0verkill 0.16 - ASCII-ART Game Remote Integer Overflow Crash (PoC)

0verkill 0.16 - ASCII-ART Game Remote Integer Overflow Crash PoC !/usr/bin/env python ----------------------------------------------------- Exploit id: FSE:016 Author: Federico Fazzi Contact: [email protected] Date: 09/06/2006, 13:58 Sinthesis: 0verkill 0.16, Remote integer overflow Product:...

CVE-2005-4687

PunBB 1.2.9 (used standalone or with F-ART BLOG:CMS) trusts the client IP from the X-Forwarded-For header instead of the TCP/IP stack, enabling IP address spoofing by remote attackers. Red Hat and CVE records corroborate this vulnerability in PunBB 1.2.9. The underlying issue is header-based IP e...

CVE-2005-4687

PunBB 1.2.9, used alone or with F-ART BLOG:CMS, may trust a client's IP address as specified in the X-Forwarded-For HTTP header rather than the TCP/IP stack, which allows remote attackers to misrepresent their IP address by sending a modified header...

CVE-2005-4686

PunBB 1.2.9 (often with F-ART BLOG:CMS) includes config.php before calling unregister_globals, enabling exposure of unspecified sensitive information. Root cause: premature/configuration sequencing in the initialization flow. Impact is limited to information disclosure; no explicit vector or expl...

CVE-2005-4687: Undefined Security Weakness

PunBB 1.2.9, used alone or with F-ART BLOG:CMS, may trust a client's IP address as specified in the X-Forwarded-For HTTP header rather than the TCP/IP stack, which allows remote attackers to misrepresent their IP address by sending a modified header...

CVE-2005-4686

PunBB 1.2.9, when used alone or with F-ART BLOG:CMS, includes config.php before calling the unregisterglobals function, which allows attackers to obtain unspecified sensitive information...

CVE-2005-4687

PunBB 1.2.9, used alone or with F-ART BLOG:CMS, may trust a client's IP address as specified in the X-Forwarded-For HTTP header rather than the TCP/IP stack, which allows remote attackers to misrepresent their IP address by sending a modified header...

CVE-2005-4486

SQL injection vulnerability in Quantum Art QP7.Enterprise formerly Q-Publishing allows remote attackers to execute arbitrary SQL commands via the pnewsid parameter to 1 newsandeventsnew.asp and 2 news.asp. NOTE: on 20060227, the vendor disputed the accuracy of this report, saying that the pnewsid...

CVE-2005-4486

CVE-2005-4486 concerns SQL injection in Quantum Art QP7.Enterprise (formerly Q-Publishing). The vulnerability allows remote attackers to manipulate SQL via the p_news_id parameter on endpoints such as news_and_events_new.asp and news.asp . The vendor disputed the report’s accuracy in 2006, noting...

CVE-2005-4486

SQL injection vulnerability in Quantum Art QP7.Enterprise formerly Q-Publishing allows remote attackers to execute arbitrary SQL commands via the pnewsid parameter to 1 newsandeventsnew.asp and 2 news.asp. NOTE: on 20060227, the vendor disputed the accuracy of this report, saying that the pnewsid...

PT-2005-5169 · Quantum Art · Quantum Art Qp7.Enterprise

Name of the Vulnerable Software and Affected Versions: Quantum Art QP7.Enterprise affected versions not specified Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the p news id parameter to API endpoints such as "news and events...

CVE-2005-4486: Undefined Security Weakness

SQL injection vulnerability in Quantum Art QP7.Enterprise formerly Q-Publishing allows remote attackers to execute arbitrary SQL commands via the pnewsid parameter to 1 newsandeventsnew.asp and 2 news.asp. NOTE: on 20060227, the vendor disputed the accuracy of this report, saying that the pnewsid...

Quantum Art QP7.Enterprise - news.asp?p_news_id SQL Injection

Quantum Art QP7.Enterprise - news.asp?pnewsid SQL Injection source: https://www.securityfocus.com/bid/16022/info QP7.Enterprise is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL...

Quantum Art QP7.Enterprise - news_and_events_new.asp?p_news_id SQL Injection

Quantum Art QP7.Enterprise - newsandeventsnew.asp?pnewsid SQL Injection source: https://www.securityfocus.com/bid/16022/info QP7.Enterprise is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before usin...

Quantum Art QP7.Enterprise - 'news.asp?p_news_id' SQL Injection

source: https://www.securityfocus.com/bid/16022/info QP7.Enterprise is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromis...

Quantum Art QP7.Enterprise - 'news_and_events_new.asp?p_news_id' SQL Injection

source: https://www.securityfocus.com/bid/16022/info QP7.Enterprise is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromis...

QP7.Enterprise SQL vuln.

QP7.Enterprise SQL vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/qp7enterprise-sql-vuln.html vendor:www.quantumart.com/products affected version:QP7 Product Description: Quantum Art's QP7.Enterprise formerly, Q-Publishing is an optimal...

Fee resources my methods（invasion）-vulnerability warning-the black bar safety net

In the previous article we have introduced the idea of the article, the techniques article search article and receive a new friends good feedback, the friends actively reflect the problems, the features proposed in this series of articles 末篇 then increase the Q & A article in to one reply. Below ...

CVE-2005-2290: Undefined Security Weakness

wpsshop.cgi in WPS Web Portal System 0.7.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 art and 2 cat variables...

CVE-2005-1289: Undefined Security Weakness

index.cgi in E-Cart 2004 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 art and possibly 2 cat parameters...