5024 matches found
SOL9642 - Samba vulnerability CVE-2008-1105
Specifically crafted SMB responses can result in a heap overflow in the Samba client code. Information about this advisory is available at the following location: Note: This link takes you to a resource outside of AskF5, and it is possible that the information may be removed without our knowledge...
CVE-2009-0302
SQL injection vulnerability in the Downloads module for PHP-Nuke 8.0 8.1.0.3.5b and earlier allows remote authenticated users to execute arbitrary SQL commands via the url parameter in the Add operation to modules.php...
Sql injection
SQL injection vulnerability in the Downloads module for PHP-Nuke 8.0 8.1.0.3.5b and earlier allows remote authenticated users to execute arbitrary SQL commands via the url parameter in the Add operation to modules.php...
CVE-2009-0302
SQL injection vulnerability in the Downloads module for PHP-Nuke 8.0 8.1.0.3.5b and earlier allows remote authenticated users to execute arbitrary SQL commands via the url parameter in the Add operation to modules.php...
CVE-2009-0302: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Downloads module for PHP-Nuke 8.0 8.1.0.3.5b and earlier allows remote authenticated users to execute arbitrary SQL commands via the url parameter in the Add operation to modules.php...
PHP-Nuke 8.0 Downloads Blind Sql Injection
PHP-Nuke 8.0 Downloads Blind Sql Injection AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : http://ircrash.com My Official WebSite : http://r3dw0rm.ir IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina Yazdanmehr Download : http://phpnuke.org Dork :...
PHP-Nuke Downloads Module - url SQL Injection
PHP-Nuke Downloads Module - url SQL Injection source: https://www.securityfocus.com/bid/33410/info The Downloads module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...
PHP-Nuke Downloads Module SQL Injection
PHP-Nuke 8.0 Downloads Blind Sql Injection AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : http://ircrash.com My Official WebSite : http://r3dw0rm.ir IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina Yazdanmehr Download : http://phpnuke.org Dork :...
PHP-Nuke Downloads Module - 'url' SQL Injection
source: https://www.securityfocus.com/bid/33410/info The Downloads module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
CVE-2008-5905
The web interface plugin in KTorrent before 3.1.4 allows remote attackers to bypass intended access restrictions and upload arbitrary torrent files, and trigger the start of downloads and seeding, via a crafted HTTP POST request...
pidgin: unrestricted download of arbitrary files triggered via UPnP
The UPnP functionality in Pidgin 2.0.0, and possibly other versions, allows remote attackers to trigger the download of arbitrary files and cause a denial of service memory or disk consumption via a UDP packet that specifies an arbitrary URL...
Secure Downloads v2.0.0r for vBulletin SQL Injection Vulnerability
No description provided by source. vBulletin Mode Secure Downloads v2.0.0r SQL Injection Vulnerability Mod : http://www.1src.com/freeware/download.php?id=1880 Author : Cn4phux PoC : URL.com/fileinfo.php?id=SQL :...
Secure Downloads 2.0.0r SQL Injection
vBulletin Mode Secure Downloads v2.0.0r SQL Injection Vulnerability Mod : http://www.1src.com/freeware/download.php?id=1880 Author : Cn4phux PoC : URL.com/fileinfo.php?id=SQL : 1797'+AND0+UNION+SELECT+1,1,1,1,1,'Cn4phux',0,0,0,1,0,1,0,0,0,0,0,USER,DATABASE,0,0,0,0,0,0,0+OR+'1'='0 //Cn4phux...
vBulletin Secure Downloads 2.0.0r - SQL Injection
vBulletin Secure Downloads 2.0.0r - SQL Injection vBulletin Mode Secure Downloads v2.0.0r SQL Injection Vulnerability Mod : http://www.1src.com/freeware/download.php?id=1880 Author : Cn4phux PoC : URL.com/fileinfo.php?id=SQL :...
Secure Downloads v2.0.0r for vBulletin SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================== Secure Downloads v2.0.0r for vBulletin SQL Injection Vulnerability ================================================================== vBulletin Mode Secure Downloads v2.0.0...
vBulletin Secure Downloads 2.0.0r - SQL Injection
vBulletin Mode Secure Downloads v2.0.0r SQL Injection Vulnerability Mod : http://www.1src.com/freeware/download.php?id=1880 Author : Cn4phux PoC : URL.com/fileinfo.php?id=SQL : 1797'+AND0+UNION+SELECT+1,1,1,1,1,'Cn4phux',0,0,0,1,0,1,0,0,0,0,0,USER,DATABASE,0,0,0,0,0,0,0+OR+'1'='0 //Cn4phux...
KTP Computer Customer Database CMS 1.0 - Blind SQL Injection
================================================ KTPCCD CMS Blind SQL Injection Vulnerability ================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, ...
NetRisk <= 2.0 (XSS/SQL Injection) Remote Vulnerabilities
Exploit for unknown platform in category web applications ========================================================= NetRisk javascript Remote SQL Injection index.php?p=profile&id=1+union+all+select+0,0,concatlogin,0x3a,password,0,0,0,0,0,0,0,0,0,0,0,0+from+netriskusers+where+id=1/...
CVE-2008-4435
Multiple cross-site scripting XSS vulnerabilities in the RMSOFT Downloads Plus rmdp module 1.5 and 1.7 for Xoops allow remote attackers to inject arbitrary web script or HTML via the 1 key parameter to search.php and the 2 id parameter to down.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the RMSOFT Downloads Plus rmdp module 1.5 and 1.7 for Xoops allow remote attackers to inject arbitrary web script or HTML via the 1 key parameter to search.php and the 2 id parameter to down.php...