Qwerty CMS SQLi Vulnerability (Mar 2009) - Active Check

Qwerty CMS is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

A4Desk Event Calendar SQLi Vulnerability (Mar 2009) - Active Check

A4Desk Event Calendar is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Linux/x86 - HTTP/1.x GET, Downloads & execve()

No description provided by source. / linux/x86 - HTTP/1.x GET, Downloads and execve - 111 bytes+ This shellcode allows you to download a ELF executable straight off a standard HTTP server and launch it. It will saved locally it into a filename called 'A' in the current directory. CONFIGURATION Th...

Solaris/SPARC - Bind TCP (2001/TCP) Shell (/bin/sh) Shellcode

Solaris/SPARC - Bind TCP 2001/TCP Shell /bin/sh Shellcode. Shellcode exploit for SolarisSPARC platform !!! $Id: sparc-bind.s,v 1.1 2003/03/01 01:10:51 ghandi Exp $ !!! Bind /bin/sh to TCP port 2001. Calls setuid0 so /bin/sh won't !!! drop privileges. After assembly, change the third byte in the !...

CVE-2008-5645

Directory traversal vulnerability in the media server in Orb Networks Orb before 2.01.0022 allows remote attackers to read arbitrary files via directory traversal sequences in an HTTP GET request...

CVE-2008-5645

Directory traversal vulnerability in the media server in Orb Networks Orb before 2.01.0022 allows remote attackers to read arbitrary files via directory traversal sequences in an HTTP GET request...

Apple iPhone Configuration Web Utility Directory Traversal Vulnerability

This host has Apple iPhone Configuration Web Utility installed and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: gbappleiphoneconfwebutltydirtrvslvuln.nasl 5370 2017-02-20 15:24:26Z cfi $ Apple iPhone Configuration Web Utility Directory Traversal Vulnerability...

CVE-2008-5160: Undefined Security Weakness

Unspecified vulnerability in MyServer 0.8.11 allows remote attackers to cause a denial of service daemon crash via multiple invalid requests with the HTTP GET, DELETE, OPTIONS, and possibly other methods, related to a "204 No Content error."...

dhcart-xss.txt

DHCart Multiple variable XSS and stored XSS Vendor URL:http://www.dhcart.com/ Advisore:http://lostmon.blogspot.com/ 2008/11/dhcart-multiple-variable-xss-and-stored.html vendor notify:YES Exploit:YES Patch:YES DHCart is a PHP based application that provides a simple to use shopping cart for users...

WP Comment Remix 1.4.3 Remote SQL Injection Exploit

No description provided by source. ?php / WP Comment Remix 1.4.3 SQL Injection Proof of Concept By g30rg3x g30rg3xatchxsecuritydotorg Advisory: http://chxsecurity.org/advisories/adv-3-full.txt PoC Mirror: http://chxsecurity.org/proof-of-concepts/wp-comment-remix-143.zip Attention: This is a...

CVE-2008-4541

Heap-based buffer overflow in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.7 allows remote attackers to execute arbitrary code via a crafted HTTP GET request...

Heap overflow

Heap-based buffer overflow in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.7 allows remote attackers to execute arbitrary code via a crafted HTTP GET request...

CVE-2008-4541

Heap-based buffer overflow in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.7 allows remote attackers to execute arbitrary code via a crafted HTTP GET request...

CVE-2008-4541: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.7 allows remote attackers to execute arbitrary code via a crafted HTTP GET request...

Design/Logic Flaw

admin/user/createuser.php in Kolab Groupware Server 1.0.0 places a user password in an HTTP GET request, which allows local administrators, and possibly remote attackers, to obtain cleartext passwords by reading the sslaccesslog file or the referer string...

CVE-2008-4165

admin/user/createuser.php in Kolab Groupware Server 1.0.0 places a user password in an HTTP GET request, which allows local administrators, and possibly remote attackers, to obtain cleartext passwords by reading the sslaccesslog file or the referer string...

CVE-2008-4165

The CVE-2008-4165 entry concerns Kolab Groupware Server 1.0.0. The vulnerable component is admin/user/create_user.php, which places a user password in an HTTP GET request. This allows local administrators and possibly remote attackers to obtain cleartext passwords by inspecting the ssl_access_log...

FreeBSD Ports: apache

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Immunity Canvas: BIGANT22

Name| bigant22 ---|--- CVE| CVE-2008-1914 Exploit Pack| CANVAS Description| Big Ant Messaging Server 2.2 - HTTP GET Stack Overflow Notes| CVE Name: CVE-2008-1914 VENDOR: BigAnt Repeatability: One shot Note: References: http://osvdb.org/show/osvdb/44454 CVE Url: https://vulners.com/cve/CVE-2008-19...

BigAnt IM服务器HTTP GET请求远程栈溢出漏洞

BUGTRAQ ID: 28795 BigAnt Messenger是一款可扩展的企业即时通讯平台。 BigAnt Messenger的AntServer模块（AntServer.exe）中存在栈溢出漏洞，如果向该服务的默认6080/TCP端口发送了超长HTTP GET请求的话，就可以触发这个溢出，导致执行任意指令。 华途软件 BigAnt Messenger 2.2 华途软件 -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.bigant.cn/...