CVE-2009-3198

The CVE-2009-3198 is an XSS vulnerability in the JCE-Tech Affiliate Master Datafeed Parser Script 2.0, affecting its search.php where the search parameter can inject arbitrary web script/HTML. This is a remote issue with a cross-site scripting impact described in multiple sources (NVD, Red Hat, C...

Adult Portal Escort Listing SQL Injection

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability profile.php userid Adult Portal escort listing http://www.tourismscripts.com/ AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...

Adult Portal escort listing - 'user_id' SQL Injection

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability profile.php userid Adult Portal escort listing http://www.tourismscripts.com/ AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...

MYRE Holiday Rental Manager - 'action' SQL Injection

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability review.php action MYRE Holiday Rental Manager http://www.myrephp.com AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...

Re-Script 0.99 Beta SQL Injection

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability listings.php op REScript V.0.99 Beta http://www.ebigman.com/ AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...

Re-Script 0.99 Beta - listings.php?op SQL Injection

Re-Script 0.99 Beta - listings.php?op SQL Injection Viva IslaM Viva IslaM Remote SQL Injection Vulnerability listings.php op REScript V.0.99 Beta http://www.ebigman.com/ AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...

Silurus Classifieds System - category.php SQL Injection

Silurus Classifieds System - category.php SQL Injection Viva IslaM Viva IslaM Remote SQL Injection Vulnerability category.php ID Silurus Classifieds System http://snowhall.com/silurus AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...

PAD Site Scripts 3.6 SQL Injection

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability list.php string PAD Site Scripts v3.6 www.pad-site-scripts.com AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: Exploite :-...

Affiliate Master Script 2.0 XSS

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || Affiliate Master Script V2.0 Remote XSS Vulnerabilities Discovered By : Moudi Contact : Download :...

Moa Gallery 1.2.0 - 'index.php?action' SQL Injection

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability index.php action Moa Gallery 1.2.0 www.moagallery.net AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: Exploite :-...

ITechBids 8.0 (itechd.php productid) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " \n"; print " ITechBids v8.0 Blind SQL Injection Exploit \n"; print " \n"; print " itechd.php productid...

Dreampics Builder (exhibition_id) Remote SQL Injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability index.php fuseaction DREAMPICS BUILDER http://www.dreamlevels.com/dreampics.php AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...

openSUSE Security Update : bind (bind-1146)

Specially crafted ddns update packets could trigger an exception in bind causing it to exit. The attack works if BIND is master for a zone even if ddns is not configured CVE-2009-0696. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

bind: DoS (assertion failure) via nsupdate packets

The dnsdbfindrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service assertion failure and daemon exit via an ANY record in the prerequisite section o...

bind: DoS (assertion failure) via nsupdate packets

The dnsdbfindrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service assertion failure and daemon exit via an ANY record in the prerequisite section o...

Design/Logic Flaw

The dnsdbfindrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service assertion failure and daemon exit via an ANY record in the prerequisite section o...

VulnCheck KEV: CVE-2009-0696

The dnsdbfindrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service assertion failure and daemon exit via an ANY record in the prerequisite...

BIND Dynamic Update DoS

BIND Dynamic Update DoS CVE: CVE-2009-0696 CERT: VU725188 Posting date: 2009-07-28 Program Impacted: BIND Versions affected: BIND 9 all versions Severity: High Exploitable: remotely Summary: BIND denial of service server crash caused by receipt of a specific remote dynamic update message...

apr-util heap buffer underwrite

The aprstrmatchprecompile function in strmatch/aprstrmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service daemon crash via crafted input involving 1 a .htaccess file used with the Apache HTTP Server, 2 the SVNMasterURI directive in the moddavsvn module in t...

apr-util heap buffer underwrite

The aprstrmatchprecompile function in strmatch/aprstrmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service daemon crash via crafted input involving 1 a .htaccess file used with the Apache HTTP Server, 2 the SVNMasterURI directive in the moddavsvn module in t...