BBSGood论坛程序DelShortInFo.asp页面越权漏洞

在文件DelShortInFo.asp中： sql="select from LxTelshortinfo "&selectid&" "' //第20行 rs.open sql,conn,1,3 if notrs.BOF and rs.EOF then while not rs.EOF select case trimRequestCStringSaferequest"shortinfo" case "收件箱" rs"收件人删除标记"="Y" 程序在修改短信标记的时候没有对用户的合法权限做验证导致越权漏洞的产生 BBSGood 5.0/5.0.2 厂商补丁： BBSGood.Speed...

Xitami 5.0 - '/AUX' Request Remote Denial of Service

source: https://www.securityfocus.com/bid/40027/info Xitami is prone to a denial-of-service vulnerability. Attackers can exploit this issue to crash the affected application, denying service to legitimate users. Xitami 5.0a0 is vulnerable. !/usr/bin/perl Xitami/5.0a0 Denial Of Service Disclaimer:...

PHP-Nuke 5.0 - Viewslink SQL Injection

PHP-Nuke 5.0 - Viewslink SQL Injection Author: CMD Contact: [email protected] Dork: allinurl: op=viewslink&sid= =-==-==-==-==-==-==-==C==M==D==-==-==-==-==-==-==-==-==-==-==-= Code : Exploit 1: /links.php?op=viewslink&sid=-1//union//select//0,aid//from//nukeauthors//where//radminsuper=1/...

PHP-Nuke 5.0 - Viewslink SQL Injection

Author: CMD Contact: [email protected] Dork: allinurl: op=viewslink&sid= =-==-==-==-==-==-==-==C==M==D==-==-==-==-==-==-==-==-==-==-==-= Code : Exploit 1: /links.php?op=viewslink&sid=-1//union//select//0,aid//from//nukeauthors//where//radminsuper=1/...

[ MDVSA-2010:082 ] clamav

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:082 http://www.mandriva.com/security/ Package : clamav Date : April 18, 2010 Affected: 2008.0, Corporate 4.0, Enterprise Server 5.0 Problem Description: Multiple vulnerabilities has been found and corrected ...

Memcached Denial of service vulnerability

The host is running Memcached and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodmemcacheddosvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Memcached Denial of service vulnerability Authors: Sooraj KS Copyright: Copyright c 2010 SecPod, http://www.secpod.com This...

CmS 5.0 SQL Injection

----------------------------------------------------------------------- CmS id SQL Injection Vulnerability ----------------------------------------------------------------------- Author : spykit Site : http://devilzc0de.org/ Date : April, 22-2010 Location : Jakarta, Indonesia Time Zone : GMT +7:0...

cms (id) 5.0 - SQL Injection

cms id 5.0 - SQL Injection ----------------------------------------------------------------------- CmS id SQL Injection Vulnerability ----------------------------------------------------------------------- Author : spykit Site : http://devilzc0de.org/ Date : April, 22-2010 Location : Jakarta,...

cms (id) 5.0 - SQL Injection

----------------------------------------------------------------------- CmS id SQL Injection Vulnerability ----------------------------------------------------------------------- Author : spykit Site : http://devilzc0de.org/ Date : April, 22-2010 Location : Jakarta, Indonesia Time Zone : GMT +7:0...

RPM Select/Elite 5.0 Buffer Overflow

!/usr/bin/python RPM Select/Elite v5.0 .xml config parsing unicode buffer overflow PoC Found by: mrme - http://net-ninja.net/ Homepage: http://lpd.brooksnet.com/ Download: http://www.brooksnet.com/download-rpmselect Tested on: Windows XP SP3 Advisory:...

FusionForge 5.0 Multiple Remote File Include Vulnerability

Exploit for php platform in category web applications ========================================================== FusionForge 5.0 Multiple Remote File Include Vulnerability ========================================================== + FusionForge 5.0 Multiple Remote File Include Vulnerability...

FusionForge 5.0 - Multiple Remote File Inclusions

FusionForge 5.0 - Multiple Remote File Inclusions + FusionForge 5.0 Multiple Remote File Include Vulnerability 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by...

FusionForge 5.0 - Multiple Remote File Inclusions

FusionForge 5.0 Multiple Remote File Include Vulnerability 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1...

Fedora Update for libnids FEDORA-2010-5545

Check for the Version of libnids OpenVAS Vulnerability Test Fedora Update for libnids FEDORA-2010-5545 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2010-0085

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.225, and 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than...

CVE-2010-0845

CVE-2010-0845 is addressed in Oracle’s March 2010 Java CPU advisory (and related Oracle/OpenJDK advisories). The connected documents indicate CVE-2010-0845 is among OpenJDK/JRE vulnerabilities fixed by the CPU update, which also bundles fixes for other OpenJDK issues and notes that affected Java ...

OpenJDK No ClassCastException for HashAttributeSet constructors if run with -Xcomp (6894807)

Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

CyberCMS - SQL Injection

Exploit Title: CyberCMS Remote SQL Injection Vuln. Date: 26/11/2009 Author: hc0de | hc0de.blogspot.com Software Link: http://cyberfusion.ramx.org/cyber-cms Version: app version Tested on: Ubuntu Linux 9.04 CVE : PoC: +Target: http://server/faq.php?id=SQLCODE -MySQL Version: 5.0.37-community-nt...

CVE-2009-4736

Cross-site scripting XSS vulnerability in search.php in CommonSense CMS 5.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2009-4736

The CVE-2009-4736 entry describes a Cross-site scripting (XSS) vulnerability in CommonSense CMS 5.0 . The issue is triggered in the search.php script via the q parameter, allowing remote attackers to inject arbitrary web script or HTML. The description does not specify affected versions beyond 5....