Password Door 8.4 - Local Buffer Overflow

Password Door 8.4 - Local Buffer Overflow source: https://www.securityfocus.com/bid/33634/info Password Door is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute arbitrary code i...

PostgreSQL 8.2/8.3/8.4 - UDF for Command Execution

PostgreSQL UDF for command execution 1 http://bernardodamele.blogspot.com/2009/01/command-execution-with-postgresql-udf.html 2 https://svn.sqlmap.org/sqlmap/trunk/sqlmap/extra/postgresqludfsys/libpostgresqludfsys0.0.1.tar.gz mirror:...

Sql injection

SQL injection vulnerability in the Calendar module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the locid parameter in a listevents action to mod.php...

CVE-2008-3452

Summary of CVE-2008-3452 : A SQL injection vulnerability exists in the Calendar module of eNdonesia 8.4, exploitable via the loc_id parameter in the list_events action to mod.php. Remote attackers could potentially execute arbitrary SQL commands. The NVD entry lists a base score of 6.8 (Medium) w...

endonesia-sql.txt

!/usr/bin/perl /-----------------------------------------------\ | /-----------------------------------------\ | | | Remote SQL Exploit | | | | eNdonesia 8.4 Remote SQL Exploit | | | | www.endonesia.org | | | | Calendar Module | | | -----------------------------------------/ | |...

eNdonesia 8.4 (Calendar Module) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl /-----------------------------------------------\ | /-----------------------------------------\ | | | Remote SQL Exploit | | | | eNdonesia 8.4 Remote SQL Exploit | | | | www.endonesia.org | | | | Calendar Module | | |...

eNdonesia 8.4 (Calendar Module) - SQL Injection

eNdonesia 8.4 Calendar Module - SQL Injection !/usr/bin/perl /-----------------------------------------------\ | /-----------------------------------------\ | | | Remote SQL Exploit | | | | eNdonesia 8.4 Remote SQL Exploit | | | | www.endonesia.org | | | | Calendar Module | | |...

eNdonesia 8.4 (Calendar Module) - SQL Injection

!/usr/bin/perl /-----------------------------------------------\ | /-----------------------------------------\ | | | Remote SQL Exploit | | | | eNdonesia 8.4 Remote SQL Exploit | | | | www.endonesia.org | | | | Calendar Module | | | -----------------------------------------/ | |...

Sql injection

Multiple SQL injection vulnerabilities in eNdonesia 8.4 allow remote attackers to execute arbitrary SQL commands via the 1 artid parameter to mod.php in a viewarticle action publisher mod and the 2 bid parameter to banners.php in a click action. NOTE: the mod.php viewdisk and viewlink vectors are...

CVE-2007-3394

Summary (CVE-2007-3394): Multiple SQL injection vulnerabilities in eNdonesia 8.4 allow remote attackers to execute arbitrary SQL via (1) the artid parameter to mod.php in a viewarticle action (publisher mod) and (2) the bid parameter to banners.php in a click action. The mod.php viewdisk and view...

CVE-2007-3394

Multiple SQL injection vulnerabilities in eNdonesia 8.4 allow remote attackers to execute arbitrary SQL commands via the 1 artid parameter to mod.php in a viewarticle action publisher mod and the 2 bid parameter to banners.php in a click action. NOTE: the mod.php viewdisk and viewlink vectors are...

endonesia84-sql.txt

Application: eNdonesia 8.4 Web Site: http://www.endonesia.org/ Versions: all Platform: linux, windows Bug: multiple injection sql Fix Available: no ------------------------------------------------------- 1 Introduction 2 Bug 3 proof of concept =========== 1 Introduction =========== "eNdonesia 8.4...

eNdonesia 8.4 - 'banners.php?click Action bid' SQL Injection

source: https://www.securityfocus.com/bid/24590/info eNdonesia is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the...

CVE-2006-6874

The vulnerability is an XSS flaw in eNdonesia 8.4, specifically in the file/functIon friend.php, exploitable via the (1) Message or (2) Your Name fields. The connected records confirm affected software and version (eNdonesia 8.4) and that remote attackers can inject arbitrary web script or HTML. ...

CVE-2006-6871

Multiple cross-site scripting XSS vulnerabilities in eNdonesia 8.4 allow remote attackers to inject arbitrary web script or HTML via 1 the mod parameter in a viewlink operation in mod.php, 2 the intypeid parameter in a showinfo operation in the informasi module in mod.php, 3 the "your Friend" fie...

CVE-2006-6872

Directory traversal vulnerability in mod.php in eNdonesia 8.4 allows remote attackers to read arbitrary files via a .. dot dot in the mod parameter...

CVE-2006-6873

Multiple SQL injection vulnerabilities in mod.php in eNdonesia 8.4 allow remote attackers to execute arbitrary SQL commands via 1 the did parameter in a a viewdisk operation diskusi mod, or the 2 cid parameter in a b viewlink katalog mod or b viewcat diskusi mod operation...

CVE-2006-6871

CVE-2006-6871 affects eNdonesia 8.4 with four XSS vectors : (1) mod.php viewlink parameter (mod), (2) informasi module showinfo intypeid, (3) the "your Friend" field in friend.php, (4) the "Main Text" field in admin.php. The vulnerability allows remote attackers to inject arbitrary web script or ...

CVE-2006-6873

CVE-2006-6873 describes multiple SQL injection vulnerabilities in mod.php of eNdonesia 8.4. The affected component is the mod.php file, with vulnerable vectors via (1) the did parameter in a viewdisk operation and (2) the cid parameter in viewlink (katalog mod) or viewcat (diskusi mod). The under...

CVE-2006-6872

Technical details about CVE-2006-6872 are not publicly available in the provided connected documents; only the basic description and references are present. Monitor for updates.