BosNews 2002-2006 Remote add user admin

-------------------------------------------------------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo ---------------------------------------------------------...

BosNews v4.0 Remote add user admin

-------------------------------------------------------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo ---------------------------------------------------------...

username not validated in add user to favourites action

Entering a bogus username here has the unwanted side effect of adding a bogus entity to your user favourites that can't be removed...

PHP-AGTC membership system 1.1a Remote Add Admin Exploit

No description provided by source. !-- - Product : AGTC-Membership system - Version : 1.1a - Website : http://www.agtc.co.uk - Author : 0x90 - Homepage: WwW.0x90.CoM.Ar - Contact : Gunsat0x90dotcomdotar - Problem : Admin Added Access. -- form name="form1" method="post"...

PHP-AGTC Membership System 1.1a - Remote Add Admin

PHP-AGTC Membership System 1.1a - Remote Add Admin AGTC-Membership system v1.1a adduser Remote Add Admin Exploit User Name: Password: Email Address: milw0rm.com 2007-10-30...

AGTC-Membership system v1.1a (adduser) Remote Add Admin Exploit

!-- - Product : AGTC-Membership system - Version : 1.1a - Website : http://www.agtc.co.uk - Author : 0x90 - HomePage : WwW.0x90.CoM.Ar - Contact : Gunsat0x90dotcomdotar - Problem : Admin Added Access. -- form name="form1" method="post" action="http://target/adduser.php" h3...

CrystalPlayer 1.98 - .mls Local Buffer Overflow

CrystalPlayer 1.98 - .mls Local Buffer Overflow !/usr/bin/perl Crystal Player 1.98 Playlist.mls File Local Buffer Overflow Exploit Source:: http://www.crystalplayer.com/CrystalPro.exe Credit To Timq For The Vulnerability POC By Arham Muhammad While Debugging EIP And EBP Successfully Gets...

CrystalPlayer 1.98 Playlist Crafted mls File Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ========================================================================== CrystalPlayer 1.98 Playlist Crafted mls File Local Buffer Overflow Exploit ========================================================================== !/usr/bin/perl...

CrystalPlayer 1.98 - '.mls' Local Buffer Overflow

!/usr/bin/perl Crystal Player 1.98 Playlist.mls File Local Buffer Overflow Exploit Source:: http://www.crystalplayer.com/CrystalPro.exe Credit To Timq For The Vulnerability POC By Arham Muhammad While Debugging EIP And EBP Successfully Gets Overwritten! Upon Successful Exploitation, DOS Occurs An...

Mercur Messaging 2005 (Windows 2000 SP4) - IMAP 'Subscribe' Remote Overflow

!/usr/bin/python Remote exploit for the stack overflow vulnerability in Mercur Messaging 2005 SP3 IMAP service. The exploit was tested on windows 2000 server SP4 in a Vmware environment. At the time of overflow EBX points to our shellcode. However this buffer into which EBX points will give a...

security flaw

Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors in the 1 session, 2 zip, 3 imap, and 4 sqlite extensions; 5 stream filters; and the 6 strreplace, 7 mail, 8 ibasedeleteuser, 9 ibaseadduser, and 1...

Grayscale Blog 0.8.0 (Security Bypass/SQL/XSS) Multiple Remote Vulns

No description provided by source. Security Advisory - Multiple Vulnerabilities in Grayscale Blog 0.8.0 Date : 2007-02-24 Product : Grayscale Blog Version : 0.8.0 - Prior version maybe also be affected Vendor : http://sourceforge.net/projects/gsblogger/ - http://www.karlcore.com/programming/blog/...

security flaw

Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors in the 1 session, 2 zip, 3 imap, and 4 sqlite extensions; 5 stream filters; and the 6 strreplace, 7 mail, 8 ibasedeleteuser, 9 ibaseadduser, and 1...

security flaw

Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors in the 1 session, 2 zip, 3 imap, and 4 sqlite extensions; 5 stream filters; and the 6 strreplace, 7 mail, 8 ibasedeleteuser, 9 ibaseadduser, and 1...

TaskTracker 1.5 - Customize.asp Remote Add Administrator

TaskTracker 1.5 - Customize.asp Remote Add Administrator Publisher Editor Administrator input type="submit" value="Gonder"...

linux/x86 add root user r00t with no password to /etc/passwd 69 bytes

No description provided by source. / By Kris Katterjohn 11/14/2006 69 byte shellcode to add root user 'r00t' with no password to /etc/passwd for Linux/x86 section .text global start start: ; open"/etc//passwd", OWRONLY | OAPPEND push byte 5 pop eax xor ecx, ecx push ecx push 0x64777373 push...

CVE-2005-1901

Sawmill before 7.1.6 is affected by CVE-2005-1901 due to XSS vulnerabilities in two input points: the username in the Add User window and the license key on the Licensing page. An authenticated, remote attacker can craft requests to trigger script execution in an affected user’s browser session. ...

CVE-2005-1901

Multiple cross-site scripting XSS vulnerabilities in Sawmill before 7.1.6 allow remote attackers to inject arbitrary web script or HTML via 1 the username in the Add User window or 2 the license key in the Licensing page...

CVE-2005-1901: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Sawmill before 7.1.6 allow remote attackers to inject arbitrary web script or HTML via 1 the username in the Add User window or 2 the license key in the Licensing page...

CVE-2005-1710

Multiple cross-site scripting XSS vulnerabilities in Blue Coat Reporter before 7.1.2 allow remote attackers to inject arbitrary web script or HTML via 1 the username in an Add User window or 2 the license key volatile.licensetoadd parameter in the Licensing page...