Oscailt CMS 3.3 Local File Inclusion

Exploit for unknown platform in category web applications ==================================== Oscailt CMS 3.3 Local File Inclusion ==================================== 0 Oscailt 3.3 CMS 0 Download: http://sourceforge.net/projects/oscailt/ 0 Bug: Local File Inclusion in index.php file ! 0 Poc:...

Samba错误配置/etc/passwd文件绕过安全限制漏洞

BUGTRAQ ID: 36363 CVE ID: CVE-2009-2813 Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。 如果/etc/passwd中的用户错误的配置为拥有空的主目录（::）且启用了自动homes共享，或用该用户名创建了明确的共享，则任何连接到该共享名的客户端都可以访问root（/）之下的整个文件系统。 Samba Samba 3.4 Samba Samba 3.3 Samba Samba 3.2 Samba Samba 3.0 临时解决方法：...

GemStoneS 6.3.1 - stoned Local Buffer Overflow

GemStoneS 6.3.1 - stoned Local Buffer Overflow / wonderfulcaricatureofexploitability.c AKA GemStone/S 6.3.1 "stoned" Local Buffer Overflow Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 09.07.2009 Gemstone/S "stoned" suffers from a local buffer overflow when...

Sql injection

SQL injection vulnerability in messagebox.php in OSI Codes PHP Live! 3.3 allows remote attackers to execute arbitrary SQL commands via the deptid parameter...

CVE-2009-3062

PHP Live! 3.3 is vulnerable to an SQL injection in message_box.php via the deptid parameter. This allows remote attackers to execute arbitrary SQL commands against the underlying database, potentially compromising the application and data. Affected component: PHP Live! (module: message_box.php). ...

Input validation

Intel Desktop and Intel Mobile Boards with BIOS firmware DQ35JO, DQ35MP, DP35DP, DG33FB, DG33BU, DG33TL, MGM965TW, D945GCPE, and DX38BT allows local administrators with ring 0 privileges to gain additional privileges and modify code that is running in System Management Mode, or access hypervisory...

CVE-2008-7096

Intel Desktop and Intel Mobile Boards with BIOS firmware DQ35JO, DQ35MP, DP35DP, DG33FB, DG33BU, DG33TL, MGM965TW, D945GCPE, and DX38BT allows local administrators with ring 0 privileges to gain additional privileges and modify code that is running in System Management Mode, or access hypervisory...

Use a low-privileged Oracle database accounts give the OS access permissions-bug warning-the black bar safety net

Author:Mickey These days look at the article called"Penetration: from application down to OS Oracle"of the document,feel quite interesting,the document probably means that is,if the ORACLE service is using the administrator account to start,as long as you have a have resource and connect privileg...

CVE-2008-6851

CVE-2008-6851 is a SQL injection in PHP Link Directory (phpLD) 3.3, specifically in page.php. The root cause is the combination of register_globals being enabled and magic_quotes_gpc disabled, allowing remote attackers to inject SQL via the name parameter. Connected sources confirm the affected c...

HP-UX Update for Veritas VxFS 3.3/3.5 HPSBUX01218

Check for the Version of Veritas VxFS 3.3/3.5 OpenVAS Vulnerability Test HP-UX Update for Veritas VxFS 3.3/3.5 HPSBUX01218 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

HP-UX Update for Veritas VxFS 3.3/3.5 HPSBUX01218

Check for the Version of Veritas VxFS 3.3/3.5 OpenVAS Vulnerability Test HP-UX Update for Veritas VxFS 3.3/3.5 HPSBUX01218 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Directory traversal

Directory traversal vulnerability in section.php in 6rbScript 3.3, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the name parameter...

Sql injection

SQL injection vulnerability in section.php in 6rbScript 3.3 allows remote attackers to execute arbitrary SQL commands via the singerid parameter in a singers action...

CVE-2008-6454

The CVE-2008-6454 entry concerns a SQL injection in 6rbScript 3.3, exploitable via the singerid parameter in the singers action (section.php). The vulnerability is caused by unsafely constructed SQL queries, enabling remote attackers to execute arbitrary SQL commands. Public references (e.g., Exp...

CVE-2008-6453

Directory traversal vulnerability in section.php in 6rbScript 3.3, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the name parameter...

CVE-2008-6454

SQL injection vulnerability in section.php in 6rbScript 3.3 allows remote attackers to execute arbitrary SQL commands via the singerid parameter in a singers action...

CVE-2008-6453

CVE-2008-6453 affects 6rbScript 3.3. A directory traversal flaw in section.php can be exploited when magic_quotes_gpc is disabled to read arbitrary files by supplying a double-dot (.. ) in the name parameter. The NVD entry notes a remote-access vector with MEDIUM severity (CVSS v2: AV:N/AC:M/Au:N...

CVE-2009-0816

Multiple cross-site scripting XSS vulnerabilities in the backend user interface in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 allow remote attackers to inject arbitrary web script or HTML via unspecified fields...

Cross site request forgery (csrf)

The jumpUrl mechanism in class.tslibfe.php in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 leaks a hash secret juHash in an error message, which allows remote attackers to read arbitrary files by including the hash in a request...

CVE-2008-6147

ForumApp 3.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 data/8690.mdb or 2 data/8690BAK.mdb...