1899 matches found
Tekno.Portal (bolum.php) SQL Injection Vulnerability
Tekno.Portal bolum.php SQL Injection Vulnerability SpC-x Credit : SpC-X Site : http://www.Cyber-security.org Code : http://www.target.com/path/bolum.php?id=SQL Example : http://www.teknohaber.net/bolum.php?id=SQL /SpC-x -- Get your free email from http://mymail.bsdmail.com...
SelectaPix System SQL Injection
SelectaPix System SQL Injection Vulnerabilities SpC-x Credit : SpC-X Site : http://www.Cyber-security.org Code : http://www.site.com/path/viewalbum.php?albumID=SQL Example : http://www.outofthetrees.co.uk/selectapix/demo/viewalbum.php?albumID=SQL /SpC-x -- Get your free email from...
US-CERT Technical Cyber Security Alert TA06-139A -- Microsoft Word Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA06-139A Microsoft Word Vulnerability Original release date: May 19, 2006 Last revised: -- Source: US-CERT Systems Affected Microsoft Word 2003 Microsoft Word XP 2002 Microsoft Word is includ...
UBlog Remote XSS Exploit
Vunerabilitys: ---------------- XSS Exploit Product: -------- UBlog 1.6 Access Edition Vendor: -------- http://www.uapplication.com/ublog/index.asp Description of product: ----------------------- Blog archive by date; Possibility to comment a blog; Notify via email; Password protected; Amend or...
irater.txt
" ."target:" ."cmdshell:" ."cmd:" ."" .""; if !isset$POST'submit' echo $form; else $file = fopen "test.txt", "w+"; fwrite$file, ""; fclose$file; $file = fopen $target.$cmdshell, "r"; if !$file echo "Unable to get output.\n"; exit; echo $form; while !feof $file $line .= fgets $file, 1024.""; $tpos...
[VulnWatch] Multiple vulnerabilities in RealPlayer (#NISR11062004)
NGSSoftware Insight Security Research Advisory Name: REAL One Player code execution through malformed media file Systems Affected: RealOne Player English, RealOne Player v2 all languages, RealPlayer 10 English, German and Japanese, RealPlayer 8 all languages, RealPlayer Enterprise all versions,...
CVE-2002-0076
CVE-2002-0076 affects the Java Runtime Environment (JRE) Bytecode Verifier. The verifier flaw allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation. Affected are Microsoft VM builds up to 3802 (Internet Explorer 4.x/5.x) and Net...
CVE-2001-1401
Bugzilla before 2.14 contains an access-control flaw where confidential bugs can be viewed by manipulating bug id parameters in multiple scripts (process_bug.cgi, show_activity.cgi, showvotes.cgi, showdependencytree.cgi, showdependencygraph.cgi, showattachment.cgi, describecomponents.cgi). The un...
CVE-2002-0248
CVE-2002-0248 affects wmtv versions 0.6.5 and earlier. Local users can modify arbitrary files via a symlink attack on the configuration file due to improper handling of symlinks. Impact is local, complete confidentiality/integrity/availability as described; remediation recommended is upgrading to...
CVE-1999-1167
CVE-1999-1167 describes a Cross-site scripting vulnerability in the Third Voice Web annotation utility. The issue allows remote attackers to read sensitive data and generate fake web pages for other Third Voice users by injecting malicious JavaScript into an annotation. Affected component is the ...
CVE-2001-0931
CVE-2001-0931 describes a directory traversal vulnerability in Cooolsoft PowerFTP Server 2.03. The issue allows an attacker to list or read arbitrary files and directories by using a .. path in FTP commands (LS or GET). The provided documents do not specify a fix or remediation; no exploitation d...
CVE-2001-0999
CVE-2001-0999 concerns Outlook Express 6.00, where remote attackers could cause arbitrary script execution by embedding SCRIPT tags in a message with MIME type text/plain. This contradicts the expected behavior that text/plain messages do not run scripts. The available references (NVD, CVE List) ...
CVE-2000-1171
The CVE-2000-1171 issue affects CGIForum 1.0’s cgiforum.pl (thesection parameter) where insufficient input validation allows directory traversal. An attacker can craft a URL (e.g., ?thesection=../../../../etc/passwd) to access files on the web server, with the accessible scope limited by the web ...
CVE-2000-1187
CVE-2000-1187 involves a buffer overflow in the HTML parser of Netscape 4.75 and earlier. The vulnerability allows remote attackers to execute arbitrary commands by supplying a long password value in a form field. The available documents explicitly describe the affected component (HTML parser), t...
CVE-2000-0610
NetWin dMailWeb and cwMail 2.6g and earlier are affected by a vulnerability that allows remote attackers to bypass authentication and relay mail through the server by supplying a username that contains a carriage return. This entry is documented in CVE-2000-0610 with an NVD base score of 5.0 (Med...
CVE-2000-0675
Technical details (affected product/version, root cause, impact, or fixes) are not publicly provided in the supplied documents; monitor for updates.
CVE-2000-0114
CVE-2000-0114 affects FrontPage Server Extensions. It enables unauthenticated remote disclosure of the anonymous account name via an RPC POST to shtml.dll in the /_vti_bin/ virtual directory. The issue stems from information disclosure in FrontPage Server Extensions; no exploitation details are p...
