dewizardx-overwrite.txt

2007/05/15 ----------------------------------------------------------------------------------- DB Software Laboratory DeWizardX DEWizardAX.ocx Remote Arbitrary File Overwrite url: http://www.dbsoftlab.com price: $100 author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.o...

Design/Logic Flaw

The DB Software Laboratory DeWizardX DEWizardAX.ocx ActiveX control allows remote attackers to overwrite arbitrary files via the SaveToFile function...

CVE-2007-2725

The DB Software Laboratory DeWizardX DEWizardAX.ocx ActiveX control allows remote attackers to overwrite arbitrary files via the SaveToFile function...

CVE-2007-2725

CVE-2007-2725 affects the DB Software Laboratory’s DeWizardX (DEWizardAX.ocx) ActiveX control. The vulnerability lets remote attackers overwrite arbitrary files via the SaveToFile function. According to NVD, it has a network attack vector, no authentication, and partial confidentiality/integrity/...

CVE-2007-2725

The DB Software Laboratory DeWizardX DEWizardAX.ocx ActiveX control allows remote attackers to overwrite arbitrary files via the SaveToFile function...

DeWizardX (DEWizardAX.ocx) Arbitrary File Overwrite Exploit

Exploit for unknown platform in category remote exploits =========================================================== DeWizardX DEWizardAX.ocx Arbitrary File Overwrite Exploit =========================================================== 2007/05/15...

DeWizardX (DEWizardAX.ocx) Arbitrary File Overwrite Exploit

No description provided by source. pre span style="font: 14pt Courier New;"p align="center"b2007/05/15/b/p/span codespan style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------------- bDB Software Laboratory DeWizardX...

Buffer overflow

Buffer overflow in the DB Software Laboratory VImpX ActiveX control in VImpX.ocx 4.7.3 allows remote attackers to execute arbitrary code via a long LogFile parameter...

CVE-2007-2667

Buffer overflow in the DB Software Laboratory VImpX ActiveX control in VImpX.ocx 4.7.3 allows remote attackers to execute arbitrary code via a long LogFile parameter...

CVE-2007-2667: Undefined Security Weakness

Buffer overflow in the DB Software Laboratory VImpX ActiveX control in VImpX.ocx 4.7.3 allows remote attackers to execute arbitrary code via a long LogFile parameter...

VImpX ActiveX (VImpX.ocx 4.7.3.0) - Remote Buffer Overflow

VImpX ActiveX VImpX.ocx 4.7.3.0 - Remote Buffer Overflow ?php / win32adduser - PASS=tzu EXITFUNC=seh USER=sun Size=483 Encoder=PexAlphaNum http://metasploit.com / $shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"...

VImpX ActiveX (VImpX.ocx 4.7.3.0) - Remote Buffer Overflow

?php / win32adduser - PASS=tzu EXITFUNC=seh USER=sun Size=483 Encoder=PexAlphaNum http://metasploit.com / $shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49". "\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36"...

burncms-rfi.txt

burnCMS = 0.2rootRemote File Include Vulnerablities D.Script: http://www.burnstone.ch/downloads/burnCMS-0.2.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:PathburnCMS/lib/authuser.php?root=Shell Exploit:PathburnCMS/lib/misc.php?root=Shell...

CVE-2007-2364: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in burnCMS 0.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to 1 mysql.class.php or 2 postgres.class.php in lib/db/; or 3 authuser.php, 4 misc.php, or 5 connect.php in lib/...

burnCMS 0.2 - 'root' Remote File Inclusion

burnCMS = 0.2rootRemote File Include Vulnerablities D.Script: http://www.burnstone.ch/downloads/burnCMS-0.2.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:PathburnCMS/lib/authuser.php?root=Shell Exploit:PathburnCMS/lib/misc.php?root=Shell...

Remote file inclusion

PHP remote file inclusion vulnerability in config.php in Built2Go PHP Link Portal 1.79 allows remote attackers to execute arbitrary PHP code via a URL in the fullpathtodb parameter...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in GPL PHP Board GPB unstable-2001.11.14-1 allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 db.mysql.inc.php or 2 gpb.inc.php in include/, or the 3 theme parameter to themes/ubb/login.php...

CVE-2007-2100: Undefined Security Weakness

FAC Guestbook 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/Gdb.mdb...

CVE-2007-2101: Undefined Security Weakness

FAC Guestbook 3.01 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/gbdb.mdb. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-2065: Undefined Security Weakness

PHP remote file inclusion vulnerability in db/PollDB.php in Robert Ladstaetter ActionPoll 1.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIGDATAREADERWRITER parameter, a different vector than CVE-2001-1297. NOTE: the provenance of this information is unknown; the...