PT-2011-1654

Name of the Vulnerable Software and Affected Versions PHP versions 5.3.2 through 5.3.3 Description The issue arises from the interaction between the set magic quotes runtime function and the mysqli fetch assoc function when the MySQLi extension is used. This might facilitate context-dependent...

PT-2011-2346 · Tinybb · Tinybb

Name of the Vulnerable Software and Affected Versions: tinyBB version 1.2 Description: The issue allows remote attackers to execute arbitrary SQL commands when magic quotes gpc is disabled. This can be achieved via the id parameter in a profile action to "index.php". Recommendations: For tinyBB...

Lotus CMS Fraise 3.0 - Local File Inclusion / Remote Code Execution

!/usr/bin/python Lotus CMS Fraise v3.0 LFI - Remote Code Execution Exploit greetz Tecr0C :0 Vuln: lines 15-23 in core/lib/router.php ---------- sof //Get page request if any $page = $this-getInputString"page", "index"; //Get plugin request if any $plugin = $this-getInputString"system", "Page"; //...

Joomla! Plugin Captcha 4.5.1 - Local File Disclosure

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com Joomla Captcha Plugin 0 95 for $i = 0; $i...

Code injection

Cisco IOS before 15.01XA does not properly handle IRC traffic during a specific time period after an initial reload, which allows remote attackers to cause a denial of service device reload via an attempted connection to a certain IRC server, related to a "corrupted magic value," aka Bug ID...

CVE-2009-5038

Cisco IOS before 15.01XA does not properly handle IRC traffic during a specific time period after an initial reload, which allows remote attackers to cause a denial of service device reload via an attempted connection to a certain IRC server, related to a "corrupted magic value," aka Bug ID...

PT-2011-1309

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 15.01XA Description The issue is related to the handling of IRC traffic after an initial reload, allowing remote attackers to cause a denial of service via an attempted connection to a certain IRC server. This is du...

Ignition 1.3 Local File Inclusion

Ignition 1.3 page Local File Inclusion Vulnerability disclosed by cOndemned download: http://launchpad.net/ignition/trunk/1.3/+download/ignition-1.3.tar.gz note: 1. Magicquotesgpc should be turned off in order to exploit this vulnerability 2. LFI bugs found by me in previous version 1.2 are still...

Ignition 1.3 - 'page.php' Local File Inclusion

Ignition 1.3 page Local File Inclusion Vulnerability disclosed by cOndemned download: http://launchpad.net/ignition/trunk/1.3/+download/ignition-1.3.tar.gz note: 1. Magicquotesgpc should be turned off in order to exploit this vulnerability 2. LFI bugs found by me in previous version 1.2 are still...

www.eVuln.com : Authentication Bypass by SQL Injection in Social Share

www.eVuln.com advisory: Authentication Bypass by SQL Injection in Social Share Summary: http://evuln.com/vulns/167/summary.html Details: http://evuln.com/vulns/167/description.html -----------Summary----------- eVuln ID: EV0167 Software: Social Share Vendor: n/a Version: 2010-06-05 Critical Level...

CVE-2010-4517

SQL injection vulnerability in the JExtensions JE Auto comjeauto component 1.0 for Joomla!, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the char parameter in an item action to index.php...

Joomla! Component JE Auto 1.0 - SQL Injection

Joomla! Component JE Auto 1.0 - SQL Injection JE Auto 1.0 SQL Injection Vulnerability Name JE Auto Vendor http://joomlaextensions.co.in/extensions/components/je-auto.html Versions Affected 1.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at...

SOOP Portal Raven 1.0b Shell Upload Vulnerability

Exploit for asp platform in category web applications ================================================= SOOP Portal Raven 1.0b Shell Upload Vulnerability ================================================= Exploit Title: SOOP Portal Raven 1.0b Remote Upload Shell Vulnerability Google Dork: "Powered...

PT-2010-5482

Name of the Vulnerable Software and Affected Versions Brunetton LittlePhpGallery version 1.0.2 Description The issue allows remote attackers to list, include, and execute arbitrary local files. This is achieved by exploiting a directory traversal vulnerability in the gallery.php file when the mag...

Sql injection

Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY MCG FreeTicket 1.0.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 email parameters in a showtickets action...

chCounter <= 3.1.3 SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================== chCounter = 3.1.3 SQL Injection Vulnerability ============================================== !/usr/bin/python Exploit Title: chCounter = 3.1.3 SQLInjection Date: 2010/11/18 Author: Matias...

chCounter 3.1.3 - SQL Injection

!/usr/bin/python Exploit Title: chCounter = 3.1.3 SQLInjection Date: 2010/11/18 Author: Matias [email protected]. Software Link: http://chcounter.org/chCounter3/getfile.php?id=5 Version: 3.1.3 Tested on: Ubuntu Server 10.04 with apache Requirements: - Downloads must be...

Joomla! Component ProDesk 1.5 - Local File Inclusion

Joomla! Component ProDesk 1.5 - Local File Inclusion ------------------------------------------------------------------------------------------------------- Joomla Component ProDesk v 1.5 comprodesk&includefile Local File Inclusion http://joomlashowroom.com Price - $ 49.99...

PT-2010-5323 · Deluxebb · Deluxebb

SQL injection vulnerability in misc.php in DeluxeBB 1.3, and possibly earlier, when magic quotes gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the xthedateformat parameter in a register action, a different vector than CVE-2005-2989, CVE-2006-2503, and CVE-2009-103...

PT-2010-5315

Name of the Vulnerable Software and Affected Versions phpCheckZ version 1.1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter when magic quotes gpc is disabled. Recommendations For phpCheckZ version 1.1.0, consider disabling t...