901 matches found
doITlive CMS <= 2.50 (SQL Injection/XSS) Multiple Vulnerabilities
Exploit for unknown platform in category web applications ================================================================= doITlive CMS = 2.50 SQL Injection/XSS Multiple Vulnerabilities ================================================================= AmnPardaz Security Research Team Title:...
[SECURITY] Fedora 8 Update: kazehakase-0.5.4-2.fc8.1
Kazehakase is a Web browser which aims to provide a user interface that is truly user-friendly & fully customizable. This package uses Gecko for HTML rendering engine. If you want to use WebKit for HTML rendering engine, install "kazehakase-webkit" rpm instead...
[SECURITY] Fedora 8 Update: kazehakase-0.5.4-2.fc8
Kazehakase is a Web browser which aims to provide a user interface that is truly user-friendly & fully customizable. This package uses Gecko for HTML rendering engine. If you want to use WebKit for HTML rendering engine, install "kazehakase-webkit" rpm instead...
DivX Player 6.6.0 SRT File SEH Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ====================================================== DivX Player 6.6.0 SRT File SEH Buffer Overflow Exploit ====================================================== !/usr/bin/python DivX 6.6 SRT SEH overwrite PoC Tested on XP SP2 Coded by Ma...
[SECURITY] Fedora 8 Update: kazehakase-0.5.2-1.fc8.2
Kazehakase is a Web browser which aims to provide a user interface that is truly user-friendly & fully customizable...
WordPress $_SERVER变量跨站脚本漏洞
BUGTRAQ ID: 26885 WordPress是一款免费的论坛Blog系统。 WordPress处理全局变量时存在漏洞，远程攻击者可能利用此漏洞控制导致跨站脚本执行攻击。 WordPress信任了$SERVER'REQUESTURI'全局变量，因此远程攻击者控制了$SERVER'REQUESTURI'就可以执行跨站脚本攻击。以下是/wp-includes/query.php文件中第34行的有漏洞函数： function isadmin global $wpquery; return $wpquery-isadmin || stripos$SERVER'REQUESTURI',...
[SECURITY] Fedora 8 Update: kazehakase-0.5.0-1.fc8.2
Kazehakase is a Web browser which aims to provide a user interface that is truly user-friendly & fully customizable...
[SECURITY] Fedora 7 Update: kazehakase-0.5.0-1.fc7.2
Kazehakase is a Web browser which aims to provide a user interface that is truly user-friendly & fully customizable...
[SECURITY] Fedora 7 Update: sylpheed-2.3.1-5
This program is an X based fast email client which has features like: o user-friendly and intuitive interface o integrated NetNews client partially implemented o ability of keyboard-only operation o Mew/Wanderlust-like key bind o multipart MIME o unlimited multiple account handling o message...
CVE-2007-2569
Multiple PHP remote file inclusion vulnerabilities in Friendly 1.0d1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the friendlypath parameter to 1 core/data/yaml.inc.php, or load.php in 2 core/data/, 3 core/display/, or 4 core/support/...
CVE-2007-2569
CVE-2007-2569 describes multiple PHP remote file inclusion vulnerabilities in Friendly 1.0d1 and earlier. The flaw allows an attacker to trigger execution of arbitrary PHP code by supplying a crafted URL in the friendly_path parameter to one of four vulnerable scripts: core/data/yaml.inc.php, _lo...
CVE-2007-2569: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in Friendly 1.0d1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the friendlypath parameter to 1 core/data/yaml.inc.php, or load.php in 2 core/data/, 3 core/display/, or 4 core/support/...
Friendly <= 1.0d1 (friendly_path) Remote File Inclusion Vulnerabilities
No description provided by source. Friendly 1.0d1 friendlypathRemote File Inclusion Vulnerabilities D.Script: http://friendlyphp.org/downloads/ Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/friendly/core/data/load.php?friendlypath=shell...
friendly-rfi.txt
Friendly 1.0d1 friendlypathRemote File Inclusion Vulnerabilities D.Script: http://friendlyphp.org/downloads/ Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/friendly/core/data/load.php?friendlypath=shell Exploit:Path/friendly/core/data/yaml.inc.php?friendlypath=shell...
Friendly 1.0d1 - 'friendly_path' Remote File Inclusion
Friendly 1.0d1 friendlypathRemote File Inclusion Vulnerabilities D.Script: http://friendlyphp.org/downloads/ Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/friendly/core/data/load.php?friendlypath=shell Exploit:Path/friendly/core/data/yaml.inc.php?friendlypath=shell...
Friendly 1.0d1 - friendly_path Remote File Inclusion
Friendly 1.0d1 - friendlypath Remote File Inclusion Friendly 1.0d1 friendlypathRemote File Inclusion Vulnerabilities D.Script: http://friendlyphp.org/downloads/ Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/friendly/core/data/load.php?friendlypath=shell...
Friendly <= 1.0d1 (friendly_path) Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ======================================================================= Friendly = 1.0d1 friendlypath Remote File Inclusion Vulnerabilities ======================================================================= Friendly 1.0d1...
PMB Services <= 3.0.13 Multiple Remote File Inclusion Vulnerability
No description provided by source. \ /\ / | \ | / // / | | \ \ Y / | / / \ /\| /\ / / / / / .OR.ID ECHOADV68$2007 ----------------------------------------------------------------------------------------- ECHOADV68$2007 PMB Services = 3.0.13 Multiple Remote File Inclusion Vulnerability...
Azucar CMS <= 1.3 (admin/index_sitios.php) File Inclusion Vulnerability
Exploit for unknown platform in category web applications ======================================================================= Azucar CMS +------------------------------------------------------------------------------------------- + Details: + Azucar CMS admin/indexsitios.php uses the include...
CVE-2006-5665
PHP remote file inclusion vulnerability in admin/modulesdata.php in the phpBB module Spider Friendly 1.3.10 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...