Code injection

The SIP Enablement Services SES Server in Avaya SIP Enablement Services 5.0, and Communication Manager CM 5.0 on the S8300C with SES enabled, writes account names and passwords to the 1 alarm and 2 system logs during failed login attempts, which allows local users to obtain login credentials by...

munkybliki-lfi.txt

!user/bin/python -- coding: cp1256 -- munky-bliki Lfi AUTHOR : IRCRASH R3d.W0rm Sina Yazdanmehr Discovered by : IRCRASH R3d.W0rm Sina Yazdanmehr Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr Script Download :...

CVE-2008-3704

creationtimestamp| type| source ---|---|--- 2008-08-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6244 2008-08-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6317 2010-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16507 2018-05-29...

CVE-2008-3596

Cross-site scripting XSS vulnerability in Harmoni before 1.4.7 allows remote attackers to inject arbitrary web script or HTML via the Username field, which is inserted into logs that could be rendered when viewed by an administrator...

Cross site scripting

Cross-site scripting XSS vulnerability in Harmoni before 1.4.7 allows remote attackers to inject arbitrary web script or HTML via the Username field, which is inserted into logs that could be rendered when viewed by an administrator...

CVE-2008-3596

Cross-site scripting XSS vulnerability in Harmoni before 1.4.7 allows remote attackers to inject arbitrary web script or HTML via the Username field, which is inserted into logs that could be rendered when viewed by an administrator...

fuzzylime-lfi.txt

!/usr/bin/perl ---------------------------------------------------------- Fuzzylime CMS 3.01 Multiple LFI / RCE author : Cod3rZ website : http://cod3rz.helloweb.eu ---------------------------------------------------------- http://site/blog.php?file=../file\0...

vbulletin-adminxss.txt

====================================================================== Advisory : XSS in admin logs Release Date : July 06th 2008 Application : vBulletin Version : vBulletin 3.7.2 and lower, vBulletin 3.6.10 PL2 and lower Platform : PHP Vendor URL : http://www.vbulletin.com/ Authors : Jessica Hop...

Fuzzylime CMS 3.01a - file Local File Inclusion

Fuzzylime CMS 3.01a - file Local File Inclusion !/usr/bin/perl ---------------------------------------------------------- Fuzzylime CMS 3.01 Multiple LFI / RCE author : Cod3rZ website : http://cod3rz.helloweb.eu ----------------------------------------------------------...

tomcat examples XSS

Multiple cross-site scripting XSS vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 time parameter to cal2.jsp and 2 any invalid parameter, which causes an XSS when the log file is viewed by the Web-Access-Log viewer...

mod_proxy hook format string

Format string vulnerability in the modproxy hook functions function in sslenginelog.c in modssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssllog function...

CVE-2008-2905

creationtimestamp| type| source ---|---|--- 2008-06-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5808 2008-06-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9906 2010-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16912 2018-05-29...

CA ARCserve Backup caloggerd opcode 79 buffer overflow

Added: 05/30/2008 CVE: CVE-2008-2242 BID: 29283 OSVDB: 45368 Background CA ARCserve Backup formerly BrightStor ARCserve Backup is a backup and recovery solution. The logger daemon caloggerd is an RPC service which handles event logs. Problem A buffer overflow vulnerability in caloggerd allows...

w3ml cross-site scripting vulnerability

Overview w3ml, a program used to display mailing list logs on the web site, contains a cross-site scripting vulnerability. Impact An arbitrary script could be executed on the user's web browser which may allow an attacker to steal cookie information. Solution None...

EntertainmentScript 1.4.0 - 'page.php' Local File Inclusion

!/usr/bin/perl EntertainmentScript V1.4.0 page.php page Local File Inclusion Exploit Founded & Exploited by : Stack-Terrorist v40 Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Jadi & iuoisn & All muslims HaCkeRs : P0c : http://localhost.il/page.php?page=../../../../../etc/passwd%00...

Novell eDirectory unauthenticated access to SOAP interface

= Affected software : Editor : Novell Name : eDirectory Version : 8.7.x see note and 8.8.2 Services : TCP/8028 HTTP and TCP/8030 HTTPS = External references : http://www.novell.com/support/viewContent.do?externalId=3866911&sliceId=1 https://vulners.com/cve/CVE-2008-0926 = Technical details : A SO...

pbcs-multi.txt

Project Based Calendaring System PBCS Version 0.7.1 Multiple Vulnerabilities Script: http://www.pbcs.org/pbcsdownload.php Poc : Hi str0ke Thanx To Posted but I Want Add Some Vulns In This Script 1- remote file upload http://localhost/pbcs-0.7.1-1/src/yopyupload.php after upload you can get you fi...

PT-2008-3453 · Util Linux Ng +1 · Util-Linux-Ng +1

Name of the Vulnerable Software and Affected Versions: util-linux-ng versions 2.14 and earlier Description: The issue allows remote attackers to modify log events, making it easier to hide activities. This is achieved by injecting arguments into the login process, demonstrated by appending an...

CVE-2008-1155

Cisco Network Admission Control NAC Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server CAS and Clean Access Manager CAM by sniffing error logs...

Code injection

Cisco Network Admission Control NAC Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attackers to obtain the shared secret for the Clean Access Server CAS and Clean Access Manager CAM by sniffing error logs...