mod_autoindex XSS

Cross-site scripting XSS vulnerability in modautoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that th...

mod_perl PerlRun denial of service

PerlRun.pm in Apache modperl before 1.30, and RegistryCooker.pm in modperl 2.x, does not properly escape PATHINFO before use in a regular expression, which allows remote attackers to cause a denial of service resource consumption via a crafted URI...

apache mod_status cross-site scripting

Cross-site scripting XSS vulnerability in modstatus in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

mod_ssl ssl_util_uuencode_binary CA issue

Stack-based buffer overflow in the sslutiluuencodebinary function in sslutil.c for Apache modssl, when modssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN...

httpd cross-site scripting flaw in mod_imap

Cross-site scripting XSS vulnerability in the modimap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps...

httpd mod_status XSS

Cross-site scripting XSS vulnerability in modstatus.c in the modstatus module in Apache HTTP Server httpd, when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browser...

PHP-Fusion Mod classifieds (lid) Remote SQL Injection Vulnerability

No description provided by source. Php fusion "classifieds" SQL-injetion ++++++++++++++++++++++++++++ Author : boom3rang contact : boomerang at knaqu-shqipe dot de webpage : www.khg-crew.ws ++++++++++++++++++++++++++++ ---- Remote SQL Injection ------ + Dork:...

PHP-Fusion Mod Classifieds - 'lid' SQL Injection

Php fusion "classifieds" SQL-injetion ++++++++++++++++++++++++++++ Author : boom3rang contact : boomerang at knaqu-shqipe dot de webpage : www.khg-crew.ws ++++++++++++++++++++++++++++ ---- Remote SQL Injection ------ + Dork: inurl:"classifieds.php?op=detailadverts" + Example:...

PHP-Fusion Mod Kroax 4.42 - category SQL Injection

PHP-Fusion Mod Kroax 4.42 - category SQL Injection ========================================================== The kroax phpfusion Remote SQL-injection. ========================================================== Author : boom3rang Contact : [email protected] webpage : www.khg-crew.ws ---...

phpraider-rfi.txt

Application Name : PhpRaider Mod phpbb3 Vulnerable Type : Remote File Include Google Keyword : Powered by phpRaider v1.0.7 Infection : İlgili site ve sunucuya erişim sağlanabilir. Bug Fix Advice : Undefined değerler, tanımlanmalıdır. author : KaCaK a.K.a Dr.Hack3r Error Code :...

phpRaider 1.0.7 (phpbb3.functions.php) RFI Vulnerability

Exploit for unknown platform in category web applications ======================================================== phpRaider 1.0.7 phpbb3.functions.php RFI Vulnerability ======================================================== Application Name : PhpRaider Mod phpbb3 Vulnerable Type : Remote File...

phpRaider 1.0.7 (phpbb3.functions.php) RFI Vulnerability

No description provided by source. ------------------- header data start ------------------- Application Name : PhpRaider Mod phpbb3 Vulnerable Type : Remote File Include Google Keyword : Powered by phpRaider v1.0.7 Infection : Ä°lgili site ve sunucuya eriÅŸim saÄŸlanabilir. Bug Fix Advice :...

PHPRaider 1.0.7 - 'PHPbb3.functions.php' Remote File Inclusion

Application Name : PhpRaider Mod phpbb3 Vulnerable Type : Remote File Include Google Keyword : Powered by phpRaider v1.0.7 Infection : İlgili site ve sunucuya erişim sağlanabilir. Bug Fix Advice : Undefined değerler, tanımlanmalıdır. author : KaCaK a.K.a Dr.Hack3r Error Code :...

PHPRaider 1.0.7 - PHPbb3.functions.php Remote File Inclusion

PHPRaider 1.0.7 - PHPbb3.functions.php Remote File Inclusion Application Name : PhpRaider Mod phpbb3 Vulnerable Type : Remote File Include Google Keyword : Powered by phpRaider v1.0.7 Infection : Ä°lgili site ve sunucuya eriÅŸim saÄŸlanabilir. Bug Fix Advice : Undefined deÄŸerler,...

mod_imap cross-site scripting vulnerability

Overview The "modimap" and "modimagemap" modules of the Apache HTTP Server are used for implementing server-side image map processing. modimap and modimagemap are affected by a cross-site scripting vulnerability when referer values are used in an image map in such a way that they do not handle...

httpd mod_status XSS

Cross-site scripting XSS vulnerability in modstatus.c in the modstatus module in Apache HTTP Server httpd, when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browser...

mod_perl PerlRun denial of service

PerlRun.pm in Apache modperl before 1.30, and RegistryCooker.pm in modperl 2.x, does not properly escape PATHINFO before use in a regular expression, which allows remote attackers to cause a denial of service resource consumption via a crafted URI...

mod_perl PerlRun denial of service

PerlRun.pm in Apache modperl before 1.30, and RegistryCooker.pm in modperl 2.x, does not properly escape PATHINFO before use in a regular expression, which allows remote attackers to cause a denial of service resource consumption via a crafted URI...

mod_ssl SSLCipherSuite bypass

The modssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in directory or location context, allows remote clients to bypass intended restrictions by using any cipher suite that is allowed by the virtual host configuration...

mod_autoindex XSS

Cross-site scripting XSS vulnerability in modautoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that th...