an SQL injection via the ID parameter in calendar_detail.asp. The vulnerability details provided indicate remote attackers could potentially manipulate SQL commands, aligned with a CVSS v2 base score of 7.5 (HIGH) and network access ...

CVE-2006-6789

PHP remote file inclusion vulnerability in includes/archive/archivetopic.php in Phpbbxtra 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-6781

CVE-2006-6781 affects HLstats 1.20 through 1.34. The vulnerability allows remote attackers to obtain sensitive information via playinfo mode, when certain values of player and playerdata[lastName][] parameters are used, causing an error message to reveal the file path. Connected documents confirm...

CVE-2006-6780

CVE-2006-6780 describes an SQL injection in HLstats (versions 1.20–1.34) login form, exploitable via the killLimit parameter to execute arbitrary SQL commands. The issue arises from unsafely handling user input in the login process, leading to potential compromise of data confidentiality/integrit...

CVE-2006-6782

CVE-2006-6782 affects the Perl-based full‑text search tool pnamazu (versions up to and including 2006.02.28). The connected sources describe a Cross‑Site Scripting (XSS) vulnerability that could allow a remote attacker to cause the user’s browser to execute arbitrary script or HTML via unspecifie...

MailEnable POP PASS command buffer overflow

Added: 12/28/2006 CVE: CVE-2006-6605 BID: 21645 OSVDB: 32341 Background MailEnable is a mail server supporting SMTP and POP3 for Windows platforms. Problem A buffer overflow vulnerability in MailEnable allows remote, unauthenticated attackers to execute arbitrary commands by sending a long,...

CVE-2006-6772

Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backend option, allows remote attackers to execute arbitrary code via format string specifiers in the Common Name CN field of an SSL certificate associated with an https URL...

CVE-2006-6772

Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backend option, allows remote attackers to execute arbitrary code via format string specifiers in the Common Name CN field of an SSL certificate associated with an https URL...

CVE-2006-6769

CVE-2006-6769 applies to PHP Live! 3.2.2 and earlier, with multiple XSS flaws. Vulnerable components/files include transcripts.php (search_string parameter), index.php (l parameter), phplive/index.php (login field), and phplive/message_box.php (deptid and x parameters). Exploits describe arbitrar...

CVE-2006-6775

CVE-2006-6775 affects acFTP 1.5. The vulnerability allows remote authenticated users to cause a denial of service by sending a crafted argument to either the REST or PBSZ command. The available documentation confirms the affected component and the impact (DoS) but does not provide exploit details...

CVE-2006-6771

CVE-2006-6771 affects Irokez CMS 0.7.1 and earlier. When register_globals is enabled, remote attackers can craft a URL to set GLOBALS[PTH] parameters to include PHP code, enabling remote code execution. Affected files include (1) scripts/gallery.scr.php (func), (2) scripts/xtextarea.scr.php (spaw...

CVE-2006-6774

The CVE-2006-6774 entry concerns Ciberia Content Federator 1.0, where the PHP files socios/maquetacion_socio.php (and members/maquetacion_member.php) are vulnerable to a remote file inclusion via the path parameter. This allows remote code execution in the affected application's PHP context. The ...

CVE-2006-6772

Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backend option, allows remote attackers to execute arbitrary code via format string specifiers in the Common Name CN field of an SSL certificate associated with an https URL...

CVE-2006-6772

CVE-2006-6772 is a format-string vulnerability in w3m’s inputAnswer function (file.c) that affects modes -dump/-backend; an attacker could craft a certificate CN in an HTTPS URL to execute arbitrary code. The issue is fixed in later w3m builds (e.g., w3m-0.5.3+git20180125-1.14 and related openSUS...

CVE-2006-6773

CVE-2006-6773 affects Fishyshoop 0.930 beta, where pages/register/register.php allows remote attackers to create arbitrary administrative users by sending is_admin=1 via HTTP POST. The vulnerability enables elevation of privileges (admin account creation) through a parameter-based bypass in the r...

Mercur Messaging 2005 IMAP Login Buffer Overflow

This module exploits a stack buffer overflow in Atrium Mercur IMAP 5.0 SP3. Since the room for shellcode is small, using the reverse ordinal payloads yields the best results. This module requires Metasploit: https://metasploit.com/download Current source:...

[SECURITY] [DSA 1214-2] Updated gv packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1214-2 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 27th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1242-1] New elog packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1242-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 27th, 2006 http://www.debian.org/security/faq -...