edittag12-xss.txt

Script: EditTag Version: 1.2 Author: Greg Billock [email protected] Discoverer: NetJackal nima5014TyAhooD0Tcom - nj4ThackerzD0Tir I am sorry for my BAD English. Description: 1 Local file injection: An attacker can use edittag.cgi or edittagmp.cgi maybe .pl to inject files ex. /etc/passwd...

Multiple bugs in EditTag

Script: EditTag Version: 1.2 Author: Greg Billock [email protected] Discoverer: NetJackal nima5014TyAhooD0Tcom - nj4ThackerzD0Tir I am sorry for my BAD English. Description: 1 Local file injection: An attacker can use edittag.cgi or edittagmp.cgi maybe .pl to inject files ex. /etc/passwd...

Etomite CMS 0.6.1.2 - managerindex.php Local File Inclusion

Etomite CMS 0.6.1.2 - managerindex.php Local File Inclusion !/usr/bin/perl -w Etomite CMS Remote Command Execution Version: 0.6.1.2 Url: http://www.etomite.org Author : Alfredo Pesoli 'revenge' Description: Input passed to the 'f' parameter in "/manager/index.php" isn't properly verified before...

CVE-2006-5902

viksoe GMail Drive shell extension allows remote attackers to perform virtual filesystem actions via e-mail messages with certain subject lines, as demonstrated by 1 a GMAILFS: 13;a;1 message with a new filename and a file attachment, which injects a new file into the filesystem; 2 a GMAILFS:...

CVE-2006-5902: Undefined Security Weakness

viksoe GMail Drive shell extension allows remote attackers to perform virtual filesystem actions via e-mail messages with certain subject lines, as demonstrated by 1 a GMAILFS: 13;a;1 message with a new filename and a file attachment, which injects a new file into the filesystem; 2 a GMAILFS:...

CVE-2006-5903: Undefined Security Weakness

Rahul Jonna Gmail File Space GSpace allows remote attackers to perform virtual filesystem actions via e-mail messages with certain subject lines, as demonstrated by 1 a GSPACE "2174|1|1|1|gs:/ d$" message, which injects a new file into the filesystem; and 2 a GSPACE "|-135|1|1|0|gs:/ d$" message,...

CVE-2006-5733

Directory traversal vulnerability in error.php in PostNuke 0.763 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the PNSVlang PNSV lang cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then includ...

GLSA-200609-12 : Mailman: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200609-12 Mailman: Multiple vulnerabilities Mailman fails to properly handle standards-breaking RFC 2231 formatted headers. Furthermore, Moritz Naumann discovered several XSS vulnerabilities and a log file injection. Impact : An...

Alstrasoft e-Friends 4.85 - Remote Command Execution

Alstrasoft e-Friends 4.85 - Remote Command Execution !/usr/bin/perl AlstraSoft Efriends 4.85 Remote Command Execution Exploit Site : http://www.alstrasoft.com/efriends.htm Coded by Kw3RLn from Romanian Security Team a.K.A http://RST-CREW.NET Contact: [email protected] or [email protected] P...

BandSite CMS 1.1.1 - ROOT_PATH Remote File Inclusion

BandSite CMS 1.1.1 - ROOTPATH Remote File Inclusion --------------------------------------------------------------------------- Grayscale BandSite CMS =rootpath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By Kw3RLn...

Fusion News v.1.0 (fil_config) Remote File Inclusion Exploit

Exploit for unknown platform in category web applications ============================================================ Fusion News v.1.0 filconfig Remote File Inclusion Exploit ============================================================ !/usr/bin/perl use IO::Socket; Exploit coded by: X0r1 Bug...

CVE-2005-1876

The CVE-2005-1876 entry describes a direct code injection vulnerability in CuteNews 1.3.6 and earlier . The issue allows remote attackers with administrative privileges to execute arbitrary PHP code by inputs injected into a template file (.tpl), effectively compromising the server’s PHP executio...

[SA14861] AN HTTPD cmdIS.DLL Buffer Overflow and Log File Injection

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: AN HTTPD cmdIS.DLL Buffer Overflow and Log File...

SocialMPN Arbitrary File Injection Exploit

Exploit for unknown platform in category web applications ========================================== SocialMPN Arbitrary File Injection Exploit ========================================== !/usr/bin/perl -w Remote Testing SocialMPN Remote File Inclusion by y3dips for testing only Bug find by...

Oracle MySQL Multiple Vulnerabilities

Binary data 2696.prm...

SocialMPN - Arbitrary File Injection

!/usr/bin/perl -w Remote Testing SocialMPN Remote File Inclusion by y3dips for testing only Bug find by zer0-c00l , Bug published at http://waraxe.us/ftopic-542-0-days0-orderasc-.html print " Remote Testing File Inclusion for SocialMPN by y3dips \n"; require LWP::UserAgent; if@ARGV == 2 $target=...

CVE-2004-1513

04WebServer 1.42 does not adequately filter data that is written to log files, which could allow remote attackers to inject carriage return characters into the log file and spoof log entries...

CVE-2004-1513: Undefined Security Weakness

04WebServer 1.42 does not adequately filter data that is written to log files, which could allow remote attackers to inject carriage return characters into the log file and spoof log entries...

CVE-2005-0410

SQL injection vulnerability in importcc.php for CitrusDB 0.3.6 and earlier allows remote attackers to inject data via the fields of a CSV file...

[NEWS] Multiple Vulnerabilities in Netgear FVS318 Router

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...