CVE-2006-5902

viksoe GMail Drive shell extension allows remote attackers to perform virtual filesystem actions via e-mail messages with certain subject lines, as demonstrated by 1 a GMAILFS: 13;a;1 message with a new filename and a file attachment, which injects a new file into the filesystem; 2 a GMAILFS:...

CVE-2006-5733

Directory traversal vulnerability in error.php in PostNuke 0.763 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the PNSVlang PNSV lang cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then includ...

GLSA-200609-12 : Mailman: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200609-12 Mailman: Multiple vulnerabilities Mailman fails to properly handle standards-breaking RFC 2231 formatted headers. Furthermore, Moritz Naumann discovered several XSS vulnerabilities and a log file injection. Impact : An...

Alstrasoft e-Friends 4.85 - Remote Command Execution

Alstrasoft e-Friends 4.85 - Remote Command Execution !/usr/bin/perl AlstraSoft Efriends 4.85 Remote Command Execution Exploit Site : http://www.alstrasoft.com/efriends.htm Coded by Kw3RLn from Romanian Security Team a.K.A http://RST-CREW.NET Contact: [email protected] or [email protected] P...

BandSite CMS 1.1.1 - ROOT_PATH Remote File Inclusion

BandSite CMS 1.1.1 - ROOTPATH Remote File Inclusion --------------------------------------------------------------------------- Grayscale BandSite CMS =rootpath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By Kw3RLn...

Fusion News v.1.0 (fil_config) Remote File Inclusion Exploit

Exploit for unknown platform in category web applications ============================================================ Fusion News v.1.0 filconfig Remote File Inclusion Exploit ============================================================ !/usr/bin/perl use IO::Socket; Exploit coded by: X0r1 Bug...

CVE-2005-1876

The CVE-2005-1876 entry describes a direct code injection vulnerability in CuteNews 1.3.6 and earlier . The issue allows remote attackers with administrative privileges to execute arbitrary PHP code by inputs injected into a template file (.tpl), effectively compromising the server’s PHP executio...

[SA14861] AN HTTPD cmdIS.DLL Buffer Overflow and Log File Injection

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: AN HTTPD cmdIS.DLL Buffer Overflow and Log File...

Oracle MySQL Multiple Vulnerabilities

Binary data 2696.prm...

SocialMPN Arbitrary File Injection Exploit

Exploit for unknown platform in category web applications ========================================== SocialMPN Arbitrary File Injection Exploit ========================================== !/usr/bin/perl -w Remote Testing SocialMPN Remote File Inclusion by y3dips for testing only Bug find by...

SocialMPN - Arbitrary File Injection

!/usr/bin/perl -w Remote Testing SocialMPN Remote File Inclusion by y3dips for testing only Bug find by zer0-c00l , Bug published at http://waraxe.us/ftopic-542-0-days0-orderasc-.html print " Remote Testing File Inclusion for SocialMPN by y3dips \n"; require LWP::UserAgent; if@ARGV == 2 $target=...

CVE-2004-1513

04WebServer 1.42 does not adequately filter data that is written to log files, which could allow remote attackers to inject carriage return characters into the log file and spoof log entries...

CVE-2005-0410

SQL injection vulnerability in importcc.php for CitrusDB 0.3.6 and earlier allows remote attackers to inject data via the fields of a CSV file...

[NEWS] Multiple Vulnerabilities in Netgear FVS318 Router

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

04WebServer Multiple Vulnerabilities (XSS, DoS, more)

The remote host is running a version of 04WebServer which is older than version 1.5. Such versions are affected by multiple vulnerabilities : - A cross-site scripting vulnerability in the Responsedefault.html script which could allow an attacker to execute arbitrary code in the user's browser. - ...

04webserver 1.42 - Multiple Vulnerabilities

04webserver 1.42 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/11652/info Multiple remote vulnerabilities reportedly affect 04WebServer. These issues are due to a failure of the application to properly sanitize user-supplied input. An attacker may leverage these issues to...

04webserver 1.42 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/11652/info Multiple remote vulnerabilities reportedly affect 04WebServer. These issues are due to a failure of the application to properly sanitize user-supplied input. An attacker may leverage these issues to carry out cross-site scripting attacks agains...

Silent Storm Portal - Multiple Vulnerabilities

Demonstration: Register a user account then login and run the exploit.html ---exploit.html---- 1" ---/exploit.html--- That's All! What Happened? The 3rd line of exploit.html injected Administrator level "1" into the database file. 1: Administrator,2: is Normal User. milw0rm.com 2004-09-30...

@lex Guestbook (PHP) Include file

Informations : °°°°°°°°°°°°°° Website : http://www.alexphpteam.com Version : all Problem : Include file PHP Code/Location : °°°°°°°°°°°°°°°°°°° ./include/livreinclude.php ------------------------------------------------------------------ if !$noconnect.... some include functions...

Norton AntiVirus nested file manual scan bypass.....

Product Version: Norton Antivirus 2002 Only tested On... Risk Impact: Medium Vendor Status: No responce! Summary: If you manage to inject a file in the sub-directorys; beyond windows OS can create normally, say in 130 'th + sub-directory at c:..........upto 130'th ... NAV fails to scan the NESTED...