AuraCMS [Forum Module] Remote SQL Injection Vulnerability

No description provided by source. AuraCMS Forum Module - Remote SQL Injection Vendor : http://auracms.org/ Download : http://iwan.or.id/redirect/download/36.html -- Forum Module Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net Dork : inurl:"?pilih=forum"...

AuraCMS Forum Module - SQL Injection

AuraCMS Forum Module - SQL Injection AuraCMS Forum Module - Remote SQL Injection Vendor : http://auracms.org/ Download : http://iwan.or.id/redirect/download/36.html -- Forum Module Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net Dork : inurl:"?pilih=foru...

AuraCMS Forum Module - SQL Injection

AuraCMS Forum Module - Remote SQL Injection Vendor : http://auracms.org/ Download : http://iwan.or.id/redirect/download/36.html -- Forum Module Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net Dork : inurl:"?pilih=forum" file; /forum/komentar.php bug at...

commute-xss.txt

Aria-Security Tilte: community Cross-site Scripting XSS proof Of Concept : local/path/require/smallhead.php?retun=Xss-script...

[Aria-security] community Cross-site Scripting (XSS)

Aria-Security Tilte: community Cross-site Scripting XSS www.Aria-security.Com For English www.Aria-Security.net For Persian Author: YouYou Software: Commute The best community Site Script: http://sourceforge.net/projects/commutese/ proof Of Concept : local/path/require/smallhead.php?retun=Xss-scr...

CrystalPlayer 1.98 - .mls Local Buffer Overflow

CrystalPlayer 1.98 - .mls Local Buffer Overflow !/usr/bin/perl Crystal Player 1.98 Playlist.mls File Local Buffer Overflow Exploit Source:: http://www.crystalplayer.com/CrystalPro.exe Credit To Timq For The Vulnerability POC By Arham Muhammad While Debugging EIP And EBP Successfully Gets...

MySQL Community Server 5.0 < 5.0.45 Multiple Vulnerabilities

The version of MySQL Community Server installed on the remote host is reportedly affected by a denial of service vulnerability that can lead to a server crash with a specially crafted password packet. It is also affected by a privilege escalation vulnerability because 'CREATE TABLE LIKE' does not...

PR07-20: Webroot disclosure on Webbler CMS

PR07-20: Webroot disclosure on Webbler CMS This advisory has been published following consultation with UK CPNI formerly known as NISCC Date Found: 14th June 2007 Successfully tested on: Webbler CMS version 3.1.3. Earlier versions are possibly affected as well. Note: the version number is usually...

bwired - 'index.php?newsID' SQL Injection

/ \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ Program Title bwired - Remote SQL Injection Note There is also XSS, PHPSESSID session fixation, and cookie manipulation which I will not go into.. The admin hash will be...

Code injection

MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service daemon crash via a malformed password packet in the connection protocol...

CVE-2007-3780

MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service daemon crash via a malformed password packet in the connection protocol...

CVE-2007-3782

MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another database via a view that refers to this external table...

CVE-2007-3776

Cisco Unified Communications Manager CUCM, formerly CallManager and Unified Presence Server CUPS allow remote attackers to obtain sensitive information via unspecified vectors that reveal the SNMP community strings and configuration settings, aka 1 CSCsj20668 and 2 CSCsj25962...

CVE-2007-3781

MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE LIKE statement, which allows remote authenticated users to obtain sensitive information such as the table structure...

CVE-2007-3781

CVE-2007-3781 affects MySQL Community Server prior to 5.0.45. The vulnerability arises because a CREATE TABLE LIKE statement does not require privileges (e.g., SELECT) on the source table, allowing an authenticated remote user to obtain sensitive information such as the table structure. Connected...

CVE-2007-3782

MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another database via a view that refers to this external table...

CVE-2007-3780

MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service daemon crash via a malformed password packet in the connection protocol...

CVE-2007-3782

CVE-2007-3782 affects MySQL Community Server up to version 5.0.44; remote authenticated users can gain update privileges for a table in another database through a view that refers to an external table. Root cause: a view cross-database reference allows privilege escalation. A fix is available in ...

CVE-2007-3781

MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE LIKE statement, which allows remote authenticated users to obtain sensitive information such as the table structure...

youtube-bypass2.txt

Youtube.com requires account creation and login before allowing visitors to view videos flagged by users as inappropriate. Sample flagged video: http://www.youtube.com/watch?v=pJg0MYnndnw "This video or group may contain content that is inappropriate for some users, as flagged by YouTube's user...