8219 matches found
CVE-2008-3101
Multiple cross-site scripting XSS vulnerabilities in vtiger CRM 5.0.4 allow remote attackers to inject arbitrary web script or HTML via 1 the parenttab parameter in an index action to the Products module, as reachable through index.php; 2 the userpassword parameter in an Authenticate action to th...
CVE-2008-3101
Multiple cross-site scripting XSS vulnerabilities in vtiger CRM 5.0.4 allow remote attackers to inject arbitrary web script or HTML via 1 the parenttab parameter in an index action to the Products module, as reachable through index.php; 2 the userpassword parameter in an Authenticate action to th...
CVE-2008-3876: Undefined Security Weakness
Apple iPhone 2.0.2, in some configurations, allows physically proximate attackers to bypass intended access restrictions, and obtain sensitive information or make arbitrary use of the device, via an Emergency Call tap and a Home double-tap, followed by a tap of any contact's blue arrow...
CVE-2008-3795
Buffer overflow in Ipswitch WSFTP Home client allows remote FTP servers to have an unknown impact via a long "message response."...
CVE-2008-3795
CVE-2008-3795 is a buffer overflow affecting the Ipswitch WS_FTP Home client, triggered by a long message response sent by a remote FTP server. The vulnerability's description indicates an unknown impact but classifies CVSS as high (AV:N/AC:L/Au:N/C:C/I:C/A:C). The core issue is a buffer overflow...
CVE-2008-3795: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in Ipswitch WSFTP Home client allows remote FTP servers to have an unknown impact via a long "message response."...
CVE-2008-3734
Format string vulnerability in Ipswitch WSFTP Home 2007.0.0.2 and WSFTP Professional 2007.1.0.0 allows remote FTP servers to cause a denial of service application crash or possibly execute arbitrary code via format string specifiers in a connection greeting response...
CVE-2008-3734: Use of Externally-Controlled Format String
Format string vulnerability in Ipswitch WSFTP Home 2007.0.0.2 and WSFTP Professional 2007.1.0.0 allows remote FTP servers to cause a denial of service application crash or possibly execute arbitrary code via format string specifiers in a connection greeting response...
Ipswitch WS_FTP HomeProfessional FTP Client - Remote Format String (PoC)
Ipswitch WSFTP HomeProfessional FTP Client - Remote Format String PoC Ipswitch WSFTP Home/WSFTP Professional FTP Client Remote Format String vulnerability Vendor : http://www.ipswitch.com/ Affected Os : Windows Risk : critical This bug is pretty interresting in the way you have to exploit it in a...
Ipswitch WS_FTP Home/Professional 8.0 - WS_FTP Client Format String
source: https://www.securityfocus.com/bid/30720/info Ipswitch WSFTP client is prone to a format-string vulnerability it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. An attacker may exploit this issue to execute arbitrar...
DeeEmm CMS (DMCMS) 0.7.4 Multiple Remote Vulnerabilities
No description provided by source. DeeEmm CMS Sql Injection/Rfi AUTHOR : IRCRASH R3d.W0rm Sina Yazdanmehr Discovered by : IRCRASH R3d.W0rm Sina Yazdanmehr Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr Script Download :...
CVE-2008-3417: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in home/index.asp in fipsCMS light 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the r parameter, a different vector than CVE-2006-6115 and CVE-2007-2561...
PHP Hosting Directory 2.0 - Insecure Cookie Handling
PHP Hosting Directory 2.0 - Insecure Cookie Handling PHP Hosting Directory 2.0 Insecure Cookie Handling Vulnerability Name Of Script : PHP Hosting Directory 2.0 Download From : http://jnshosts.com/download/phphostdirectory.zip Discoverd By :Stack Home : http://v4-team.com --- exploit:...
PHP Hosting Directory 2.0 - Insecure Cookie Handling
PHP Hosting Directory 2.0 Insecure Cookie Handling Vulnerability Name Of Script : PHP Hosting Directory 2.0 Download From : http://jnshosts.com/download/phphostdirectory.zip Discoverd By :Stack Home : http://v4-team.com --- exploit: javascript:document.cookie = "adm=1; path=/"; document.cookie =...
mysql: privilege escalation via DATA/INDEX DIRECTORY directives
MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified 1 DATA DIRECTORY or 2 INDEX DIRECTORY arguments that are within the MySQL home data directory,...
mysql: privilege escalation via DATA/INDEX DIRECTORY directives
MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified 1 DATA DIRECTORY or 2 INDEX DIRECTORY arguments that are within the MySQL home data directory,...
Mambo Component n-gallery Multiple SQL Injection Vulnerabilities
No description provided by source. Mambo Component n-gallery SQL Injection Author : AlbaniaN-H Site : http://www.khg-crew.ws  ...
carscripts-sql.txt
Carscripts Classifieds Sql INjection By Stack Home v4-team.com + : you can see the Result in 'Title' + : Open the source page to see the result poc : http://site.co.il/index.php?cat=-1//UNION//SELECT//concatchar58,user,version,database,2,3/ live demo...
CVE-2008-2779: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in GlobalSCAPE CuteFTP Home 8.2.0 Build 02.26.2008.4 and CuteFTP Pro 8.2.0 Build 04.01.2008.1 allows remote FTP servers to create or overwrite arbitrary files via ..\ dot dot backslash sequences in responses to LIST commands, a related issue to CVE-2002-1345. NOT...
Comparison Engine Power 1.0 Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl useLWP::UserAgent; useGetopt::Long; if!$ARGV1 print"\n"; print"VIVAISLAMEVIVAISLAME\n"; print"VIVAISLAMEVIVAISLAME\n"; print"\n"; print"ComparisonEnginePower1.0BlindSQLInjectionExploit\n"; print"&...