1615 matches found
Deserialization of untrusted data
misc.php in DeluxeBB 1.3 allows remote attackers to register accounts without a valid email address via a valemail action with the valmem set to a pre-assigned user ID, which is visible from a memberlist action...
Text Exchange Pro - [ CSRF ] Create Administrator Account
Exploit for unknown platform in category web applications ========================================================= Text Exchange Pro - CSRF Create Administrator Account ========================================================= Title: Text Exchange Pro - CSRF Create Administrator Account Date:...
phpCollegeExchange 0.1.5c SQL Injection
PoC - phpCollegeExchange 0.1.5c SQL Injection - Salvatore Fresta aka Drosophila This code will print the columns number found by the injection. In order to view the content of the fields, you must exchange the number with the field name, adding a FROM tablename at the end of the injection query...
phpCollegeExchange 0.1.5c - Multiple SQL Injections
phpCollegeExchange 0.1.5c - Multiple SQL Injections phpCollegeExchange 0.1.5c Multiple SQL Injection Vulnerabilities Name phpCollegeExchange Vendor http://phpcollegeex.sourceforge.net Versions Affected 0.1.5c Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact...
phpCollegeExchange 0.1.5c Multiple SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ================================================================ phpCollegeExchange 0.1.5c Multiple SQL Injection Vulnerabilities ================================================================ phpCollegeExchange 0.1.5c Multiple SQL...
[SECURITY] Fedora 12 Update: php-pear-Mail-1.1.14-5.fc12
PEAR's Mail package defines an interface for implementing mailers under the PEAR hierarchy. It also provides supporting functions useful to multiple mailer backends. Currently supported backends include: PHP's native mail function, sendmail, and SMTP. This package also provides a RFC822 email...
VisionLMS 1.0 (changePW.php) Remote Password Change Exploit
No description provided by source. html head titleVisionLMS 1.0 | Change Password/title p VisionLMS 1.0 Remote Password Changebr Coded by Mr.tro0oqybr E-mail [email protected] --- Yemeni hackerbr Greetz All my Friendsbr /p form enctype="multipart/form-data" method="post" name="form"...
Hot Project 7 SQL Injection
-------------------------AllaH AkbaR------------------------------- Hot Project - Version 7 Auth Bypass Remote Sql Injecion --------------------------------------------------------------------------- Discovered By: HCOCAMAN ALGERIAN HaCkEr Mail: [email protected]...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Gallarific Free Edition allow remote attackers to inject arbitrary web script or HTML via 1 the e-mail address, 2 a comment, which is not properly handled during moderation, and 3 the tag parameter to gallery/tags.php...
CVE-2009-0969
Cross-site request forgery CSRF vulnerability in account/settings/account/index.php in phpFoX 1.6.21 allows remote attackers to hijack the authentication of administrators for requests that change the email address via the actupdate action...
Cisco Unified MeetingPlace Web Conferencing Stored Cross Site Scripting Vulnerability
Title: Cisco Unified MeetingPlace Web Conferencing Stored Cross Site Scripting Vulnerability CVE Identifier: N/A Credit: Security Assurance Team of the National Australia Bank. The vendor was advised of this vulnerability prior to its public release. National Australia Bank adheres to the...
CVE-2009-0541
Multiple cross-site scripting XSS vulnerabilities in Magento 1.2.0 and 1.2.1.1 allow remote attackers to inject arbitrary web script or HTML via 1 the username field in an admin/ request to index.php, possibly related to the loginusername parameter and the app/code/core/Mage/Admin/Model/Session.p...
SalesCart (Auth Bypass) SQL Injection Vulnerability
No description provided by source. ----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :SalesCart Product Management Plugin Site :http://www.salescart.com Demo :http://www.salescart.com/scorderdemo/online/default.asp Details...
Indian Institute Of Technology SQL Injection
----------------------------------------------------------------------------------------------- + Indian Institute of Technology, Kharagpur suffers from a remote SQL injection vulnerability + Author: Rohit Bansal...
Nokia S60 SMS/MMS (Curse of Silence) Denial of Service Vulnerability
No description provided by source. Vulnerability Advisory ====================== Remote SMS/MMS Denial of Service - "Curse Of Silence" for Nokia S60 phones URL === https://berlin.ccc.de/tobias/cos/s60-curse-of-silence-advisory.txt Video =====...
Nokia S60 SMSMMS (Curse of Silence) - Denial of Service
Nokia S60 SMSMMS Curse of Silence - Denial of Service Vulnerability Advisory ====================== Remote SMS/MMS Denial of Service - "Curse Of Silence" for Nokia S60 phones URL === https://berlin.ccc.de/tobias/cos/s60-curse-of-silence-advisory.txt Video =====...
RevSense 1.0 - Authentication Bypass
RevSense 1.0 - Authentication Bypass - RevSense v.1.0 Auth bypass SQL Injection Vulnerability + Script home : http://www.revsense.com/ - Discovered By : d3b4g - Greetz : str0ke / All my freind Dork:Powered by Revsense Go to www.target.com/index.php?section=user&action=login Use following...
Simple Customer 1.2 - Authentication Bypass
Simple Customer 1.2 - Authentication Bypass - Simple Customer 1.2 Remort Auth bypass SQL Injection Vulnerability - Discovered By : d3b4g - Greetz : All my freind Go to www.target.compathlogin.php Use following information to bypass login. Write any email Address as email address.It must to be in...
CVE-2008-4907
The message parsing feature in Dovecot 1.1.4 and 1.1.5, when using the FETCH ENVELOPE command in the IMAP client, allows remote attackers to cause a denial of service persistent crash via an email with a malformed From address, which triggers an assertion error, aka "invalid message address parsi...