AuthPhp 1.0 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================== AuthPhp 1.0 Auth Bypass SQL Injection Vulnerability ===================================================== 0x01 Informations: Name : AuthPhp 1.0 Download :...

BlueBird Pre-Release - Authentication Bypass

BlueBird Pre-Release - Authentication Bypass 0x01 Informations: Name : BlueBird Pre-Release Download : http://downloads.sourceforge.net/bluebird/bluebirdpre.zip Vulnerability : Auth Bypass Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is...

webframe 0.76 - Multiple File Inclusions

------------------Rfi/Lfi------------------ script:webframe 0.76 ------------------------------------------------------------------ download from:http://downloads.sourceforge.net/phpwebframe/webframe-0.76-src.tar.gz?modtime=1155546760&bigmirror=0...

Excel Viewer OCX 3.2 Remote File Execution Exploit

No description provided by source. HTML ---------------------------------------------------------- br Excel Viewer OCX 3.2 Remote File execution exploit br ---------------------------------------------------------- br -----------------------------------br By Mountassif Moad a.k.a Stack...

OpenJDK Privilege escalation in command line applications (6733959)

Stack-based buffer overflow in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary code via a JAR file with...

OpenJDK Privilege escalation in command line applications (6733959)

Stack-based buffer overflow in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary code via a JAR file with...

Word Viewer OCX 3.2 Remote File Execution exploit

Exploit for unknown platform in category remote exploits ================================================= Word Viewer OCX 3.2 Remote File Execution exploit ================================================= ---------------------------------------------------------- Word viewer OCX V 3.2 Remote Fi...

Microsoft Works WkImgSrv.dll ActiveX Control WksPictureInterface vulnerability

Added: 01/08/2009 CVE: CVE-2008-1898 BID: 28820 OSVDB: 44458 Background Microsoft Works is a suite of productivity tools for home users. Problem The WkImgSrv.dll ActiveX control included in Microsoft Works allows command execution when a user loads a web page which instantiates the control with a...

Microsoft Works WkImgSrv.dll ActiveX Control WksPictureInterface vulnerability

Added: 01/08/2009 CVE: CVE-2008-1898 BID: 28820 OSVDB: 44458 Background Microsoft Works is a suite of productivity tools for home users. Problem The WkImgSrv.dll ActiveX control included in Microsoft Works allows command execution when a user loads a web page which instantiates the control with a...

Microsoft Works WkImgSrv.dll ActiveX Control WksPictureInterface vulnerability

Added: 01/08/2009 CVE: CVE-2008-1898 BID: 28820 OSVDB: 44458 Background Microsoft Works is a suite of productivity tools for home users. Problem The WkImgSrv.dll ActiveX control included in Microsoft Works allows command execution when a user loads a web page which instantiates the control with a...

Directory traversal

Directory traversal vulnerability in scripts/export.php in ClaSS before 0.8.61 allows remote attackers to read arbitrary files via directory traversal sequences in the ftype parameter...

CVE-2008-5856

Directory traversal vulnerability in scripts/export.php in ClaSS before 0.8.61 allows remote attackers to read arbitrary files via directory traversal sequences in the ftype parameter...

CVE-2008-5856

Directory traversal vulnerability in scripts/export.php in ClaSS before 0.8.61 allows remote attackers to read arbitrary files via directory traversal sequences in the ftype parameter...

CVE-2008-5856

CVE-2008-5856 : A directory traversal vulnerability affects ClaSS prior to 0.8.61 in the scripts/export.php component. By supplying traversal sequences via the ftype parameter, a remote attacker could read arbitrary files, exposing potentially sensitive data. The public records consistently descr...

ClaSS 0.8.6.0 File Disclosure

ClaSS http://www.laex.org/class/ - =0.8.60 - magicquotesgpc = Off registerglobals = On - File Disclosure/Download - http://site/Class/class/scripts/export.php?ftype= /../../path/to/Class/school.php /../../path/to/Class/dbhconnect.php /../../etc/passwd - Timeline - Author notified: Dec 19 Patch...

ClaSS <= 0.8.60 (export.php ftype) Local File Inclusion Vulnerability

No description provided by source. ClaSS http://www.laex.org/class/ - =0.8.60 - magicquotesgpc = Off registerglobals = On - File Disclosure/Download - http://site/Class/class/scripts/export.php?ftype= /../../path/to/Class/school.php /../../path/to/Class/dbhconnect.php /../../etc/passwd - Timeline...

ClaSS <= 0.8.60 (export.php ftype) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== ClaSS = 0.8.60 export.php ftype Local File Inclusion Vulnerability ===================================================================== ClaSS http://www.laex.org/class/...

ClaSS 0.8.60 - 'export.php' Local File Inclusion

ClaSS http://www.laex.org/class/ - =0.8.60 - magicquotesgpc = Off registerglobals = On - File Disclosure/Download - http://site/Class/class/scripts/export.php?ftype= /../../path/to/Class/school.php /../../path/to/Class/dbhconnect.php /../../etc/passwd - Timeline - Author notified: Dec 19 Patch...

ClaSS 0.8.60 - export.php Local File Inclusion

ClaSS 0.8.60 - export.php Local File Inclusion ClaSS http://www.laex.org/class/ - =0.8.60 - magicquotesgpc = Off registerglobals = On - File Disclosure/Download - http://site/Class/class/scripts/export.php?ftype= /../../path/to/Class/school.php /../../path/to/Class/dbhconnect.php /../../etc/passw...

[SECURITY] Fedora 9 Update: rsyslog-3.20.2-2.fc9

Rsyslog is an enhanced multi-threaded syslogd supporting, among others, MyS QL, syslog/tcp, RFC 3195, permitted sender lists, filtering on any message part, and fine grain output format control. It is quite compatible to stock syskl ogd and can be used as a drop-in replacement. Its advanced...