dewizardx-overwrite.txt

2007/05/15 ----------------------------------------------------------------------------------- DB Software Laboratory DeWizardX DEWizardAX.ocx Remote Arbitrary File Overwrite url: http://www.dbsoftlab.com price: $100 author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.o...

Design/Logic Flaw

The DB Software Laboratory DeWizardX DEWizardAX.ocx ActiveX control allows remote attackers to overwrite arbitrary files via the SaveToFile function...

CVE-2007-2725

The DB Software Laboratory DeWizardX DEWizardAX.ocx ActiveX control allows remote attackers to overwrite arbitrary files via the SaveToFile function...

CVE-2007-2725

The DB Software Laboratory DeWizardX DEWizardAX.ocx ActiveX control allows remote attackers to overwrite arbitrary files via the SaveToFile function...

CVE-2007-2725

CVE-2007-2725 affects the DB Software Laboratory’s DeWizardX (DEWizardAX.ocx) ActiveX control. The vulnerability lets remote attackers overwrite arbitrary files via the SaveToFile function. According to NVD, it has a network attack vector, no authentication, and partial confidentiality/integrity/...

DeWizardX (DEWizardAX.ocx) Arbitrary File Overwrite Exploit

Exploit for unknown platform in category remote exploits =========================================================== DeWizardX DEWizardAX.ocx Arbitrary File Overwrite Exploit =========================================================== 2007/05/15...

DeWizardX (DEWizardAX.ocx) Arbitrary File Overwrite Exploit

No description provided by source. pre span style="font: 14pt Courier New;"p align="center"b2007/05/15/b/p/span codespan style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------------- bDB Software Laboratory DeWizardX...

Buffer overflow

Buffer overflow in the DB Software Laboratory VImpX ActiveX control in VImpX.ocx 4.7.3 allows remote attackers to execute arbitrary code via a long LogFile parameter...

CVE-2007-2667

Buffer overflow in the DB Software Laboratory VImpX ActiveX control in VImpX.ocx 4.7.3 allows remote attackers to execute arbitrary code via a long LogFile parameter...

CVE-2007-2667: Undefined Security Weakness

Buffer overflow in the DB Software Laboratory VImpX ActiveX control in VImpX.ocx 4.7.3 allows remote attackers to execute arbitrary code via a long LogFile parameter...

VImpX ActiveX (VImpX.ocx 4.7.3.0) - Remote Buffer Overflow

VImpX ActiveX VImpX.ocx 4.7.3.0 - Remote Buffer Overflow ?php / win32adduser - PASS=tzu EXITFUNC=seh USER=sun Size=483 Encoder=PexAlphaNum http://metasploit.com / $shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"...

VImpX ActiveX (VImpX.ocx 4.7.3.0) - Remote Buffer Overflow

?php / win32adduser - PASS=tzu EXITFUNC=seh USER=sun Size=483 Encoder=PexAlphaNum http://metasploit.com / $shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49". "\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36"...

burncms-rfi.txt

burnCMS = 0.2rootRemote File Include Vulnerablities D.Script: http://www.burnstone.ch/downloads/burnCMS-0.2.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:PathburnCMS/lib/authuser.php?root=Shell Exploit:PathburnCMS/lib/misc.php?root=Shell...

CVE-2007-2364: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in burnCMS 0.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to 1 mysql.class.php or 2 postgres.class.php in lib/db/; or 3 authuser.php, 4 misc.php, or 5 connect.php in lib/...

burnCMS 0.2 - 'root' Remote File Inclusion

burnCMS = 0.2rootRemote File Include Vulnerablities D.Script: http://www.burnstone.ch/downloads/burnCMS-0.2.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:PathburnCMS/lib/authuser.php?root=Shell Exploit:PathburnCMS/lib/misc.php?root=Shell...

Remote file inclusion

PHP remote file inclusion vulnerability in config.php in Built2Go PHP Link Portal 1.79 allows remote attackers to execute arbitrary PHP code via a URL in the fullpathtodb parameter...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in GPL PHP Board GPB unstable-2001.11.14-1 allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 db.mysql.inc.php or 2 gpb.inc.php in include/, or the 3 theme parameter to themes/ubb/login.php...

CVE-2007-2101: Undefined Security Weakness

FAC Guestbook 3.01 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/gbdb.mdb. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-2065: Undefined Security Weakness

PHP remote file inclusion vulnerability in db/PollDB.php in Robert Ladstaetter ActionPoll 1.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIGDATAREADERWRITER parameter, a different vector than CVE-2001-1297. NOTE: the provenance of this information is unknown; the...

CVE-2007-2100: Undefined Security Weakness

FAC Guestbook 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/Gdb.mdb...