4816 matches found
Ninja Blog 4.8 Remote Information Disclosure Vulnerability
No description provided by source. Vendor: http://ninjadesigns.co.uk Versions: Ninja Blog 4.8 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at http://www.push55.co.uk/index.php?s=ad&id=6 ---- Due to insufficient validation of client-side data, we can alt...
fttss 2.0 - Remote Command Execution
:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl fttss /tmp/dupa; HTTP/1.x 200 OK Date: Sun, 11 Jan 2009 16:24:57 GMT Server: Apache X-Powered-By: PHP/5.2.8-pl1-gentoo...
CMS NetCat 3.12 SQL Injection / XSS / LFI
NetCat &control=...
Open redirect
Multiple open redirect vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via 1 the redirect parameter in a logoff action to modules/auth/index.php or 2 the url parameter to modules/linkmanager/redirect.php...
CVE-2008-5742
Multiple open redirect vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via 1 the redirect parameter in a logoff action to modules/auth/index.php or 2 the url parameter to modules/linkmanager/redirect.php...
CVE-2008-5742
CVE-2008-5742 describes multiple open redirect vulnerabilities in AIST NetCat 3.12 and earlier. The issues allow remote attackers to redirect users to arbitrary sites and conduct phishing via (1) the redirect parameter in a logoff action to modules/auth/index.php and (2) the url parameter to modu...
CMS NetCat <= 3.12 Multiple Remote Vulnerabilities
No description provided by source. NetCat = 3.12 Multiple Remote Vulnerabilities The description: The set vulnerability in CMS NetCat versions 3.12 and more low was revealed. 1. Multiple File Including Vulnerabilities Vulnerability exists for the reason that direct access to some files, around...
CMS NetCat <= 3.12 Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ================================================== CMS NetCat = 3.12 Multiple Remote Vulnerabilities ================================================== NetCat = 3.12 Multiple Remote Vulnerabilities The description: The set vulnerability in...
CMS NetCat 3.12 - Multiple Vulnerabilities
CMS NetCat 3.12 - Multiple Vulnerabilities NetCat &control= etc. 4. HTTP Response Sp...
Многочисленные уязвимости в NetCat CMS <= 3.12
Многочисленные уязвимости в NetCat CMS = 3.12 Описание: Были обнаружены многочисленные уязвимости в CMS NetCat 3.12. Некоторым уязвимостям, перечисленным ниже, также подвержена версия NetCat 3.0. 1. Множественные уязвимости типа "Чтение произвольных файлов" File Including Уязвимость существует по...
CMS NetCat 3.12 - Multiple Vulnerabilities
NetCat &control= etc. 4. HTTP Response Splitting Examples of vulnerable files: /netca...
No-IP.com DDNS client for Unix/Linux buffer overflow
Buffer overflow on HTTP response parsing...
Unfixed HTTP Response Splitting vulnerability at wiki.uiah.fi
Security researcher xylitol, has submitted on 12/07/2008 a HTTP Response Splitting vulnerability affecting wiki.uiah.fi, which at the time of submission ranked 130465 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/11/2008. It is currently...
Unfixed HTTP Response Splitting vulnerability at 666vip.com
Security researcher xylitol, has submitted on 12/07/2008 a HTTP Response Splitting vulnerability affecting 666vip.com, which at the time of submission ranked 9093742 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/11/2008. It is currently...
Unfixed HTTP Response Splitting vulnerability at fantasmas.com
Security researcher xylitol, has submitted on 12/07/2008 a HTTP Response Splitting vulnerability affecting fantasmas.com, which at the time of submission ranked 1456379 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/11/2008. It is currently...
Unfixed HTTP Response Splitting vulnerability at fleetcars.com
Security researcher xylitol, has submitted on 12/07/2008 a HTTP Response Splitting vulnerability affecting fleetcars.com, which at the time of submission ranked 20358218 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/11/2008. It is currentl...
Unfixed HTTP Response Splitting vulnerability at prokits.com
Security researcher xylitol, has submitted on 12/07/2008 a HTTP Response Splitting vulnerability affecting prokits.com, which at the time of submission ranked 10279627 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/11/2008. It is currently...
Unfixed HTTP Response Splitting vulnerability at blackmetal-666.com
Security researcher xylitol, has submitted on 12/07/2008 a HTTP Response Splitting vulnerability affecting blackmetal-666.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/11/2008. It is currently...
Unfixed HTTP Response Splitting vulnerability at h4x0rclan.com
Security researcher xylitol, has submitted on 12/07/2008 a HTTP Response Splitting vulnerability affecting h4x0rclan.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/11/2008. It is currently...
CVE-2008-5189
CRLF injection vulnerability in Ruby on Rails before 2.0.5 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL to the redirectto function...