360 Web Manager 3.0 File Access

Exploit Title: Multiple vulnerabilities in 360 Web Manager 3.0 Google Dork: "Powered by 360 Web Manager 3.0" Date: 15/04/2011 Author: Ignacio Garrido Contact: [email protected] Software Link: www.360webmanager.com Version: v3.0 Tested on: Linux 2.6.18 Vulnerability description: 360 Web Manager 3....

PHP Hosting Directory 2.0 - Database Disclosure (Python)

PHP Hosting Directory 2.0 - Database Disclosure Python !/usr/bin/env python -- coding:cp1254 -- ''' Title : PHP Hosting Directory 2.0 Database Disclosure Exploit .py Author : ZoRLu / http://inj3ct0r.com/author/577 mail-msn : [email protected] Down. Script : - Proof :...

Cilem Haber 1.4.4 (Tr) - Database Disclosure

!/usr/bin/env python -- coding:cp1254 -- ''' Title : Cilem Haber v1.4.4 Tr Database Disclosure Exploit .py Down. Script : http://www.aspindir.com/indir.asp?id=3287&sIslem=%DDndir Proof : http://img718.imageshack.us/img718/7993/cilem.jpg Tested : Windows XP Professional sp3 Author : ZoRLu /...

Bka Haber 1.0 (Tr) - File Disclosure

Bka Haber 1.0 Tr - File Disclosure !/usr/bin/env python -- coding:cp1254 -- ''' Title : Bka Haber v1.0 Tr File Disclosure Exploit .py Desc. : its not Database Down. Script : http://www.scriptci.com/modules.php?name=Downloads&dop=getit&lid=475 Proof :...

DataTrack System 3.5 Cross Site Scripting

============================================================================================================ //\ /\ /\ /\ /\ /\ ///\ //\ /\ /\///\ // \ // //\ \ / //\ \ / // //\ \ /\\ \ \ \ / / / / // \ \ // // // // \ // //\ \\ \ // /// \ \ / \ / // / // / / / / / \ \ / / / ...

Acritum Femitter Server 1.03 Directory Traversal

--= Exploit Title: Acritum Femitter Server v1.03 Multiple Vulnerabilities --= Date: 2/5/2010 --= Author: Zer0 Thunder --= Software Link: http://acritum.com/dist/fem-dist.exe --= Version: v1.03 --= Tested on: XP sp 2 Acritum Femitter Server v1.03 is a HTTP and FTP Server for Windows. I came up wit...

Acritum Femitter Server v1.03 Multiple Vulnerabilities

Exploit for windows platform in category remote exploits ====================================================== Acritum Femitter Server v1.03 Multiple Vulnerabilities ====================================================== --= Tested on: XP sp 2 Acritum Femitter Server v1.03 is a HTTP and FTP Serv...

Acritum Femitter Server 1.03 - Multiple Vulnerabilities

--= Tested on: XP sp 2 Acritum Femitter Server v1.03 is a HTTP and FTP Server for Windows. I came up with few vulnerabilities of this .. some vulns are already has been revelied but some are not so lets have a look HTTP Server ----------- In the Femitter Server Application HTTP tab there are few...

Acritum Femitter Server 1.03 - Multiple Vulnerabilities

Acritum Femitter Server 1.03 - Multiple Vulnerabilities --= Tested on: XP sp 2 Acritum Femitter Server v1.03 is a HTTP and FTP Server for Windows. I came up with few vulnerabilities of this .. some vulns are already has been revelied but some are not so lets have a look HTTP Server ----------- In...

Miniature Java Web Server <= 1.71 Multiple Vulnerabilities

No description provided by source. Exploit Title: Miniature Java Web Server = 1.71 Multiple Vulnerabilities. Date: 26/03/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.comhttp://gmail.com | www.DigitalWhisper.co.ilhttp://www.DigitalWhisper.co.il Software Link: http://tjws.sourceforge.net/download...

miniature java Web server 1.71 - Multiple Vulnerabilities

miniature java Web server 1.71 - Multiple Vulnerabilities Exploit Title: Miniature Java Web Server | www.DigitalWhisper.co.il Software Link: http://tjws.sourceforge.net/download Version: = 1.71 Tested on: JRE build 1.6.017-b04 Path Traversal: A Path Traversal attack aims to access files and...

miniature java Web server 1.71 - Multiple Vulnerabilities

Exploit Title: Miniature Java Web Server | www.DigitalWhisper.co.il Software Link: http://tjws.sourceforge.net/download Version: \r\n\r\n Lead to: HTTP RE...

PhpCityPortal - Multiple Vulnerabilities

PhpCityPortal - Multiple Vulnerabilities ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: suffer from multi SQL !NJECTON Vulnerability Vendor: phpcityportal.com ? Software : PhpCityPortal - pR!CE : -PURCHASE 1 LICENSE - $149 each -PURCHASE 3 LICENSES -...

ViewVC Versions Prior to 1.1.3 Multiple Remote Vulnerabilities

ViewVC is prone to these security vulnerabilities: - A security vulnerability that involves root listing of per-root authorization configuration. - A security vulnerability in 'query.py' involving the 'forbidden' authorizer or none. Versions prior to ViewVC 1.1.3 are vulnerable. OpenVAS...

SonicWALL Global VPN Client 4.0 - Log File Remote Format String

SonicWALL Global VPN Client 4.0 - Log File Remote Format String source: https://www.securityfocus.com/bid/35093/info SonicWALL Global VPN Client is prone to a remote format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to ...

SonicWALL Global VPN Client 4.0 - Log File Remote Format String

source: https://www.securityfocus.com/bid/35093/info SonicWALL Global VPN Client is prone to a remote format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. Successfully exploiting this issu...

Online Guestbook Pro (display) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Online Guestbook Pro display Blind SQL Injection Vulnerability ================================================================ Online Guestbook Pro display Blind SQL Injecti...

phpGreetCards XSS/Arbitrary File Upload Vulnerability

Exploit for unknown platform in category web applications ===================================================== phpGreetCards XSS/Arbitrary File Upload Vulnerability =====================================================...

Cross site scripting

Cross-site scripting XSS vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded URLs that are not properly handled when displaying the 403 Forbidden error page...

DEBIAN-CVE-2008-2168

Cross-site scripting XSS vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded URLs that are not properly handled when displaying the 403 Forbidden error page...