453 matches found
MyBulletinBoard (MyBB) <= 1.1.5 (CLIENT-IP) SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================= MyBulletinBoard MyBB = 1.1.5 CLIENT-IP SQL Injection Exploit ================================================================= !/usr/bin/php -q -d shortopentag=on ? echo...
Governs the granting of leave true when True also false—the“real”IP brings security risks-vulnerability warning-the black bar safety net
Author: lake2, http://lake2.0x54.org Let us look at the ASP code first: | Function getIP Dim strIPAddr as string If Request. ServerVariables"HTTPXFORWARDEDFOR" = "" OR InStrRequest. ServerVariables"HTTPXFORWARDEDFOR", "unknown" 0 Then strIPAddr = Request. ServerVariables"REMOTEADDR" ElseIf...
CVE-2006-0957: Undefined Security Weakness
Direct static code injection vulnerability in func.inc.php in ZoneO-Soft freeForum before 1.2.1 allows remote attackers to execute arbitrary PHP code via the 1 X-Forwarded-For and 2 Client-Ip HTTP headers, which are stored in Data/flood.db.php...
CVE-2005-1716
TOPo 2.2 2.2.178 stores data files in the data directory under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as client IP addresses...
CVE-2005-1716
TOPo 2.2 2.2.178 stores data files in the data directory under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as client IP addresses...
CVE-2005-1716
The CVE refers to TOPo 2.2 (2.2.178), where data files are stored in the data directory under the web document root with insufficient access control. This could allow remote attackers to view sensitive information, such as client IP addresses. Connected documents (e.g., Red Hat advisory and CVE l...
CVE-2005-0645: Undefined Security Weakness
Cross-site scripting XSS vulnerability in show.inc.php in cuteNews 1.3.6 allows remote attackers to inject arbitrary HTML, web script, and PHP code via the 1 CLIENT-IP or 2 X-FORWARDED-FOR header in an HTTP POST request to shownews.php...
CuteNews <= 1.3.6 Multiple XSS / Code Execution
Binary data 2253.prm...
Sun Solaris SSH Daemon fails to properly log client IP addresses
Overview The Sun Solaris Secure Shell Daemon sshd may incorrectly log client IP addresses. Description SSH is a program used to provide secure connection and communications between client and servers. Upon connecting to the service, the client's IP address is logged. There is a vulnerability in t...
Piolet Client 1.05 - Remote Denial of Service
/ Piolet client v1.05 Remote Denial of Service Proof of Concept by Luca Ercoli luca.ercoliatinwind.it / include include include include include int ck,port=701,sd,cx=0,contatore=0,prec; struct sockaddrin pilotclient; void endingchar client int i; pilotclient.sinfamily = AFINET; pilotclient.sinpor...
CVE-2002-2346
phpBB 2.0 through 2.0.3 generates names for uploaded avatar files with the hex-encoded IP address of the client system, which allows remote attackers to obtain client IP addresses...
Несанкционированный доступ к Legato Networker (unauthorized access)
Если IP клиента не разрешается в DNS оно считается корректным...
SshdJJF.txt
J.J.F. / Hackers Team - Security Advisory =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Fecha: 09/05/1999 Publicado: 14/05/1999 Autor: Zhodiac URL: http://www.jjf.org Aplicacion: sshd2 up to 2.0.11 Sistema Operativo: Unix Peligrosidad: Medio, a largo plazo posible acceso remoto al sistema...