CVE-2009-0703

CVE-2009-0703 : SQL injection in bview.asp of ASPThai.Net Webboard 6.0 allows remote SQL execution via the id parameter . Affected component: bview.asp; root cause: improper input handling enabling SQL injection. Impact as per NVD: partial confidentiality, partial integrity, partial availability....

Microsoft XML Core Services XMLHttpRequest SetCookie2头信息泄露漏洞

BUGTRAQ ID: 33803 CVECAN ID: CVE-2009-0419 Microsoft XML Core Services（MSXML）允许使用JScript、VBScript和Visual Studio 6.0的用户开发基于XML的应用，以与其他遵循XML 1.0标准的应用程序交互操作。 Microsoft XML Core Services没有正确地限制网页对Set-Cookie2 HTTP响应头的访问，远程攻击者可以通过XMLHttpRequest调用绕过HTTPOnly保护机制读取敏感信息。 Microsoft XML Core Services 6.0...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in FotoWeb 6.0 Build 273 allow remote attackers to inject arbitrary web script or HTML via the 1 s parameter to cmdrequest/Login.fwx and the 2 search parameter to Grid.fwx...

CVE-2009-0573

CVE-2009-0573 concerns FotoWeb 6.0 (Build 273). The vulnerability is described as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via the 1) s parameter to cmdrequest/Login.fwx and 2) the search parameter to Grid.fwx. The connected sour...

Sql injection

Multiple SQL injection vulnerabilities in customerlogincheck.asp in ClickTech ClickCart 6.0 allow remote attackers to execute arbitrary SQL commands via 1 the txtEmail parameter aka E-MAIL field or 2 the txtPassword parameter aka password field to customerlogin.asp. NOTE: some of these details ar...

CVE-2009-0462

CVE-2009-0462 describes multiple SQL injection vulnerabilities in ClickTech ClickCart 6.0. The issue affects the login flow, where user input in the txtEmail (E-MAIL) and txtPassword fields sent to customer_login.asp can be manipulated to alter SQL commands, enabling remote attackers to execute a...

CVE-2009-0449

CVE-2009-0449 corresponds to a buffer overflow in klim5.sys within Kaspersky Anti-Virus for Workstations 6.0 and Anti-Virus 2008, enabling local privilege escalation via an IOCTL 0x80052110 call. The OpenVAS/NVD entries describe the affected driver and the local-exploit condition; CVSS v2 base sc...

ClickCart 6.0 (Auth Bypass) Remote SQL Injection Vulnerability

No description provided by source. ☢ ☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢بسم الله الرحمن الرحيم☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢ ☠ Tybe:Auth Bypass Remote SQL Injection Vulnerability ☠ Vendor: clicktech.com ☠ ☠ Software: clickcart 6.0 ☠ ☠ author: я3d D3v!L ☠ ☠ Date: 2.2.2009 ☠ ☠ Home: WwW.aHACKER.biz ☠ ☠ contact: N/A...

ClickCart 6.0 (Auth Bypass) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== ClickCart 6.0 Auth Bypass Remote SQL Injection Vulnerability ============================================================== Tybe:Auth Bypass Remote SQL Injection Vulnerability...

ClickCart 6.0 - Authentication Bypass

ClickCart 6.0 - Authentication Bypass ☢ ☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢بسم الله الرحمن الرحيم☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢ ☠Tybe:Auth Bypass Remote SQL Injection Vulnerability ☠Vendor:...

ClickCart 6.0 SQL Injection

☢ ☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢بسم الله الرحمن الرحيم☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢ ☠ Tybe:Auth Bypass Remote SQL Injection Vulnerability ☠ Vendor: clicktech.com ☠ ☠ Software: clickcart 6.0 ☠ ☠ author: я3d D3v!L ☠ ☠ Date: 2.2.2009 ☠ ☠ Home: WwW.aHACKER.biz ☠ ☠ contact: N/A ☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠☠DEV!L'5 of...

Kaspersky (Multiple Products) - klim5.sys Local Privilege Escalation

Kaspersky Multiple Products - klim5.sys Local Privilege Escalation source: https://www.securityfocus.com/bid/33561/info Multiple Kaspersky products are prone to a local privilege-escalation vulnerability because the applications fail to perform adequate boundary checks on user-supplied data. A...

Kaspersky (Multiple Products) - 'klim5.sys' Local Privilege Escalation

source: https://www.securityfocus.com/bid/33561/info Multiple Kaspersky products are prone to a local privilege-escalation vulnerability because the applications fail to perform adequate boundary checks on user-supplied data. A local attacker can exploit this issue to execute arbitrary code with...

Star Articles 6.0 (admin.manage) Remote Contents Change Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Star Articles 6.0 admin.manage Remote Contents Change Vulnerability ===================================================================== Script :Star Articles 6.0 Site...

Star Articles 6.0 (admin.manage) Remote Contents Change Vulnerability

No description provided by source. ----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :Star Articles 6.0 Site :http://www.stararticles.com Download :http://cmsnx.com/psf/order.php?id=5 $ :175$ http://www.c4team.org/ PATH...

Star Articles 6.0 Contents Change

----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :Star Articles 6.0 Site :http://www.stararticles.com Download :http://cmsnx.com/psf/order.php?id=5 $ :175$ http://www.c4team.org/ PATH /stararticle/user.modify.profile.php?userid=1 Add...

Star Articles 6.0 - Remote Contents Change

----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :Star Articles 6.0 Site :http://www.stararticles.com Download :http://cmsnx.com/psf/order.php?id=5 $ :175$ http://www.c4team.org/ PATH /stararticle/user.modify.profile.php?userid=1 Add...

Norton AntiSpam 2004 SymSpamHelper ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in Norton AntiSpam 2004. When sending an overly long string to the LaunchCustomRuleWizard method of symspam.dll 2004.1.0.147 an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current...

Microsoft Internet Explorer NULL Pointer DoS Vulnerability

This host has Internet Explorer installed and is prone to Remote Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbmsienullptrdosvuln.nasl 6527 2017-07-05 05:56:34Z cfischer $ Microsoft Internet Explorer NULL Pointer DoS Vulnerability Authors: Sharath S Copyright: Copyright c 200...

ASPThai.Net Webboard 6.0 SQL Injection

ASPThai.Net Webboard 6.0bview.asp SQL Injection Vulnerability Autore: DaiMon Email: cwdaimon1gmail.com Site: http://www.cwdaimon.com Version: 6.0 Download: http://www.aspthai.net/detailcode.asp?Mode=Load&DID=7&Redirect=QUHG/UKCD/RREP/VZssGGYUkedWebLtksjudROM Bug In \bview.asp Google Dork:...