RDdbenum.py.txt

!/usr/bin/env python un-comment your selection. import urllib2 import urllib import string import getopt import sys def banner: print print "RED DOT CMS 7.5 database enumeration" print "by Mark Crowther and Rodrigo Marcos" def usage: print print "usage:" print "python RDPOC.py options URL" print...

reddot-sql.txt

RedDot CMS SQL injection vulnerability CVE Number: CVE-2008-1613 http://www.irmplc.com/index.php/167-Advisory-026 Vulnerability Type/Importance: SQL injection/Critical Problem Discovered: 12 February 2008 Vendor Contacted: 19 February 2008 Advisory Published: 21 April 2008 Abstract: The RedDot CM...

RedDot CMS 7.5 (LngId) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================== RedDot CMS 7.5 LngId Remote SQL Injection Exploit =================================================== !/usr/bin/env python un-comment your selection. import urllib2 import urllib import...

CVE-2008-1791

SQL injection vulnerability in ladder.php in My Gaming Ladder 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the ladderid parameter...

CVE-2008-1791

CVE-2008-1791 is an SQL injection in ladder.php of My Gaming Ladder 7.5 and earlier . The vulnerability is triggered via the ladderid parameter , allowing remote attackers to execute arbitrary SQL commands. The NVD entry lists a NETWORK attack vector, LOW complexity, with no authentication, and i...

Immunity Canvas: JOOMLACP_INCLUDE

Name| joomlacpinclude ---|--- CVE| CVE-2008-1505 Exploit Pack| CANVAS Description| Joomla Component custompages Remote File Inclusion Notes| CVE Name: CVE-2008-1505 VENDOR: Joomla Repeatability: Infinite References: http://www.securityfocus.com/bid/28409 CVE Url:...

Immunity Canvas: WPSNIPLETS_EXEC

Name| wpsnipletsexec ---|--- CVE| CVE-2008-1060 Exploit Pack| CANVAS Description| Wordpress Plugin Sniplets 1.1.2 Remote Code Execution exploict Notes| CVE Name: CVE-2008-1060 VENDOR: WordPress Repeatability: Infinite References: http://seclists.org/bugtraq/2008/Feb/0402.html CVE Url:...

Immunity Canvas: PHPUSERBASE_INCLUDE

Name| phpuserbaseinclude ---|--- CVE| CVE-2008-1043 Exploit Pack| CANVAS Description| phpUserBase Remote File Include Notes| CVE Name: CVE-2008-1043 VENDOR: phpuserbase Repeatability: Infinite References: http://www.milw0rm.com/exploits/5180 CVE Url:...

Immunity Canvas: PORTALLWEBPHP_INCLUDE

Name| portallwebphpinclude ---|--- CVE| CVE-2008-0645 Exploit Pack| CANVAS Description| Portail Web Php remote file include Notes| CVE Name: CVE-2008-0645 VENDOR: Portail Web Repeatability: Infinite References: http://www.securityfocus.com/bid/27616 CVE Url:...

Immunity Canvas: PHPMYBB1210_INCLUDE

Name| phpmybb1210include ---|--- CVE| CVE-2008-0382 Exploit Pack| CANVAS Description| PHP MyBB v1.2.10 Command Injection Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: mybboard.net CVE Url: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2008-0382 CVE Name: CVE-2008-0382...

Debian Security Advisory DSA 406-1 (lftp)

The remote host is missing an update to lftp announced via advisory DSA 406-1. OpenVAS Vulnerability Test $Id: deb4061.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 406-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 926-2 (ketm)

The remote host is missing an update to ketm announced via advisory DSA 926-2. Steve Kemp from the Debian Security Audit Project discovered a buffer overflow in ketm, an old school 2D-scrolling shooter game, that can be exploited to execute arbitrary code with group games privileges. For the old...

Debian Security Advisory DSA 631-1 (kdelibs)

The remote host is missing an update to kdelibs announced via advisory DSA 631-1. OpenVAS Vulnerability Test $Id: deb6311.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 631-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 837-1 (mozilla-firefox)

The remote host is missing an update to mozilla-firefox announced via advisory DSA 837-1. Tom Ferris discovered a bug in the IDN hostname handling of Mozilla Firefox, which is also present in the other browsers from the same family that allows remote attackers to cause a denial of service and...

Debian Security Advisory DSA 871-1 (libgda2)

The remote host is missing an update to libgda2 announced via advisory DSA 871-1. Steve Kemp discovered two format string vulnerabilities in libgda2, the GNOME Data Access library for GNOME2, which may lead to the execution of arbitrary code in programs that use this library. The old stable...

Debian Security Advisory DSA 812-1 (turqstat)

The remote host is missing an update to turqstat announced via advisory DSA 812-1. Peter Karlsson discovered a buffer overflow in Turquoise SuperStat, a program for gathering statistics from Fidonet and Usenet, that can be exploited by a specially crafted NNTP server. For the old stable...

Debian Security Advisory DSA 786-1 (simpleproxy)

The remote host is missing an update to simpleproxy announced via advisory DSA 786-1. Ulf Harnhammar from the Debian Security Audit Project discoverd a format string vulnerability in simpleproxy, a simple TCP proxy, that can be exploited via replies from remote HTTP proxies. The old stable...

Debian Security Advisory DSA 949-1 (crawl)

The remote host is missing an update to crawl announced via advisory DSA 949-1. Steve Kemp from the Debian Security Audit project discovered a security related problem in crawl, another console based dungeon exploration game in the vein of nethack and rogue. The program executes commands insecure...

Debian Security Advisory DSA 891-1 (gpsdrive)

The remote host is missing an update to gpsdrive announced via advisory DSA 891-1. Kevin Finisterre discovered a format string vulnerability in gpsdrive, a car navigation system, that can lead to the execution of arbitrary code. The old stable distribution woody does not contain gpsdrive packages...

Debian Security Advisory DSA 125-1 (analog)

The remote host is missing an update to analog announced via advisory DSA 125-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...