9118 matches found
Apache 1.3.x - 2.0.48 - mod_userdir Remote Users Disclosure Exploit
No description provided by source. / m00-apache-w00t.c Apache 1.3.-2.0.48 remote users disclosure exploit by m00 Security. Proof-of-Concept edition This tool scans remote hosts with httpd apache and disclosure information about existens users accounts via wrong default configuration of moduserdir...
Netegrity IdentityMinder Web Edition 5.6 Null Byte XSS
No description provided by source. source: http://www.securityfocus.com/bid/10645/info Netegrity IdentityMinder is a tool designed for the Microsoft Windows platform to manage and maintain users and user accounts. The tool supports a web based interface for creating and removing users in multi-us...
Netegrity IdentityMinder Web Edition 5.6 Management Interface XSS
No description provided by source. source: http://www.securityfocus.com/bid/10645/info Netegrity IdentityMinder is a tool designed for the Microsoft Windows platform to manage and maintain users and user accounts. The tool supports a web based interface for creating and removing users in multi-us...
jira 4.4.3, greenhopper < 5.9.8 - Multiple Vulnerabilities
No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 CVE-2012-1500, Stored XSS in JIRA v4.4.3663-r165197, GreenHopper Resolved in Version 5.9.8, Proof of Concept External References: CVE-2112-1500 CVE-2112-1500 XSS.Cx Blog GHS-5642 Reported to Vendor on Mar 7, 2012,...
Kloxo 6.1.18 Stable - CSRF Vulnerability
No description provided by source. Exploit Title :Kloxo 6.1.18 Stable CSRF Vulnerability Vendor Homepage :http://lxcenter.org/software/kloxo Version :6.1.18 Exploit Author :Necmettin COSKUN =@babayarisi Blog :http://www.ncoskun.com http://www.grisapka.org Discovery date :03/12/2014 CVE :N/A Kloxo...
PHP-Nuke 6.x Multiple Module SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/9544/info Multiple SQL injection vulnerabilities have been reported in various modules included in PHP-Nuke versions 6.9 and earlier. These issues could permit remote attackers to compromise PHP-Nuke administrative...
PHPFootball <= 1.6 (filter.php) Remote Hash Disclosure Exploit
No description provided by source. ?php // http://garr.dl.sourceforge.net/sourceforge/phpfootball/PHPfootball1.6.zip $host = $argv1; $path = $argv2; if $argc != 3 echo PHPFootball = 1.6 filter.php Remote Hash Disclosure Exploit\n; echo by KinG-LioN - http://eurohackers.it\n; echo Usage: php $argv...
Messagerie 1.0 Arbitrary User Removal DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4635/info Messagerie is a web message board application maintained by La Basse. An issue has been discovered in Messagerie, which could allow an attacker to delete arbitrary user accounts. Reportedly, submitting a special...
ClickGallery Server SQL Injection Vulnerability
No description provided by source. ============================================================== ClickGallery Server--SQl iNjection Vulnerabilty ============================================================== Name : ClickGallery Server--SQl iNjection Vulnerabilty Date : july 9,2010 Critical Level...
Fusion News 3.3 Unauthorized Account Addition Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8441/info Fusion News is prone to an access validation error allowing a user to add arbitrary user/administrator accounts through manipulating URI parameters. Successful exploitation of this error may allow a user to...
iScripts MultiCart <= 2.4 - Persistent XSS / CSRF / XSS+CSRF Mass Accounts takeover
No description provided by source. Exploit Title : iScripts MultiCart = 2.4 Persistent XSS / CSRF / XSS+CSRF Account takeover Date : 2013/12/14 Exploit Author : Saadat Ullah ? saadilinuxatrocketmaildotcom Software Link : http://www.iscripts.com Author HomePage: http://security-geeks.blogspot.com...
FtpXQ Server 3.01 MKD Command Remote Overflow DoS
No description provided by source. source: http://www.securityfocus.com/bid/20721/info DataWizard FtpXQ Server is prone to multiple remote vulnerabilities: - A remote denial-of-service issue occurs because the application fails to perform adequate bounds checks on user-supplied data before copyin...
Samba <= 3.4.5 Symlink Directory Traversal Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/38111/info Samba is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploits would allow an attacker to access files outside of the Samba user's roo...
SGI IRIX 5.x/6.x Objectserver Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1079/info A vulnerability exists in SGI's Objectserver service. By exploiting a vulnerability in this service, remote attackers can add root privileged accounts to the system being compromised. While a patch was made...
LevelOne AMG-2000 2.00.00 Security Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34760/info LevelOne AMG-2000 is prone to a security-bypass vulnerability. Attackers may exploit this issue to gain access to the administrative interface and internal computers from an outside network. This may aid in...
Bs General_Classifieds Script SQL Injection Vulnerability
No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Bs GeneralClassifieds Script Sqli Vulnerability Date : july 5,2010 Critical Level : HIGH vendor URL...
Oracle 9i XDB FTP UNLOCK Overflow (win32)
No description provided by source. $Id: oracle9ixdbftpunlock.rb 10559 2010-10-05 23:41:17Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and ter...
CatSoft FTP Serv-U 2.5.x Brute-Force Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1860/info FTP Serv-U is an internet FTP server from CatSoft. FTP Serv-U contains an anti brute-force security feature which does not indicate whether an account is valid or not, after three unsuccessful login attempts a...
TheHostingTool 1.2.2 - Multiple CSRF Vulnerabilities
No description provided by source. !--- Title: TheHostingTool 1.2.2 Multiple CSRF Vulnerabilities Author: 10n1z3d 10n1z3datwdotcn Date: Mon 12 Jul 2010 01:19:52 PM EEST Vendor: http://thehostingtool.com/ Download: http://thehostingtool.googlecode.com/files/THT-v1.2.2.zip --- -= CSRF PoC 1 - Creat...
NeoBill CMS 0.8 Alpha - Multiple Vulnerabilities
No description provided by source. Title: ====== NeoBill CMS v0.8 Alpha - Multiple Web Vulnerabilities Date: ===== 2012-08-18 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=685 VL-ID: ===== 685 Common Vulnerability Scoring System: ==================================== 3...