MRCGIGUY Ultimate Profit Portal 1.0.1 - Insecure Cookie Handling

MRCGIGUY Ultimate Profit Portal 1.0.1 - Insecure Cookie Handling --------------------------------------------------------------- --------------------------------------------------------------- Ultimate Profit Portal Version 1.0.1 Insecure Cookie Handling Vulnerability...

Mozilla Firefox DoS Vulnerability May-09 (Linux)

The host is installed with Mozilla Firefox browser and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbfirefoxdosvulnmay09lin.nasl 4865 2016-12-28 16:16:43Z teissa $ Mozilla Firefox DoS Vulnerability May-09 Linux Authors: Sharath S Copyright: Copyright c 2009...

CVE-2009-1516

Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1 might allow context-dependent attackers to execute arbitrary code via a large value in the second argument to the Base64FileEncode method, as possibly demonstrated by a web...

eLitius 1.0 (manage-admin.php) Add Admin/Change Password Exploit

Exploit for unknown platform in category web applications ================================================================ eLitius 1.0 manage-admin.php Add Admin/Change Password Exploit ================================================================ Powered by eLitius Version 1.0 Change Password...

Opera Web Browser Multiple Vulnerabilities (Linux)

The host is installed with Opera Web Browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoperamultvulnmar09lin.nasl 5122 2017-01-27 12:16:00Z teissa $ Opera Web Browser Multiple Vulnerabilities Linux Authors: Nikita MR Copyright: Copyright c 2009 SecPod,...

RedHat Update for icu RHSA-2008:0090-01

Check for the Version of icu OpenVAS Vulnerability Test RedHat Update for icu RHSA-2008:0090-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

RitsBlog 0.4.2 (Authentication Bypass) SQL Injection Vulnerability / XSS Persistent Vulnerability

Salvatore "drosophila" Fresta + Application: RitsBlog + Version: 0.4.2 + Website: http://sourceforge.net/projects/ritsblog/ + Bugs: A SQL Injection B XSS Persistent + Exploitation: Remote + Date: 02 Mar 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore "drosophila" Fresta +...

Wesnoth 1.x - PythonAI Remote Code Execution

Wesnoth 1.x - PythonAI Remote Code Execution source: https://www.securityfocus.com/bid/33971/info Wesnoth is prone to a remote code-execution vulnerability caused by a design error. Attackers can exploit this issue to execute arbitrary Python code in the context of the user running the vulnerable...

Konqueror 4.1 XSS / Remote Crash Vulnerabilities

No description provided by source. +-----------------------------------------------------+ | Konqueror 4.1 XSS / Remote Crash Vulnerabilities | +-----------------------------------------------------+ | by athos - stakerathotmaildotit | | http://konqueror.kde.org |...

PT-2009-34: AKmedia CMS SQL Injection Vulnerability

AKmedia CMS is a content management system CMS software, usually implemented as a Web application, for creating and managing HTML content. It is used to manage and control a large, dynamic collection of Web material HTML documents and their associated images. Vulnerability Description Positive...

Professional Download Assistant 0.1 - SQL Injection

source: https://www.securityfocus.com/bid/32706/info Professional Download Assistant is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application...

Allaire Forums GetFile.cfm远程读取任意文件漏洞

BugCVE: CVE-1999-0800 BUGTRAQ: 229 Allaire Forums 是Allaire出品的一个论坛，运行在Coldfusion环境下。Allaire Forums 2.0.4版及其以前版本的一个文件存在安全问题。可以被远程入侵者用来获取服务器上的任意文件。 文件“GetFile.cfm”通常在Web应用程序的根目录下，由于这一行代码的问题： CFCONTENT TYPE= FT/FST FILE= FilePath 可以在指定绝对路径的情况下获取服务器上的任意文件，只要发出如下请求：...

memht-shell.txt

!/usr/bin/perl MemHT Portal = 3.9.0 Perl exploit discovered & written by Ams ax330d doggy gmail dot com DESCRIPTION: Script /inc/incstatistics.php accepts unfiltered $COOKIE's, $COOKIE'statsres' which later goes to MySQL request. So we are able to make sql injection. This exploit tries to create...

UBBCentral UBB.Threads 7.3.1 - Forum[] Array SQL Injection

UBBCentral UBB.Threads 7.3.1 - Forum Array SQL Injection source: https://www.securityfocus.com/bid/31074/info UBB.threads is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

mUnky 0.01 - 'index.php' Remote Code Execution

source: https://www.securityfocus.com/bid/30705/info mUnky is prone to a remote code-execution vulnerability because the application fails to properly sanitize user-supplied input. Exploiting this issue allows attackers to cause the application to execute arbitrary script code in the context of t...

RSS-aggregator 1.0 - 'IdFlux' SQL Injection

source: https://www.securityfocus.com/bid/30016/info RSS-aggregator is prone to multiple SQL-injection and authentication-bypass vulnerabilities. A successful exploit could allow an attacker to compromise the application, access or modify data, exploit vulnerabilities in the underlying database,...

E-topbiz Link ADS 1 - 'out.php' SQL Injection Vulnerability

E-topbiz Link ADS 1 'out.php' SQL Injection Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/29923/info Link ADS 1 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

dvbbs 8.2 - login.asp Multiple SQL Injections

dvbbs 8.2 - login.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/29429/info The 'dvbbs' program is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could all...

PHCDownload 1.1 - uploadinstallindex.php?step Cross-Site Scripting

PHCDownload 1.1 - uploadinstallindex.php?step Cross-Site Scripting source: https://www.securityfocus.com/bid/28922/info PHCDownload is prone to an SQL-injection and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage these issue...

Cezanne 7 - cflookup.asp?FUNID SQL Injection

Cezanne 7 - cflookup.asp?FUNID SQL Injection source: https://www.securityfocus.com/bid/28773/info Cezanne Software is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow a...