1825 matches found
DMXReady Faqs Manager 1.1 - Remote Contents Change
Title : DMXReady Faqs Manager http://target/path//applications/FaqsManager/incfaqsmanager.asp Edit - http://target/path//admin/FaqsManager/addcategory.asp : milw0rm.com 2009-01-14...
DMXReady Links Manager 1.1 - Remote Contents Change
Title : DMXReady Links Manager http://target/path//applications/LinksManager/inclinksmanager.asp Edit - http://target/path//admin/LinksManager/addcategory.asp : milw0rm.com 2009-01-14...
DMXReady Account List Manager <= 1.1 Contents Change Vulnerability
Exploit for unknown platform in category web applications ================================================================== DMXReady Account List Manager http://target/path//applications/AccountListManager/incaccountlistmanager.asp Edit -...
DMXReady Account List Manager 1.1 - Contents Change
DMXReady Account List Manager 1.1 - Contents Change Title : DMXReady Account List Manager http://target/path//applications/AccountListManager/incaccountlistmanager.asp Edit - http://target/path//admin/AccountListManager/addcategory.asp : milw0rm.com 2009-01-13...
DMXReady Account List Manager 1.1 - Contents Change
Title : DMXReady Account List Manager http://target/path//applications/AccountListManager/incaccountlistmanager.asp Edit - http://target/path//admin/AccountListManager/addcategory.asp : milw0rm.com 2009-01-13...
Max's Guestbook (XSS) Remote Vulnerability
Discovered by: GTADarkDude Disconvered on: 10 December 2008 Name: Max's Guestbook Version: 1.0 URL: http://www.phpf1.com/product/php-guestbook-script.html URL2: http://www.hotscripts.com/Detailed/78571.html Google Search: intitle:"Max's Guestbook" powered-by-PHP-F1 File maxGuestbook.class...
serv-u7 local exploit (php)-bug warning-the black bar safety net
by emptiness prodigal heart http://www.inbreak.net Note: since the author is lazy, does not provide log cleanup feature, it will leave a log: A, The su7 is the right there are several way? There are two forms to get rid of su7 in. 1, login to the Administrator Console page ==get the OrganizationI...
Buffer overflow
Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execute arbitrary code via a crafted insert statement...
CVE-2008-0106: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execute arbitrary code via a crafted insert statement...
CVE-2008-2538: Concurrent Execution using Shared Resource with Improper Synchronization
Unspecified vulnerability in crontab on Sun Solaris 8 through 10, and OpenSolaris before snv93, allows local users to insert cron jobs into the crontab files of arbitrary users via unspecified vectors...
RunCMS 1.6.1 - msg_image SQL Injection
RunCMS 1.6.1 - msgimage SQL Injection !/usr/bin/python """ ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / /...
XSS vulnerabilities in insert image and link actions
In 2.7.x, the following URL's are vulnerable: - /users/insertlink.action - /users/insertlink-page-attachmentstab.action - /users/insertlink-page-uploadfile.action - /users/insertlink-draft-attachmentstab.action - /users/insertlink-draft-uploadfile.action - /users/doinsertimageinpage.action -...
XSS vulnerabilities in insert image and link actions
In 2.7.x, the following URL's are vulnerable: - /users/insertlink.action - /users/insertlink-page-attachmentstab.action - /users/insertlink-page-uploadfile.action - /users/insertlink-draft-attachmentstab.action - /users/insertlink-draft-uploadfile.action - /users/doinsertimageinpage.action -...
Debian Security Advisory DSA 707-1 (mysql)
The remote host is missing an update to mysql announced via advisory DSA 707-1. OpenVAS Vulnerability Test $Id: deb7071.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 707-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
SmallNuke 2.0.4 - Pass Recovery SQL Injection
!/usr/bin/perl use Tk; use Tk::BrowseEntry; use Tk::DialogBox; use LWP::UserAgent; $mw = new MainWindowtitle = "UnderWHAT?!" ; $mw-geometry '420x365' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 8',-foreground='red'-pack; $mw-Label-text = 'Smallnuke cms 'Tahoma 7...
SmallNuke 2.0.4 - Pass Recovery SQL Injection
SmallNuke 2.0.4 - Pass Recovery SQL Injection !/usr/bin/perl use Tk; use Tk::BrowseEntry; use Tk::DialogBox; use LWP::UserAgent; $mw = new MainWindowtitle = "UnderWHAT?!" ; $mw-geometry '420x365' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 8',-foreground='red'-pack; $mw-Label-text =...
CVE-2007-4211
The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a 1 COPY or 2 APPEND command...
DEBIAN-CVE-2007-4211
The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a 1 COPY or 2 APPEND command...
Default credentials
The Jedox Palo 1.5 client transmits the password in cleartext, which might allow remote attackers to obtain the password by sniffing the network, as demonstrated by starting Excel with the Palo plugin, opening a cube, and performing an Insert View...
CVE-2007-3581
The Jedox Palo 1.5 client transmits the password in cleartext, which might allow remote attackers to obtain the password by sniffing the network, as demonstrated by starting Excel with the Palo plugin, opening a cube, and performing an Insert View...