alstraforum-sql.txt

--==+================================================================================+==-- --==+ Forum Pay Per Post SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...

Alstrasoft Forum Pay Per Post Exchange 2.0 - SQL Injection

--==+================================================================================+==-- --==+ Forum Pay Per Post SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...

DEBIAN-CVE-2007-6429

Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to execute arbitrary code via 1 a GetVisualInfo request containing a 32-bit value that is improperly used to calculate an amount of memory for allocation by the EVI extension, or 2 a request containing valu...

xfree86: integer overflow in EVI extension

Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to execute arbitrary code via 1 a GetVisualInfo request containing a 32-bit value that is improperly used to calculate an amount of memory for allocation by the EVI extension, or 2 a request containing valu...

Binn SBuilder (nid) Remote Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ Binn SBuilder nid Remote Blind SQL Injection Vulnerability ============================================================ --==+=================== Spanish Hackers Team...

CVE-2008-0195

WordPress 2.0.11 and earlier allows remote attackers to obtain sensitive information via an empty value of the page parameter to certain PHP scripts under wp-admin/, which reveals the path in various error messages...

GNU libcdio库cd-info/iso-info文件栈溢出漏洞

BUGTRAQ ID: 27131 CVECAN ID: CVE-2007-6613 GNU压缩磁盘输入和控制库（libcdio）是用于访问CD-ROM和CD镜像的函数库。 libcdio库的cd-info.c和iso-info.c文件中的printiso9660recurse函数中存在栈溢出漏洞，本地攻击者可能利用此漏洞提升自己的权限。 如果用户受骗使用该库加载了包含有超长joilet文件名的磁盘或镜像的话，就可能导致拒绝服务（core dump）或执行任意指令。以下是src/iso-info.c的printiso9660recurse函数中的漏洞代码： CDIOLISTFOREACH...

JVN#08237857 Multiple JustSystems products vulnerable to buffer overflow

Multiple JustSystems products contain a vulnerability which allows a remote attacker to cause buffer overflow when a user opens or views a specially crafted .jtd file. Impact If a user opens a specially crafted .jtd file or views a web page containing a specially crafted .jtd file, arbitrary code...

MatPo Bilder Galerie 1.1 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================ MatPo Bilder Galerie 1.1 Remote File Inclusion Vulnerability ============================================================ +By CrackersChild+ Script.......: MatPo Bilder Galerie 1...

March Networks DVR 3204 - Logfile Information Disclosure

!/usr/bin/perl March Networks DVR 3204 Logfile Information Disclosure Exploit Since configuration of the IP address, user console and root is carried out over the "administrator console", the vulnerability lies within Watchdog's HTTP server application. Any user can obtain the log files without...

CVE-2007-6512

PHP MySQL Banner Exchange 2.2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database information via a direct request to inc/lib.inc...

HP Info Center ActiveX Control Multiple Remote Vulnerabilities

The remote host contains the HP Quick Launch Button software, part of the HP Info Center software installed by default on many HP and Compaq laptop models. The version of this software on the remote host includes an ActiveX control that reportedly contains three insecure methods - 'GetRegValue',...

[security bulletin] HPSBGN02298 SSRT071502 rev.1 - HP Quick Launch Button (QLB) Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01300486 Version: 1 HPSBGN02298 SSRT071502 rev.1 - HP Quick Launch Button QLB Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access NOTICE: The information in this Securi...

HP Info Center ActiveX code execution

Few unsafe methods are explosed...

Sql injection

Multiple SQL injection vulnerabilities in SineCMS 2.3.4 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to mods/Calendar/index.php, accessed through a Calendar info action to mods.php; the id parameter to admin/modsadm.php in a 2 Guestbook modifica or 3...

PHP Real Estate (fullnews.php id) Remote SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ PHP Real Estate SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog...

PHP Real Estate - fullnews.php?id SQL Injection

PHP Real Estate - fullnews.php?id SQL Injection --==+================================================================================+==-- --==+ PHP Real Estate SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR:...

PHP Real Estate - 'fullnews.php?id' SQL Injection

--==+================================================================================+==-- --==+ PHP Real Estate SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: http://phprealestatescript.c...

PHP Real Estate (fullnews.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== PHP Real Estate fullnews.php id Remote SQL Injection Vulnerability ====================================================================...

HP Info Center HPInfoDLL.DLL ActiveX控件多个任意代码执行漏洞

HP Info Center是一款设计用于HP笔记本用户快速查询信息信息和硬件配置的程序。 HP Info Center包含的HPInfoDLL.dll ActiveX控件存在设计问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 HPInfoDLL.dll的CLSID为： 62DDEB79-15B2-41E3-8834-D3B80493887A 默认包含于"Safe for Scripting" OLE组件，默认路径为C:\Program Files\Hewlett-Packard\HP Info Center，这个控件包含如下不安全方法： VARIANT...