CVE-2008-2856

SQL injection vulnerability in clanek.php in OwnRS Beta 3 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2855

Affected software: OwnRS Beta 3. Component: clanek.php. Vulnerability: Cross-site scripting (XSS) via the id parameter. Root cause: lack of proper sanitization/output of user-supplied id leading to injection of arbitrary script/HTML. Impact: remote attacker can inject scripts into the victim’s br...

ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. ============================================================== ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

ShareCMS 0.1 - Multiple SQL Injections

============================================================== ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

igsuite-sql.txt

!/usr/bin/perl 05/18/2008 - IGSuite 3.2.4 Blind SQL Injection - ksOSe 05/21/2008 - Vendor notified 05/23/2008 - A patch was pushed via the igsuited daemonnot enabled by default Fix: run igsuited --update-igsuite or upgrade to 3.2.5-beta. Tested on IGSuite 3.2.4 on linux with MySQL, needs ncin pat...

IGSuite 3.2.4 - Reverse Shell / Blind SQL Injection

!/usr/bin/perl 05/18/2008 - IGSuite 3.2.4 Blind SQL Injection - ksOSe 05/21/2008 - Vendor notified 05/23/2008 - A patch was pushed via the igsuited daemonnot enabled by default Fix: run igsuited --update-igsuite or upgrade to 3.2.5-beta. Tested on IGSuite 3.2.4 on linux with MySQL, needs ncin pat...

Lotus Expeditor cai URI handler command injection

Added: 06/20/2008 CVE: CVE-2008-1965 BID: 28926 OSVDB: 44868 Background Lotus Expeditor is a desktop integration framework used by Lotus products including Lotus Symphony. Problem Lotus Expeditor registers a handler for cai: URIs which passes arbitrary arguments to rcplauncher.exe. This allows...

gravity-sqlxss.txt

==================================================================== Gravity Board X 2.0 Beta SQL/XSS Multiple Remote Vulnerabilities ==================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking...

Gravity Board X 2.0 Beta - SQL Injection / Cross-Site Scripting

==================================================================== Gravity Board X 2.0 Beta SQL/XSS Multiple Remote Vulnerabilities ==================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in DesktopOnNet 3 Beta allow remote attackers to execute arbitrary PHP code via a URL in the apppath parameter to 1 don3requiem.don3app/don3requiem.php and 2 frontpage.don3app/frontpage.php...

CVE-2008-2649

Multiple PHP remote file inclusion vulnerabilities in DesktopOnNet 3 Beta allow remote attackers to execute arbitrary PHP code via a URL in the apppath parameter to 1 don3requiem.don3app/don3requiem.php and 2 frontpage.don3app/frontpage.php...

CVE-2008-2649

Multiple PHP remote file inclusion vulnerabilities in DesktopOnNet 3 Beta allow remote attackers to execute arbitrary PHP code via a URL in the apppath parameter to 1 don3requiem.don3app/don3requiem.php and 2 frontpage.don3app/frontpage.php...

CVE-2008-2649

CVE-2008-2649 affects DesktopOnNet 3 Beta, where two PHP scripts (don3_requiem.php and frontpage.php) are vulnerable to remote file inclusion via the app_path URL parameter, allowing an attacker to execute arbitrary PHP code on the server. The vulnerability is triggered by supplying a crafted URL...

Unrestricted file upload

Unrestricted file upload vulnerability in admin/Editor/imgupload.php in FlashBlog 0.31 beta allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a direct request to the file in tusimagenes/...

Drcat 0.5.0-beta (drcatd) Remote Root Exploit

No description provided by source. / Proof of Concept DRCATD Remote exploit by Taif Test: root@localhost drcat ./drcat -d 127.0.0.1 -u taif -p test Public code by Taif drcat-0.5.0-beta 'remote r00t' proof Bug found by Khan Shirani host: +-+-+-+-+-+-+-+ 127.0.0.1 |C|L|U|P|C|S|R| user:...

i-pos StoreFront 1.3 - index.asp SQL Injection

i-pos StoreFront 1.3 - index.asp SQL Injection source: https://www.securityfocus.com/bid/29471/info i-pos Storefront is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attack...

ipos-sql.txt

Title : I-Pos Internet Pay Online Store v1.3 Beta = Remote SQL Injection Vulnerability ========================================================================================== + Author : KnocKout + Special ThanX : Dr.Kacak & Cr@zy-King and CW ALL USERS . . . + Cyber-Warrior.Org...

I-Pos Internet Pay Online Store <= 1.3 Beta SQL Injection Vulnerability

No description provided by source. + Title : I-Pos Internet Pay Online Store v1.3 Beta = Remote SQL Injection Vulnerability ========================================================================================== + Author : KnocKout + Special ThanX : Dr.Kacak & Cr@zy-King and CW ALL USERS . . ....

DesktopOnNet 3 Beta - Multiple Remote File Inclusions

DesktopOnNet 3 Beta - Multiple Remote File Inclusions ========================================================================================= - Author: MK - Script: DesktopOnNet 3 Beta Remote File Inclusion - URL: http://sourceforge.net/projects/don3/ - Date: 1/06/2008 - Email:...

I-Pos Internet Pay Online Store 1.3 Beta - SQL Injection

Title : I-Pos Internet Pay Online Store v1.3 Beta = Remote SQL Injection Vulnerability ========================================================================================== + Author : KnocKout + Special ThanX : Dr.Kacak & Cr@zy-King and CW ALL USERS . . . + Cyber-Warrior.Org...