CVE-2009-2120

Multiple SQL injection vulnerabilities in TekBase All-in-One 3.1 allow remote authenticated users to execute arbitrary SQL commands via the 1 ids parameter to admin.php, the 2 y parameter to members.php, and other unspecified vectors. NOTE: vector 1 requires administrative access...

CVE-2009-2120

CVE-2009-2120 affects TekBase All-in-One 3.1, with multiple SQL injection vulnerabilities that let remote authenticated users execute arbitrary SQL commands. Affected vectors include the (1) ids parameter to admin.php and the (2) y parameter to members.php, among others. At least one vector is no...

CVE-2009-2120: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in TekBase All-in-One 3.1 allow remote authenticated users to execute arbitrary SQL commands via the 1 ids parameter to admin.php, the 2 y parameter to members.php, and other unspecified vectors. NOTE: vector 1 requires administrative access...

PHPortal 1.0 - Insecure Cookie Handling

PHPortal 1.0 - Insecure Cookie Handling PhpPortal v1 Insecure Cookie Handling Vulnerability Author : KnocKout Special Thankz : CW All users Script : http://phportal.mertindualari.com Exploit; javascript:document.cookie="kulladi=Username;path=/"; Enter.. Go To;...

TekBase All-in-One 3.1 Multiple SQL Injection Vulnerabilities

No description provided by source. Author: n3wb0ss Date: 15/06/09 Contact: [email protected] Software: TekBase All-in-One 3.1 Vendor: tekbase.de Example: http://demo.tekbase.de/ Vendor contacted: No Risk: High I found this website on a german board, looking for another script. Looks to me, li...

TekBase All-in-One 3.1 - Multiple SQL Injections

Author: n3wb0ss Date: 15/06/09 Contact: [email protected] Software: TekBase All-in-One 3.1 Vendor: tekbase.de Example: http://demo.tekbase.de/ Vendor contacted: No Risk: High I found this website on a german board, looking for another script. Looks to me, like a...

Realty Web-Base 1.0 SQL Injection

--------------------------------------------------------------- ------------------------------------------------------------ Realty Web-Base v1.0 listlist.php id SQL Injection Vulnerability --------------------------------------------------------------- Founder : ThE g0bL!N Home:WwW.h4ckF0u.CoM...

MDKA-2007:062 : rpmdrake

The rpmdrake package, which provides the graphical software installation and update tools rpmdrake, drakrpm-edit-media and MandrivaUpdate, included with Mandriva Linux 2007 Spring contains several bugs. These include: When installing software with rpmdrake, if packages are selected for installati...

RadASM 2.2.1.5 (.RAP File) Local Stack Overflow Exploit

Exploit for unknown platform in category local exploits ======================================================= RadASM 2.2.1.5 .RAP File Local Stack Overflow Exploit ======================================================= !/usr/bin/python RadASM 2.2.1.5 .RAP File Local Stack Overflow Exploit...

Got All Media 7.0.0.3 (t00t) Remote Denial of Service Exploit

No description provided by source. !/usr/local/bin/perl Title: Got All Media 7.0.0.3 Remote Denial Of Service Exploit Product web page: http://www.gallm.com/default.aspx Vulnerability discovered by Gjoko 'LiquidWorm' Krstic liquidworm t00t gmail w00t com http://www.zeroscience.org 19.02.2009 prin...

Got All Media 7.0.0.3 (t00t) Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================================= Got All Media 7.0.0.3 t00t Remote Denial of Service Exploit ============================================================= !/usr/local/bin/perl Title: Got All Media 7.0.0.3 Remote Denia...

Got All Media 7.0.0.3 (t00t) Remote Denial of Service Exploit

Summary Got All Media is a Home theater PC application for Microsoft Windows platforms. Description Got All Media is exposed to a remote denial of service issue when processing URI requests. This issue occurs when the application handles an HTTP GET request over TCP port 5550. !/usr/local/bin/per...

Osmodia Bulletin Board 1.x (admin.txt) File Disclosure Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Osmodia Bulletin Board 1.x admin.txt File Disclosure Vulnerability ====================================================================...

Got All Media 7.0.0.3 - Remote Denial of Service

Got All Media 7.0.0.3 - Remote Denial of Service !/usr/local/bin/perl Title: Got All Media 7.0.0.3 Remote Denial Of Service Exploit Product web page: http://www.gallm.com/default.aspx Vulnerability discovered by Gjoko 'LiquidWorm' Krstic liquidworm t00t gmail w00t com http://www.zeroscience.org...

Osmodia Bulletin Board 1.x - 'admin.txt' File Disclosure

--------------------------------------------------------- Portal Name: Osmodia Bulletin Board Version : All Version Author : PouyaServer , [email protected] Website: http://Pouya-Server.ir --------------------------------------------------------- Xpl: http://site/Path/members/admin.txt...

Fedora Update for seamonkey FEDORA-2008-1459

Check for the Version of seamonkey OpenVAS Vulnerability Test Fedora Update for seamonkey FEDORA-2008-1459 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

MemHT Portal <= 4.0.1 (pvtmsg) Delete All Private Messages Exploit

Exploit for unknown platform in category web applications ================================================================== MemHT Portal query"DELETE FROM memhtpvtmsg WHERE id=$value"; if isset$POST'deletepm' foreach $POST'deletepm' as $value $dblink-query"DELETE FROM memhtpvtmsg WHERE id=$value...

MemHT Portal 4.0.1 - Delete All Private Messages

!/usr/bin/perl MemHT Portal query"DELETE FROM memhtpvtmsg WHERE id=$value"; if isset$POST'deletepm' foreach $POST'deletepm' as $value $dblink-query"DELETE FROM memhtpvtmsg WHERE id=$value"; ? ok then foreach $POST'deletenewpm' as $value deletenewpm= $value ; so if we send a evil code like this: 1...

Synactis All-In-The-Box ActiveX Remote Code Execution Vulnerability

This host is installed with All-In-The-Box ActiveX and is prone to Remote Code Execution Vulnerability. OpenVAS Vulnerability Test $Id: gbsynactisallintheboxactivexcodeexecvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ Synactis All-In-The-Box ActiveX Remote Code Execution Vulnerability Authors: Sujit...

Synactis All-In-The-Box ActiveX RCE Vulnerability

All-In-The-Box ActiveX is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...