CVE-2006-7196

Cross-site scripting XSS vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.15 allows remote attackers to inject arbitrary web script or HTML via the time parameter to cal2.jsp and possibly...

PT-2007-3754 · Comdev · Comdev One Admin Modules Builder

Name of the Vulnerable Software and Affected Versions: Comdev One Admin Modules Builder modbuild version 4.1 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter to 1 "config-bak.php" or 2 "config.php" endpoints. However, it's noted...

Directory traversal

Multiple directory traversal vulnerabilities in MimarSinan CompreXX 4.1 allow remote attackers to create files in arbitrary directories via a .. dot dot in a 1 .rar, 2 .jar or 3 .zip archive...

MyBulletinBoard (MyBB) <= 1.2.2 (CLIENT-IP) SQL Injection Exploit

No description provided by source. !/usr/bin/perl LOGO Mybb = 1.2.2 Remote SQL Injecton Exploit v.2.0 uused: SQL CLIENTIP vulnerability !need: Mysql = 4.1 wwork: blind sql-inj ggoogle: Powered By MyBB coded by Elekt antichat.ru Coments Описание: Работа эксплойта...

Woltlab Burning Board Lite 1.0.2pl3e - pms.php SQL Injection

Woltlab Burning Board Lite 1.0.2pl3e - pms.php SQL Injection = 4.1 / if $argc6 printr' ------------------------------------------------------------------------------- Usage: php '.$argv0.' host path user pass action OPTIONS host: target server ip/hostname path: path to wbblite user/pass: valid us...

CVE-2007-0663

SQL injection vulnerability in index.php in Eclectic Designs CascadianFAQ 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the qid parameter, a different vector than CVE-2007-0631. NOTE: The provenance of this information is unknown; the details are obtained solely fr...

CVE-2007-0663

CVE-2007-0663 describes an SQL injection in Eclectic Designs CascadianFAQ 4.1 and earlier, exploitable via the qid parameter in index.php. The vulnerability allows remote attackers to execute arbitrary SQL commands; affected software is CascadianFAQ on index.php, with the issue explicitly tied to...

CVE-2007-0631

SQL injection vulnerability in index.php in Eclectic Designs CascadianFAQ 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-0631

CVE-2007-0631 affects Eclectic Designs CascadianFAQ 4.1 and earlier. A vulnerability in the web app’s index.php allows a remote attacker to inject SQL via the catid parameter, enabling arbitrary SQL execution. The available connected sources confirm the parameter-based SQL injection vector and id...

CascadianFAQ <= 4.1 (index.php) Remote SQL Injection Vulnerability

No description provided by source. Title : CascadianFAQ = 4.1 index.php Remote Blind SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://eclectic-designs.com $$ : Free Dork : This FAQ is powered by CascadianFAQ DorkEx :...

Aztek Forum 4.0 - Multiple Vulnerabilities

!/usr/bin/php Aztek Forum 4.1 Multiple Vulnerabilities Exploit header ================================================== sploit Owner - root status Trying to register a new user sploit Login/Password - phpsploit8435 status Trying to get database informations sploit Full Path Disclosure -...

Aztek Forum 4.0 - Multiple Vulnerabilities

Aztek Forum 4.0 - Multiple Vulnerabilities !/usr/bin/php Aztek Forum 4.1 Multiple Vulnerabilities Exploit header ================================================== sploit Owner - root status Trying to register a new user sploit Login/Password - phpsploit8435 status Trying to get database...

InstantASP 4.1 - 'Logon.aspx?sessionid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/22052/info InstantForum.NET is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based authentication credentials and...

InstantASP 4.1 - 'Members1.aspx' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/22052/info InstantForum.NET is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based authentication credentials and...

InstantASP 4.1 - Members1.aspx Multiple Cross-Site Scripting Vulnerabilities

InstantASP 4.1 - Members1.aspx Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/22052/info InstantForum.NET is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can...

InstantASP 4.1 - Logon.aspx?sessionid Cross-Site Scripting

InstantASP 4.1 - Logon.aspx?sessionid Cross-Site Scripting source: https://www.securityfocus.com/bid/22052/info InstantForum.NET is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issu...

GNU BinUtils GAS缓冲区溢出漏洞

GNU BinUtils GAS是GNU的汇编器。 GNU BinUtils GAS存在缓冲区溢出，本地攻击者可以利用漏洞以用户进程权限执行任意指令。 通过诱使用户或自动系统使用gcc或gas构建恶意源文件，可导致触发漏洞，可能以用户进程权限执行任意指令。 Ubuntu Ubuntu Linux 5.10 sparc Ubuntu Ubuntu Linux 5.10 powerpc Ubuntu Ubuntu Linux 5.10 i386 Ubuntu Ubuntu Linux 5.10 amd64 Ubuntu Ubuntu Linux 5.0 4 powerpc Ubuntu...

CVE-2006-6045

Multiple PHP remote file inclusion vulnerabilities in Comdev One Admin Pro 4.1 allow remote attackers to execute arbitrary PHP code via a URL in the pathskin parameter to 1 adminfoot.php, 2 adminhead.php, or 3 adminlogin.php...

CVE-2006-6045

CVE-2006-6045 describes multiple PHP remote file inclusion vulnerabilities in Comdev One Admin Pro 4.1. The flaw allows remote attackers to execute arbitrary PHP code by passing a malicious URL in the path[skin] parameter to adminfoot.php, adminhead.php, or adminlogin.php. Affected software: Comd...

Sun SunView rpc.selection_svc远程文件泄露漏洞

selectionsvc是SunOS系统下一个RPC服务。 早期SunOS系统下的的selectionsvc RPC服务程序实现上存在漏洞，允许攻击者源程读取目标系统上的任意文件。 在Sun3和Sun4系统中，远程用户可以读取任何SunView运行用户可读的文件。而在i386平台下，远程用户可以读取运行SunView的工作站上的任意文件。注意，如果root运行了SunView，那么所有的文件就都可能被远程系统所访问。...