3460 matches found
PHP-Nuke 7.x - 'Block-Old_Articles.php' SQL Injection
source: https://www.securityfocus.com/bid/22037/info PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data...
kronolith -- arbitrary local file inclusion vulnerability
iDefense Labs reports: Remote exploitation of a design error in Horde's Kronolith could allow an authenticated web mail user to execute arbitrary PHP code under the security context of the running web server. The vulnerability specifically exists due to a design error in the way it includes certa...
ELOG Web Logbook Remote Denial of Service Vulnerability
ELOG Web Logbook Remote Denial of Service Vulnerability OS2A ID: OS2A1008 Status: 10/31/2006 Issue Discovered 11/08/2006 Reported to the Vendor 11/08/2006 Fixed by Vendor 11/10/2006 Advisory Released Class: Denial of Service Severity: Medium Overview: --------- The Electronic Logbook ELOG is part...
CVE-2006-5850
Stack-based buffer overflow in Essentia Web Server 2.15 for Windows allows remote attackers to execute arbitrary code via a long URI, as demonstrated by a GET or HEAD request. NOTE: some of these details are obtained from third party information...
CVE-2006-5850
Stack-based buffer overflow in Essentia Web Server 2.15 for Windows allows remote attackers to execute arbitrary code via a long URI, as demonstrated by a GET or HEAD request. NOTE: some of these details are obtained from third party information...
Essentia Web Server 2.15 (GET Request) Remote DoS Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; use Getopt::Std; getopts'h:', %args; if defined$args'h' $host = $args'h'; print STDERR "\n-= Essentia Web Server 2.15 Remote DOS Exploit=-\n"; print STDERR "-= Discovered By CorryL [email protected] =-\n"; print STDERR "-= Coded b...
Essentia Web Server buffer overflow
Buffer overflow on oversized GET request...
CVE-2006-5705
Multiple directory traversal vulnerabilities in plugins/wp-db-backup.php in WordPress before 2.0.5 allow remote authenticated users to read or overwrite arbitrary files via directory traversal sequences in the 1 backup and 2 fragment parameters in a GET request...
CVE-2006-5705
Multiple directory traversal vulnerabilities in plugins/wp-db-backup.php in WordPress before 2.0.5 allow remote authenticated users to read or overwrite arbitrary files via directory traversal sequences in the 1 backup and 2 fragment parameters in a GET request...
CVE-2006-5705
Multiple directory traversal vulnerabilities in plugins/wp-db-backup.php in WordPress before 2.0.5 allow remote authenticated users to read or overwrite arbitrary files via directory traversal sequences in the 1 backup and 2 fragment parameters in a GET request...
Essentia Web Server 2.15 (GET Request) Remote DoS Exploit
Exploit for unknown platform in category dos / poc ========================================================= Essentia Web Server 2.15 GET Request Remote DoS Exploit ========================================================= !/usr/bin/perl use IO::Socket; use Getopt::Std; getopts'h:', %args; if...
CVE-2006-5596
Directory traversal vulnerability in the SSL server in AEP Smartgate 4.3b allows remote attackers to download arbitrary files via ..\ dot dot backslash sequences in an HTTP GET request...
Utility for generating HTTP/1.x requests for shellcodes
Utility for generating HTTP/1.x requests for shellcodes. Shellcode exploit for generator platform / genhttpreq.c, utility for generating HTTP/1.x requests for shellcodes SIZES: HTTP/1.0 header request size - 18 bytes+ HTTP/1.1 header request size - 26 bytes+ NOTE: The length of the selected HTTP...
CVE-2006-5210
Directory traversal vulnerability in IronWebMail before 6.1.1 HotFix-17 allows remote attackers to read arbitrary files via a GET request to the IMFILE identifier with double-url-encoded "../" sequences "%252e%252e/"...
CVE-2006-5112
CVE-2006-5112 reflects a buffer overflow in the NaviCOPA Web Server 2.01 caused by handling of long HTTP GET requests, enabling remote code execution. Connected sources confirm a public proof-of-concept/exploit vector: a Metasploit module named navicopa_get_overflow (and related exploit reference...
CVE-2006-5112
Buffer overflow in InterVations NaviCOPA Web Server 2.01 allows remote attackers to execute arbitrary code via a long HTTP GET request...
NaviCOPA Web Server buffer overflow
Buffer overflow on oversized GET request...
Multithreaded TFTP <= 1.1 (Long Get Request) Denial of Service Exploit
Exploit for unknown platform in category dos / poc ====================================================================== Multithreaded TFTP And any-one else i forgot ^ ^. \DEBUG INF0// First chance exceptions are reported before any exception handling. This exception may be expected and handled...
Multi-Threaded TFTP 1.1 - GET Denial of Service
Multi-Threaded TFTP 1.1 - GET Denial of Service !/usr/bin/python Multithreaded TFTP 1.1 Server d0s exploit by n00b the following is affected causing a denial of service Due to an overly long GET request to the ftp server Tested on winx xp sp1,sp2 eng. Vendor dont know but s00n will :p n00b is...
Multithreaded TFTP <= 1.1 (Long Get Request) Denial of Service Exploit
No description provided by source. !/usr/bin/python Multithreaded TFTP 1.1 Server d0s exploit by n00b the following is affected causing a denial of service Due to an overly long GET request to the ftp server Tested on winx xp sp1,sp2 eng. Vendor dont know but s00n will :p n00b is credited for...