phpProfiles 2.1 Beta - Multiple Remote File Inclusions

phpProfiles 2.1 Beta - Multiple Remote File Inclusions ================================================================== phpProfiles RFI ================================================================== Info:- Scripts: phpProfiles download :...

BSD (telnetd) Remote Root Exploit

No description provided by source. / 7350854 - x86/bsd telnetd remote root exploit TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. The contents of these coded instructions, statements and computer programs may not be disclosed to third parties,...

WGCC Beta <= 0.5.6 (quiz.php) Remote SQL InJection Vulnerability

Title : WGCC Beta = 0.5.6 quiz.php Remote SQL InJection Vulnerability Author : ajann Dork : "Web Group Communication Center beta 0.5.6/0.5.5/.." Greetz : Tm, Mslman, Aleminin, Ramazan, Bayram., MUBAREK, Olsun --Login Before Injection Inject http://target.com/path/quiz.php?action=show&qzid=SQL...

WGCC 0.5.6b - 'quiz.php' SQL Injection

Title : WGCC Beta Login Before Injection Inject http://target.com/path/quiz.php?action=show&qzid=SQL INJECTION Example: quiz.php?action=show&qzid=-1%20union%20select%200,0,0,0,username,passwort,email,0,0,0,0,0,0,0,0%20from%20wgccuser%20where%20userid=1 ++ userid=1 Change This Crack MD5 HASH /Inje...

Rapid7 Advisory R7-0026: HTTP Header Injection Vulnerabilities in the Flash Player Plugin

Rapid7 Advisory R7-0026 HTTP Header Injection Vulnerabilities in the Flash Player Plugin Published: Oct 17, 2006 Revision: 1.0 http://www.rapid7.com/advisories/R7-0026.jsp 1. Affected Systems: KNOWN VULNERABLE: o Flash Player plugin 9.0.16 for Windows o Flash Player plugin 7.0.63 for Linux PROBAB...

EUVD-2006-5299

PHP remote file inclusion vulnerability in ftag.php in TribunaLibre 3.12 Beta allows remote attackers to execute arbitrary PHP code via a URL in the mostrar parameter...

CVE-2006-5314

CVE-2006-5314 affects TribunaLibre 3.12 Beta. The vulnerability is a PHP remote file inclusion in ftag.php, exploitable by providing a URL in the mostrar parameter, allowing remote attackers to execute arbitrary PHP code on the server. The issue stems from improper handling of external input in t...

zenphoto1.0.2.txt

Vendor: zenphoto Vulnerable: zenphoto 1.0.2 beta and below The vendor has been warned and the vulnerabilities have been addressed in 1.0.3 beta. Path Disclosure --------------- http://www.example.com/photos/zen/i.php?a=EXISTINGALBUMNAME&i=EXISTINGIMAGENAME&s=thumb%00 which returns: Warning:...

NVIDIA Display Driver for Unix systems vulnerable to buffer overflow

Overview A vulnerability in the NVIDIA Display Driver for Unix systems may allow a remote attacker to execute code on a vulnerable system. Description The NVIDIA Display Driver for Unix systems provides access to the display adapter's accelerated features on supported systems, and includes a modu...

TribunaLibre 3.12 Beta (ftag.php) Remote File Include Vulnerability

No description provided by source. Title..: 7 php scripts File Inclusion Vuln / Source disclosure Credits: DarkFig Og.link: http://acid-root.new.fr/poc/13061007.txt Using http://www.google.com/codesearch Few examples about what we can do with a code search engine For educational purpose only. You...

TribunaLibre 3.12 Beta - ftag.php Remote File Inclusion

TribunaLibre 3.12 Beta - ftag.php Remote File Inclusion Title..: 7 php scripts File Inclusion Vuln / Source disclosure Credits: DarkFig Og.link: http://acid-root.new.fr/poc/13061007.txt Using http://www.google.com/codesearch Few examples about what we can do with a code search engine For...

PT-2006-5910 · Buffalo · Buffalo Terastation Hd-Htgl

Name of the Vulnerable Software and Affected Versions: Buffalo TeraStation HD-HTGL firmware versions prior to 2.05 beta 1 Description: A cross-site request forgery issue exists in the administrative interface, allowing remote attackers to modify configurations or delete arbitrary data...

JVN#93484133 TeraStation HD-HTGL series cross-site request forgery vulnerability

Impact If a TeraStation HD-HTGL administrator who logged into the web administration interface views a malicous website, an attacker could possibly modify configurations or delete data on the hard disk. Solution Products Affected HD-HTGL Series firmware Ver. 2.05-beta-1 and earlier...

CVE-2006-5095

MyPhotos 0.1.3b beta is affected by a PHP remote file inclusion in index.php via the includesdir parameter. The underlying issue is that user-provided includesdir is used in a way that allows an attacker to cause arbitrary PHP code execution. PT-Security notes a workaround: for this version, temp...

PT-2006-5833 · Myphotos · Myphotos

Name of the Vulnerable Software and Affected Versions: MyPhotos version 0.1.3b beta Description: A remote file inclusion issue in index.php allows remote attackers to execute arbitrary PHP code via the includesdir parameter. Recommendations: For MyPhotos version 0.1.3b beta, as a temporary...

CVE-2006-5079

Summary: CVE-2006-5079 is a PHP remote file inclusion vulnerability in the class.mysql.php component of Matt Humphrey’s paBugs 2.0 Beta 3 and earlier. The flaw allows an attacker to execute arbitrary PHP code by supplying a URL in the path_to_bt_dir parameter. The CVSSv2 base metrics suggest netw...

CVE-2006-5054

SQL injection vulnerability in uye/uyeayrinti.asp in iyzi Forum 1 Beta 2 and earlier allows remote attackers to execute arbitrary SQL commands via the uyenu parameter...

CVE-2006-5054: Undefined Security Weakness

SQL injection vulnerability in uye/uyeayrinti.asp in iyzi Forum 1 Beta 2 and earlier allows remote attackers to execute arbitrary SQL commands via the uyenu parameter...

CVE-2006-5033

Unspecified vulnerability in StoresAndCalendarsList.cgi in Paul Smith Computer Services vCAP 1.9.0 Beta and earlier allows remote attackers to cause a denial of service via the session parameter, possibly related to format string specifiers or malformed URL encoding...

CVE-2006-5033

Unspecified vulnerability in StoresAndCalendarsList.cgi in Paul Smith Computer Services vCAP 1.9.0 Beta and earlier allows remote attackers to cause a denial of service via the session parameter, possibly related to format string specifiers or malformed URL encoding...