CVE-2008-4624: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in init.php in Fast Click SQL Lite 1.1.7, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the CFGCDIR parameter...

fastclick-rfi.txt

=========================================================================================== o Fast CLick SQL Lite 1.1.7 Remote File Inclusion Vulnerability Software : Fast CLick SQL Lite version 1.1.7 Vendor : http://www.ftrsoft.com/ Download : http://www.ftrsoft.com/downloads.html Author : NoGe...

Fast Click SQL 1.1.7 Lite (init.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================== Fast Click SQL 1.1.7 Lite init.php Remote File Inclusion Vulnerability ========================================================================...

Fast Click SQL 1.1.7 Lite (init.php) Remote File Inclusion Vulnerability

No description provided by source. =========================================================================================== o Fast CLick SQL Lite 1.1.7 Remote File Inclusion Vulnerability Software : Fast CLick SQL Lite version 1.1.7 Vendor : http://www.ftrsoft.com/ Download :...

Fast Click SQL 1.1.7 Lite - init.php Remote File Inclusion

Fast Click SQL 1.1.7 Lite - init.php Remote File Inclusion =========================================================================================== o Fast CLick SQL Lite 1.1.7 Remote File Inclusion Vulnerability Software : Fast CLick SQL Lite version 1.1.7 Vendor : http://www.ftrsoft.com/...

CVE-2008-4524

SQL injection vulnerability in the "Check User" feature includes/checkuser.php in AdaptCMS Lite and AdaptCMS Pro 1.3 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-4524

CVE-2008-4524 affects AdaptCMS Lite and AdaptCMS Pro 1.3, with a SQL injection in the Check User feature (includes/check_user.php) that allows remote attackers to execute arbitrary SQL commands via the user_name parameter. The vulnerability is documented across multiple sources (NVD entry and sub...

CVE-2008-4524

SQL injection vulnerability in the "Check User" feature includes/checkuser.php in AdaptCMS Lite and AdaptCMS Pro 1.3 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-4524: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the "Check User" feature includes/checkuser.php in AdaptCMS Lite and AdaptCMS Pro 1.3 allows remote attackers to execute arbitrary SQL commands via the username parameter...

Galerie 3.2 (pic) WBB Lite Addon Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ Galerie 3.2 pic WBB Lite Addon Blind SQL Injection Exploit ============================================================ !/usr/bin/perl Galerie 3.2 galerie.php Remote "Blind" SQL...

Galerie 3.2 (pic) WBB Lite Addon Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl Galerie 3.2 galerie.php Remote "Blind" SQL Injection found by: J0hn.X3r exploit written by: J0hn.X3r and electron1x Date: 05.10.2008 Dork: "Galerie 3.2 © 2004 by progressive" Contact: J0hn.X3r + ICQ: 573813 + Mail: J0hn.X3ratgmail.com electron1x ...

Galerie 3.2 - 'pic' WBB Lite Addon Blind SQL Injection

!/usr/bin/perl Galerie 3.2 galerie.php Remote "Blind" SQL Injection found by: J0hn.X3r exploit written by: J0hn.X3r and electron1x Date: 05.10.2008 Dork: "Galerie 3.2 © 2004 by progressive" Contact: J0hn.X3r + ICQ: 573813 + Mail: J0hn.X3ratgmail.com electron1x + Mail: electron1x at mail dot ru...

adaptcms-blindsql.txt

!/usr/bin/perl ----------------------------------------------------- AdaptCMS Lite post$host.'/includes/checkuser.php', username = $param ; if$post-issuccess return 38 unless $post-content = /yes/i; my @chars = 48..57, 97..102; for0..32 foreach my $set@chars $send = "' or asciisubstringselect...

AdaptCMS Lite <= 1.3 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================ AdaptCMS Lite post$host.'/includes/checkuser.php', username = $param ; if$post-issuccess return 38 unless $post-content = /yes/i; my @chars = 48..57, 97..102; for0..32 foreach my $set@chars...

AdaptCMS Lite 1.3 - Blind SQL Injection

AdaptCMS Lite 1.3 - Blind SQL Injection !/usr/bin/perl ----------------------------------------------------- AdaptCMS Lite post$host.'/includes/checkuser.php', username = $param ; if$post-issuccess return 38 unless $post-content = /yes/i; my @chars = 48..57, 97..102; for0..32 foreach my $set@char...

AdaptCMS Lite 1.3 - Blind SQL Injection

!/usr/bin/perl ----------------------------------------------------- AdaptCMS Lite post$host.'/includes/checkuser.php', username = $param ; if$post-issuccess return 38 unless $post-content = /yes/i; my @chars = 48..57, 97..102; for0..32 foreach my $set@chars $send = "' or asciisubstringselect...

K-Lite Mega Codec Pack 'vsfilter.dll'拒绝服务漏洞

BUGTRAQ ID: 31400 CNCAN ID：CNCAN-2008092605 K-Lite Mega Codec Pack是一款影音格式的解码器。 K-Lite Mega Codec Pack 'vsfilter.dll'库处理媒体文件存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建恶意的flv文件，诱使用户访问可触发。 K-Lite Mega Codec Pack 3.5.7.0 目前没有解决方案提供： http://www.codecguide.com/downloadmega.htm 可参考如下测试程序：...

K-Lite Mega Codec Pack 3.5.7.0 Local Windows Explorer DoS PoC

No description provided by source. K-Lite Mega Codec Pack based Local Windows Explorer DOS PoC. Version:3.5.7.0 "vsfilter.dll"Version 1.0.1.4 that comes bundled with the above Codec Pack crashes when we try to use,select or even highlight the attached "Test7.flv" file in Windows Explorer,causing...

K-Lite Mega Codec Pack 3.5.7.0 - Local Windows Explorer Denial of Service (PoC)

K-Lite Mega Codec Pack 3.5.7.0 - Local Windows Explorer Denial of Service PoC K-Lite Mega Codec Pack based Local Windows Explorer DOS PoC. Version:3.5.7.0 "vsfilter.dll"Version 1.0.1.4 that comes bundled with the above Codec Pack crashes when we try to use,select or even highlight the attached...

K-Lite Mega Codec Pack 3.5.7.0 - Local Windows Explorer Denial of Service (PoC)

K-Lite Mega Codec Pack based Local Windows Explorer DOS PoC. Version:3.5.7.0 "vsfilter.dll"Version 1.0.1.4 that comes bundled with the above Codec Pack crashes when we try to use,select or even highlight the attached "Test7.flv" file in Windows Explorer,causing Explorer to Crash. Greetz fly out t...