Invision Power Board (IP.Board) 3.0.0b5 - Active Cross-Site Scripting Full Path Disclosure

Invision Power Board IP.Board 3.0.0b5 - Active Cross-Site Scripting Full Path Disclosure ================================================================================ Found : brainpillow Dork : "Powered By IP.Board 3.0.0 Beta 5" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Greetz:...

WysGui CMS 1.2 BETA(Insecure Cookie Handling)--Blind-sql-injection-exploit-->

!/usr/bin/perl --------------------------------------------------------- WysGui CMS 1.2 BETAcookie BSQL --------------------------------------------------------- CMS INFORMATION: --WEB: http://wysgui.com/ --DOWNLOAD: http://sourceforge.net/projects/wysgui/ --DEMO: http://wysgui.com/demo/...

CVE-2009-1277

CVE-2009-1277 concerns Gravity Board X (GBX) 2.0 Beta. The vulnerability is a SQL injection in index.php via the member_id parameter in a viewprofile action, enabling remote attackers to execute arbitrary SQL commands. The entry notes that a separate board_id issue is covered by CVE-2008-2996. Co...

CVE-2009-1278

Gravity Board X (GBX) 2.0 BETA has a static code injection in forms/ajax/configure.php that allows remote attackers to inject arbitrary PHP code into config.php via the configure action to index.php. Affected: GBX 2.0 BETA; vulnerable file: forms/ajax/configure.php. Root cause: configuration work...

Dynamic Flash Forum 1.0 Beta Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ Dynamic Flash Forum 1.0 Beta Multiple Remote Vulnerabilities ============================================================ Salvatore "drosophila" Fresta + Application: Dynamic Fla...

Sql injection

Multiple SQL injection vulnerabilities in Shader TV Beta allow remote authenticated administrators to execute arbitrary SQL commands via the sid parameter to 1 kanal.asp, 2 google.asp, and 3 hakk.asp in yonet/; and allow remote attackers to execute arbitrary SQL commands via the 4 username or 5...

CVE-2008-6606

The CVE-2008-6606 entry describes a SQL injection in MatPo Link 1.2 Beta, via the id parameter in view.php, allowing remote attackers to execute arbitrary SQL commands. The NVD entry lists a base score of 7.5 (HIGH) with network attack vector and no authentication, and partial impacts on confiden...

osCommerce 2.2/3.0 - 'oscid' Session Fixation

source: https://www.securityfocus.com/bid/34348/info osCommerce is prone to a session-fixation vulnerability. Attackers can exploit this issue to hijack a user's session and gain unauthorized access to the affected application. The following are vulnerable: osCommerce 2.2 osCommerce 3.0 Beta Othe...

Safari 3.2.2/4b (nested elements) XML Parsing Remote Crash Exploit

Exploit for unknown platform in category dos / poc ================================================================== Safari 3.2.2/4b nested elements XML Parsing Remote Crash Exploit ================================================================== Author : Ahmed Obied - Tested using: - Safari...

Apple Safari 3.2.2/4b - nested elements XML Parsing Remote Crash

Author : Ahmed Obied [email protected] - Tested using: - Safari 3.2.2 on Windows - Safari 4 BETA on Windows Usage : python safari.py port import sys, socket from BaseHTTPServer import HTTPServer, BaseHTTPRequestHandler class RequestHandlerBaseHTTPRequestHandler: def getexploitself: exploit = ...

[SECURITY] Fedora 9 Update: Miro-2.0.3-2.fc9

Miro is a free application that turns your computer into an internet TV video player. This release is still a beta version, which means that there are some bugs, but we're moving quickly to fix them and will be releasing bug fixes on a regular basis...

CVE-2008-6524

resetpass.php in openInvoice 0.90 beta and earlier allows remote authenticated users to change the passwords of arbitrary users via a modified uid parameter. NOTE: this can be leveraged with a separate vulnerability in auth.php to modify passwords without authentication...

CVE-2008-6517

SQL injection vulnerability in NewsHOWLER 1.03 Beta allows remote attackers to execute arbitrary SQL commands via the newsuser cookie parameter...

FileZilla Server Detection (FTP)

FTP based detection of a FileZilla Server. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.900518...

Racer 0.5.3 Beta 5 - Remote Stack Buffer Overflow

/ Racer vs 0.5.3 beta 5 Remote Stack Buffer OverflowC exploit by fl0 fl0w -------------------------------------------------------------------------------------------------- Description : Bug found some time ago by n00b Cheers mate ! :D ,I wanted to make a more improved sploit , with lots of targe...

Microsoft's Threat Management Gateway is a mixed bag

Microsoft’s initial move into the security products market, the ISA Server, has evolved well beyond its firewall roots. Now known as the Threat Management Gateway, the product is being positioned as a comprehensive Web security gateway. But as Eric Ogren writes in his review of the Threat...

mks_vir 9b < 1.2.0.0b297 (mksmonen.sys) Privilege Escalation Exploit

No description provided by source. //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | MKS Sp. z o. o. - http://www.mks.com.pl/ | // // | | // // | Affected Softwar...

mks_vir 9b < 1.2.0.0b297 (mksmonen.sys) Privilege Escalation Exploit

Exploit for unknown platform in category local exploits ==================================================================== mksvir 9b 1.2.0.0b297 mksmonen.sys Privilege Escalation Exploit ====================================================================...

mks_vir 9b 1.2.0.0b297 - mksmonen.sys Local Privilege Escalation

mksvir 9b 1.2.0.0b297 - mksmonen.sys Local Privilege Escalation //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | MKS Sp. z o. o. - http://www.mks.com.pl/ | // //...

CS-Cart 2.0.0 Beta 3 (product_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= CS-Cart 2.0.0 Beta 3 productid SQL Injection Vulnerability ============================================================= CS-Cart 2.0.0 Beta 3 dispatch SQL Injection Vulnerabilit...