8128 matches found
Dmx Forum <= 2.1a (edit.php) Remote Password Disclosure Exploit
No description provided by source. !/usr/bin/perl by DarkFig -- www.acid-root.new.fr use LWP::Simple; if !$ARGV1 header; print "\n| Usage: url memberid ----------------|"; print "\n+------------------------------------------+"; print "\n| Example: http://localhost/dmx/ 1 ------|"; end; sub header...
Dmx Forum <= 2.1a (edit.php) Remote Password Disclosure Exploit
Exploit for unknown platform in category web applications =============================================================== Dmx Forum ----------------|"; print "\n+------------------------------------------+"; print "\n| Example: http://localhost/dmx/ 1 ------|"; end; sub header print...
Dmx Forum 2.1a - edit.php Remote Password Disclosure
Dmx Forum 2.1a - edit.php Remote Password Disclosure !/usr/bin/perl by DarkFig -- www.acid-root.new.fr use LWP::Simple; if !$ARGV1 header; print "\n| Usage: ----------------|"; print "\n+------------------------------------------+"; print "\n| Example: http://localhost/dmx/ 1 ------|"; end; sub...
CVE-2006-2807: Undefined Security Weakness
ASPwebSoft Speedy Asp Discussion Forum allows remote attackers to change the password of any account via a modified account id and possibly arbitrary values of the name, email, country, password, and passwordre parameters to profileupdate.asp...
Dmx Forum 2.1a - 'edit.php' Remote Password Disclosure
!/usr/bin/perl by DarkFig -- www.acid-root.new.fr use LWP::Simple; if !$ARGV1 header; print "\n| Usage: ----------------|"; print "\n+------------------------------------------+"; print "\n| Example: http://localhost/dmx/ 1 ------|"; end; sub header print...
Html tag to bring security risks-vulnerability warning-the black bar safety net
BY Kenshin From http://www.loveshell.net The WWW service on the Internet is the most important one of the services, to provide customers with a wide variety of information resources, and to put this information resources organized a very important thing is the Html hypertext Language, and then...
ASP Discussion Forum Remote XSS Attack
Hi, I found a vulnerability in ASP Discussion Forum. The vulnerability is a Remote XSS Attack. This is the original Advisory: http://colander.altervista.org/advisory/ASPDisc.txt Let me know if you want to post it up or not. Best Regards, Omni -- Email.it, the professional e-mail, gratis per te:...
Joomla/Mambo CMS Component SimpleBoard 1.1 XSS-Vulnerabilities
Joomla/Mambo CMS Component SimpleBoard 1.1.0 Stable XSS-Vulnerabilities ======================================================================= Release Date ------------ June 01, 2006 Vendor ------- Two Shoes Mambo Factory http://www.tsmf.net/ Version ------- SimpleBoard 1.1.0 Stable comsimpleboa...
ASP Discussion Forum Like the one on FreeVBCode.com Remote XSS Exploit
----------------------------------------------------------------------------- - ASP Discussion Forum Like the one on FreeVBCode.com Remote XSS Exploit - -= http://colander.altervista.org/advisory/ASPDisc.txt =- ----------------------------------------------------------------------------- -= ASP...
TinyPHP Forum <= 3.6 (profile.php) Remote Code Execution Exploit
Exploit for unknown platform in category web applications ================================================================ TinyPHP Forum "; $socket = IO::Socket::INET-newProto="tcp", PeerAddr="$server", PeerPort="http80" || die "- Cannot not connect to host !\n"; print $socket "GET ".$path.$pcode...
TinyPHP Forum <= 3.6 (profile.php) Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl $App : TinyPHP forum = 3.6 Remote Command Execution Exploit $Bug : http://tinyphp/profile.php?action=view&uname=../afile%00 $IHST: h4ckerz.com / hackerz.ir / aria-security.net coded By Hessam-x Hessamx -at- Hessamx.net use IO::Socket; use...
TinyPHP Forum 3.6 - profile.php Remote Code Execution
TinyPHP Forum 3.6 - profile.php Remote Code Execution !/usr/bin/perl $App : TinyPHP forum "; $socket = IO::Socket::INET-newProto="tcp", PeerAddr="$server", PeerPort="http80" || die "- Cannot not connect to host !\n"; print $socket "GET ".$path.$pcode." HTTP/1.1\r\n"; print $socket "User-Agent:...
TinyPHP Forum 3.6 - 'profile.php' Remote Code Execution
!/usr/bin/perl $App : TinyPHP forum "; $socket = IO::Socket::INET-newProto="tcp", PeerAddr="$server", PeerPort="http80" || die "- Cannot not connect to host !\n"; print $socket "GET ".$path.$pcode." HTTP/1.1\r\n"; print $socket "User-Agent: ".$pcode."\r\n"; print $socket "Host: ".$server."\r\n";...
Improper access control
SiteScape Forum 7.2 and possibly earlier stores the avf.rc configuraiton file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive path information...
Code injection
Dispatch.cgi/user/uservCard/ in SiteScape Forum 7.2 and possibly earlier generates different responses in a way that allows remote attackers to enumerate valid usernames...
CVE-2006-2676
Dispatch.cgi/user/uservCard/ in SiteScape Forum 7.2 and possibly earlier generates different responses in a way that allows remote attackers to enumerate valid usernames...
CVE-2006-2677
SiteScape Forum 7.2 and possibly earlier stores the avf.rc configuraiton file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive path information...
CVE-2006-2676
Dispatch.cgi/user/uservCard/ in SiteScape Forum 7.2 and possibly earlier generates different responses in a way that allows remote attackers to enumerate valid usernames...
CVE-2006-2677
SiteScape Forum 7.2 and possibly earlier stores the avf.rc configuraiton file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive path information...
CVE-2006-2677
CVE-2006-2677 affects SiteScape Forum 7.2 (and possibly earlier). The issue arises from storing the avf.rc configuration file under the web document root with insufficient access controls, which allows remote attackers to obtain sensitive path information. The publicly available records describe ...