Reflection for Secure IT Multiple Vulnerabilities

Reflections for Secure IT is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Reflection for Secure IT Detection (SSH)

The script tries to detect Reflections for Secure IT and its version. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-6021

CVE-2008-6021 relates to Attachmate Reflection for Secure IT UNIX Client/Server before 7.0 SP1, with multiple vulnerabilities reported. Connected sources enumerate concrete issues tied to this CVE across Unix/Linux servers (e.g., inherited OpenSSL vulnerabilities CVE-2006-2937/2940, OpenSSH CVE-2...

ConPresso CMS 4.07 Session Fixation / XSS

HACKATTACK Advisory 25012009ConPresso CMS 4.07 - Session Fixation, XFS, XSS Details Product: ConPresso CMS 4.07 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.conpresso.de/ Vendor-Status: informed Advisory-Status: not yet published Credits Discovered by: David Vieira-Kurz...

ezPack 4.2b2 XSS / SQL Injection

+++++++++++ EZpack XSS/SQL Vulnerability ++++++++++ ProDuct Name : EZpack Download : http://www2.se-ed.net/fatcoder/?mode=download Author : !-BUGJACK-! Site : www.it-dark.com ++ SQL http://localhost/ezPack/op=prog&mdfd=webboard&act=1&ID=1&qType=ID+SQL + XSS http://localhost/ezPack/?op=prog&mdfd=X...

IT!CMS SQL Injection Authentication Bypass

. . . / | || | / / || | / / \ \ \ \ | |/ \ / |/ \ \ \ | \ \ \ /| | /| | / | | | / // \ / / | | | Y \ \ | || /|| /\ |\ /| || / / / / / / / / / --++++++-- --+++ IT!CMS = vers. SQL Injection Vulnerability +++-- --++++++-- + Discovered by: certaindeath + Exploit: simple SQL injection +...

ezpack 4.2b2 - Cross-Site Scripting / SQL Injection

+++++++++++ EZpack XSS/SQL Vulnerability ++++++++++ ProDuct Name : EZpack Download : http://www2.se-ed.net/fatcoder/?mode=download Author : !-BUGJACK-! Site : www.it-dark.com ++ SQL http://localhost/ezPack/op=prog&mdfd=webboard&act=1&ID=1&qType=ID+SQL + XSS http://localhost/ezPack/?op=prog&mdfd=X...

ezpack 4.2b2 - Cross-Site Scripting SQL Injection

ezpack 4.2b2 - Cross-Site Scripting SQL Injection +++++++++++ EZpack XSS/SQL Vulnerability ++++++++++ ProDuct Name : EZpack Download : http://www2.se-ed.net/fatcoder/?mode=download Author : !-BUGJACK-! Site : www.it-dark.com ++ SQL...

PT-2009-05: CA Internet Security Suite Denial of Service Vulnerability

Positive Technologies Research Team has discovered a denial of service DoS vulnerability in CA Internet Security Suite. The IOCTL handler in vetmonnt.sys does not properly validate buffer data associated with the Irp object, which allows local users to crash the system. Solution Install latest...

PT-2009-11: SlySoft Multiple Products ElbyCDIO.sys Denial of Service

Vulnerability Description Positive Technologies Research Team has discovered multiple memory corruption vulnerabilities in SlySoft products. The IOCTL handler in ElbyCDIO.sys 6.0.2.0 and earlier, shipped with AnyDVD, Virtual CloneDrive, CloneDVD and CloneCD, uses the METHODNEITHER communication...

Lizardware CMS <= 0.6.0 Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Lizardware CMS = 0.6.0 Blind SQL Injection Exploit by athos - stakerathotmaildotit http://sourceforge.net/projects/lizardwarecms/ use strict; use LWP::UserAgent; my $stop,$start,$hash; my $domain = shift; my $ptable = shift; my $userid = shift ...

[HACKATTACK Advisory 20081203]Pro Clan Manager 0.4.2 - Session Fixation

HACKATTACK Advisory 20081203Pro Clan Manager 0.4.2 - Session Fixation Details Product: Pro Clan Manager CMS Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.proclanmanager.com/ Vendor-Status: informed Advisory-Status: not yet published Credits Discovered by: David Vieira-Kurz...

E.Z. Poll v.2 (Auth Bypass) Remote SQL Injection Vulnerability

No description provided by source. E.Z. Poll Auth Bypass Remote SQL Injection Vulnerability author: !-BUGJACK-! Home: www.it-dark.com Download : http://www.aspin.com/func/review?tree=aspin/tutorial/applicat/voteques&id=4769410 Exploit : User: ' or 'a'='a Pass : ' or 'a'='a Login Demo...

infinite-bypass.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com d3hydr8 - rsauron - baltazar - sinner01 - r45c4l - beenu and all darkc0de members Author: p47r1ck Home : www.darkc0de.com Email :...

ezpoll-sql.txt

E.Z. Poll Auth Bypass Remote SQL Injection Vulnerability author: !-BUGJACK-! Home: www.it-dark.com Download : http://www.aspin.com/func/review?tree=aspin/tutorial/applicat/voteques&id=4769410 Exploit : User: ' or 'a'='a Pass : ' or 'a'='a Login Demo http://boramusic.com/home/admin/login.asp Greet...

social-sql.txt

HACKATTACK Advisory 2008-11-20Social Engine 2.7 CRLF Injection + SQL injection Details Product: Social Engine Security-Risk: moderate Remote-Exploit: yes Vendor-URL: http://www.socialengine.net/ Vendor-Status: informed Advisory-Status: published Credits Discovered by: David Vieira-Kurz of...

CVE-2008-5131

Multiple SQL injection vulnerabilities in Develop It Easy News And Article System 1.4 allow remote attackers to execute arbitrary SQL commands via 1 the aid parameter to articledetails.php, and the 2 username and 3 password to the admin panel admin/index.php...

Sql injection

Multiple SQL injection vulnerabilities in Develop It Easy News And Article System 1.4 allow remote attackers to execute arbitrary SQL commands via 1 the aid parameter to articledetails.php, and the 2 username and 3 password to the admin panel admin/index.php...

CVE-2008-5131

Multiple SQL injection vulnerabilities in Develop It Easy News And Article System 1.4 allow remote attackers to execute arbitrary SQL commands via 1 the aid parameter to articledetails.php, and the 2 username and 3 password to the admin panel admin/index.php...

CVE-2008-5131

The CVE refers to CVE-2008-5131 affecting Develop It Easy News And Article System 1.4. Concrete details from the connected NVD entry show multiple SQL injection vulnerabilities where an attacker can craft requests to article_details.php via the aid parameter, or to the admin panel (admin/index.ph...