Lucene search
+L

531 matches found

zdt
zdt
added 2008/05/12 12:0 a.m.36 views

AJ HYIP ACME (topic_detail.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== AJ HYIP ACME topicdetail.php id Remote SQL Injection Vulnerability ===================================================================== || || | || o,7 || . o7 || 4||| o...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2008/05/12 12:0 a.m.39 views

AJ HYIP ACME - 'topic_detail.php' SQL Injection

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

7.5CVSS5.8AI score0.00967EPSS
SaveExploits2
Prion
Prion
added 2006/03/09 12:2 a.m.28 views

Design/Logic Flaw

htpasswd, as used in Acme thttpd 2.25b and possibly other products such as Apache, might allow local users to gain privileges via shell metacharacters in a command line argument, which is used in a call to the system function. NOTE: since htpasswd is normally installed as a non-setuid program, an...

7.2CVSS7.4AI score0.00393EPSS
SaveExploits1References8Affected Software1
NVD
NVD
added 2006/03/09 12:2 a.m.27 views

CVE-2006-1079

htpasswd, as used in Acme thttpd 2.25b and possibly other products such as Apache, might allow local users to gain privileges via shell metacharacters in a command line argument, which is used in a call to the system function. NOTE: since htpasswd is normally installed as a non-setuid program, an...

7.2CVSS6.8AI score0.00393EPSS
SaveExploits1References8
NVD
NVD
added 2006/03/09 12:2 a.m.27 views

CVE-2006-1078

Multiple buffer overflows in htpasswd, as used in Acme thttpd 2.25b, and possibly other products such as Apache, might allow local users to gain privileges via 1 a long command line argument and 2 a long line in a file. NOTE: since htpasswd is normally installed as a non-setuid program, and the...

8.4CVSS6.9AI score0.00526EPSS
SaveExploits1References14
Vulnrichment
Vulnrichment
added 2006/03/09 12:0 a.m.15 views

CVE-2006-1078

Multiple buffer overflows in htpasswd, as used in Acme thttpd 2.25b, and possibly other products such as Apache, might allow local users to gain privileges via 1 a long command line argument and 2 a long line in a file. NOTE: since htpasswd is normally installed as a non-setuid program, and the...

7.6AI score0.00526EPSS
SaveExploits1References14
CVE
CVE
added 2006/03/09 12:0 a.m.122 views

CVE-2006-1078

Concrete details found: CVE-2006-1078 concerns multiple buffer overflows in the htpasswd utility used by Acme thttpd 2.25b. The vulnerabilities allow a local attacker to gain or escalate privileges via (1) a long command-line argument and (2) a long line in a file. The advisory notes htpasswd is ...

8.4CVSS6.9AI score0.00526EPSS
SaveExploits1References14Affected Software1
CVE
CVE
added 2006/03/09 12:0 a.m.85 views

CVE-2006-1079

CVE-2006-1079 concerns the htpasswd utility used by Acme thttpd (notably 2.25b) where local users can escalate privileges through shell metacharacters passed as command-line arguments to system(). Several sourced entries indicate this vulnerability exists in htpasswd and note the issue may be exp...

7.2CVSS6.8AI score0.00393EPSS
SaveExploits1References8Affected Software1
Cvelist
Cvelist
added 2006/03/09 12:0 a.m.31 views

CVE-2006-1079

htpasswd, as used in Acme thttpd 2.25b and possibly other products such as Apache, might allow local users to gain privileges via shell metacharacters in a command line argument, which is used in a call to the system function. NOTE: since htpasswd is normally installed as a non-setuid program, an...

6.8AI score0.00393EPSS
SaveExploits1References8
Tenable Nessus
Tenable Nessus
added 2006/03/06 12:0 a.m.37 views

Acme thttpd < 2.26 htpasswd Utility Overflow

Binary data 3463.prm...

8.4CVSS7AI score0.00526EPSS
SaveExploits1References4
Packet Storm
Packet Storm
added 2005/12/14 12:0 a.m.35 views

perl-cal-29920.txt

------=Part1714122617522.1134045408185 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Vendor: Perl-Cal Version tested: Perl-Cal 2.99.20 , other versions may also be affected. Type: Cross Site Scripting Severity: Medium...

7.4AI score
SaveExploits0
CVE
CVE
added 2005/12/11 11:0 a.m.48 views

CVE-2005-4162

CVE-2005-4162 : An XSS vulnerability exists in ACME PerlCal 2.99.20, in the cal_make.pl component, allowing remote attackers to inject arbitrary web script or HTML via the p0 parameter. The issue stems from insufficient input handling in the affected script, enabling script execution when the pag...

4.3CVSS6AI score0.01477EPSS
SaveExploits1References8Affected Software1
Tenable Nessus
Tenable Nessus
added 2005/11/07 12:0 a.m.23 views

Acme thttpd < 2.24 CGI Test Script Symlink Arbitrary File Overwrite

Binary data 3282.prm...

2.1CVSS7.3AI score0.00367EPSS
SaveExploits0References2
NVD
NVD
added 2005/11/06 11:2 a.m.22 views

CVE-2005-3124

syslogtocern in Acme thttpd before 2.23 allows local users to write arbitrary files via a symlink attack on a temporary file...

2.1CVSS6.2AI score0.00367EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2005/11/06 11:2 a.m.25 views

CVE-2005-3124

syslogtocern in Acme thttpd before 2.23 allows local users to write arbitrary files via a symlink attack on a temporary file...

2.1CVSS5.8AI score0.00367EPSS
SaveExploits0References1
CVE
CVE
added 2005/11/06 11:0 a.m.60 views

CVE-2005-3124

CVE-2005-3124 affects the syslogtocern script in Acme thttpd prior to 2.23, enabling local attackers to overwrite arbitrary files via a symlink attack on a temporary file. Public advisories (Debian DSA-883-1, SUSE, Ubuntu, OpenVAS/Nessus entries) describe insecure temporary-file handling in thttp...

2.1CVSS6.1AI score0.00367EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2005/11/06 11:0 a.m.29 views

CVE-2005-3124

syslogtocern in Acme thttpd before 2.23 allows local users to write arbitrary files via a symlink attack on a temporary file...

6.1AI score0.00367EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2005/06/21 4:0 a.m.41 views

CVE-2001-1496

Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of service and possibly execute arbitrary code...

9.9AI score0.04837EPSS
SaveExploits0References4
CVE
CVE
added 2005/06/21 4:0 a.m.61 views

CVE-2001-1496

CVE-2001-1496 affects thttpd (Acme Labs) with an off-by-one buffer overflow in Basic Authentication across versions 1.95–2.20. The underlying issue is a buffer overflow in the Basic Auth handling, enabling remote attackers to cause a denial of service and potentially execute arbitrary code. Explo...

9.8CVSS8.3AI score0.04837EPSS
SaveExploits0References4Affected Software1
exploitpack
exploitpack
added 2002/04/25 12:0 a.m.21 views

ACME Labs thttpd 2.20 - Cross-Site Scripting

ACME Labs thttpd 2.20 - Cross-Site Scripting source: https://www.securityfocus.com/bid/4601/info thttpd is a web server product maintained by ACME Labs. thttpd has been compiled for Linux, BSD and Solaris, as well as other Unix like operating systems. Cross Site Scripting issues has been reported...

6.8AI score
SaveExploits0
Rows per page
Query Builder