859 matches found
EGS Enterprise Groupware System 1.0 rc4 remote commands execution & FlySpray 0.9.7 remote commands execution
--------EGS Enterprise Groupware System 1.0 rc4 possibly prior versions------- remote code execution -------------------------------------------------------------------------------- software: site: http://egs.sourceforge.net/ description: "EGS is an Open Source business system released under the...
FlySpray 0.9.7 - 'install-0.9.7.php' Remote Command Execution
works against PHP5 usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "Therefore the good fighter will be terrible in his onset, and prompt in his decision" / short explaination: found this bug in FlySpray, exploiting EGS Enterprise Groupware System 1.0 rc4, see this link for...
EnterpriseGS <= 1.0 rc4 Remote Commands Execution Exploit
Exploit for unknown platform in category web applications ========================================================= EnterpriseGS works against PHP5 usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "Thus the energy developed by good fighting men is as the momentum of a round...
EnterpriseGS <= 1.0 rc4 Remote Commands Execution Exploit
No description provided by source. ?php ---egs10rc4php5inclxpl.php 17.57 13/02/2006 EGS Enterprise Groupware System =1.0 rc4 remote commands execution exploit coded by rgod site: http://retrogod.altervista.org - works against PHP5 usage: launch from Apache, fill in requested fields, then go!...
CommuniGate Pro Server < 5.0.7 LDAP BER Decoding Multiple Vulnerabilities
The remote host appears to be running CommuniGate Pro, a commercial email and groupware application. The version of CommuniGate Pro installed on the remote host includes an LDAP server that reportedly fails to handle requests with negative BER lengths. A user can leverage this issue to crash not...
CVE-2005-3640
FTGate4 IMAP server (FTGate4, version 4.1) is affected by a remote buffer overflow in the IMAP handling logic (boundary errors in various IMAP commands, demonstrated with EXAMINE). The underlying cause is improper handling of long command arguments, enabling a remote attacker to potentially execu...
CVE-2005-3640
Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate FTGate4 4.1 allow remote attackers to execute arbitrary code via long arguments to various IMAP commands, as demonstrated with the EXAMINE command...
FTGate4 Groupware Mail Server 4.1 (imapd) Remote Buffer Overflow PoC
No description provided by source. !/usr/bin/perl use IO::Socket; print "\nFTGate Imapd BufferOverrun\nLuca Ercoli [email protected]\n"; print "http://www.lucaercoli.it\n\n\n"; $host = "localhost"; $remote = IO::Socket::INET-new Proto = "tcp", PeerAddr = $host, PeerPort = "143", ; unless $remote...
FTGate4 Groupware Mail Server 4.1 - imapd Remote Buffer Overflow (PoC)
!/usr/bin/perl use IO::Socket; print "\nFTGate Imapd BufferOverrun\nLuca Ercoli [email protected]\n"; print "http://www.lucaercoli.it\n\n\n"; $host = "localhost"; $remote = IO::Socket::INET-new Proto = "tcp", PeerAddr = $host, PeerPort = "143", ; unless $remote die "Can't connect to $host" print "...
FTGate4 Groupware Mail Server 4.1 (imapd) Remote Buffer Overflow PoC
Exploit for unknown platform in category dos / poc ==================================================================== FTGate4 Groupware Mail Server 4.1 imapd Remote Buffer Overflow PoC ==================================================================== !/usr/bin/perl use IO::Socket; print...
FTGate4 Groupware Mail Server 4.1 - imapd Remote Buffer Overflow (PoC)
FTGate4 Groupware Mail Server 4.1 - imapd Remote Buffer Overflow PoC !/usr/bin/perl use IO::Socket; print "\nFTGate Imapd BufferOverrun\nLuca Ercoli [email protected]\n"; print "http://www.lucaercoli.it\n\n\n"; $host = "localhost"; $remote = IO::Socket::INET-new Proto = "tcp", PeerAddr = $host,...
PhpGroupWare arbitrary command execution
The remote host seems to be running PhpGroupWare, is a multi-user groupware suite written in PHP. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Horde Detection (HTTP)
HTTP based detection of Horde. SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.15604";...
Debian DSA-798-1 : phpgroupware - several vulnerabilities
Several vulnerabilities have been discovered in phpgroupware, a web-based groupware system written in PHP. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-2498 Stefan Esser discovered another vulnerability in the XML-RPC libraries that allows...
Multiple Evultion e-mail agent and groupware client format string vulnerabilities
Format string bugs on vCard format parsing, LDAP server reply parsing, remote server tasks displaying...
DSA-746-1 phpgroupware - remote command execution
Bulletin has no description...
CVE-2005-2164
CVE-2005-2164 describes a SQL injection vulnerability in Covide Groupware-CRM allowing remote attackers to execute arbitrary SQL via unknown vectors. NVD reports a base score of 7.5 (HIGH) with network attack vector, low complexity, no authentication, and partial impacts on confidentiality, integ...
CVE-2005-2164
SQL injection vulnerability in Covide Groupware-CRM allows remote attackers to execute arbitrary SQL commands via unknown attack vectors...
CVE-2005-2164
SQL injection vulnerability in Covide Groupware-CRM allows remote attackers to execute arbitrary SQL commands via unknown attack vectors...
CVE-2004-1927
Directory traversal vulnerability in the map feature tiki-map.phtml in Tiki CMS/Groupware TikiWiki 1.8.1 and earlier allows remote attackers to determine the existence of arbitrary files via .. dot dot sequences in the mapfile parameter...