HP Power Manager Remote Code Execution

Added: 11/06/2009 CVE: CVE-2009-2685 BID: 36933 OSVDB: 59684 Background HP Power Manager is a web-based application that enables administrators to manage an HP UPS from a browser-based management console. Problem A stack-based buffer overflow in the HP Power Manager management web server allows...

HP Power Manager Remote Code Execution

Added: 11/06/2009 CVE: CVE-2009-2685 BID: 36933 OSVDB: 59684 Background HP Power Manager is a web-based application that enables administrators to manage an HP UPS from a browser-based management console. Problem A stack-based buffer overflow in the HP Power Manager management web server allows...

BASE base_qry_common Remote File Include

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' class Metasploit3 'BASE...

BASE base_qry_common Remote File Include

This module exploits a remote file inclusion vulnerability in the baseqrycommon.php file in BASE 1.2.4 and earlier. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'BASE baseqrycommon Remote Fil...

BASE 1.2.4 - base_qry_common.php Remote File Inclusion (Metasploit)

BASE 1.2.4 - baseqrycommon.php Remote File Inclusion Metasploit This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2006-2685

creationtimestamp| type| source ---|---|--- 2008-06-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9908 2010-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16897 2018-05-29 15:50:33+00:00| seen|...

CVE-2008-2685

SQL injection vulnerability in article.asp of Battle Blog 1.25 Build 4 and earlier allows remote attackers to execute arbitrary SQL commands via the entry parameter (distinct from CVE-2008-2626). The provided description confirms the vulnerability and affected version range; no additional exploit...

CVE-2004-2685

Buffer overflow in YoungZSoft CCProxy 6.2 and earlier allows remote attackers to execute arbitrary code via a long address in a ping p command to the Telnet proxy service, a different vector than CVE-2004-2416...

CVE-2004-2685

CVE-2004-2685 : Technical details are not provided in the connected documents. Public specifics (affected versions, impact, fixes) are not present here; monitor for updates from official advisories.

jetbox-sql.txt

netVigilance Security Advisory 28 Jetbox CMS version 2.1 Multiple SQL Injection Vulnerabilities Description: Jetbox CMS is seriously tested on usability & has a professional intuitive interface. The system is role based, with workflow and module orientated. All content is fully separated from...

CVE-2007-2685

Jetbox CMS 2.1 has SQL injection vulnerabilities in index.php via the view and login parameters, allowing remote attackers to execute arbitrary SQL commands. Root cause: improper handling of input in Jetbox CMS 2.1 leads to injectable SQL. Exploitation is described as remote with no authenticatio...

BASE base_qry_common.php file include

Added: 06/23/2006 CVE: CVE-2006-2685 BID: 18298 OSVDB: 25770 Background Snort is an open-source intrusion detection system. The Basic Analysis and Security Engine BASE is a web interface for analyzing Snort results. Problem If the registerglobals PHP option is enabled, the baseqrycommon.php scrip...

BASE base_qry_common.php file include

Added: 06/23/2006 CVE: CVE-2006-2685 BID: 18298 OSVDB: 25770 Background Snort is an open-source intrusion detection system. The Basic Analysis and Security Engine BASE is a web interface for analyzing Snort results. Problem If the registerglobals PHP option is enabled, the baseqrycommon.php scrip...

CVE-2006-2685

PHP remote file inclusion vulnerability in Basic Analysis and Security Engine BASE 1.2.4 and earlier, with registerglobals enabled, allows remote attackers to execute arbitrary PHP code via a URL in the BASEpath parameter to 1 baseqrycommon.php, 2 basestatcommon.php, and 3...

CVE-2006-2685

CVE-2006-2685 affects BASE 1.2.4 and earlier. When PHP register_globals is enabled, the base_qry_common.php script accepts a BASE_path parameter that can include arbitrary files, enabling remote PHP code execution via (1) base_qry_common.php, (2) base_stat_common.php, or (3) includes/base_include...

CVE-2005-2685

SaveWebPortal 3.4 is exposed to a remote PHP code execution flaw: an attacker can trigger arbitrary PHP code by directly requesting admin/PhpMyExplorer/editerfichier.php and editing the fichier parameter (e.g., header.php). The root cause is tied to PhpMyExplorer in the project’s ecosystem. The a...