3145 matches found
Invision Power Board Army System Mod 2.1 - SQL Injection
?php / --------------------------- EXPLOIT --------------------------- Invision Power Board Army System Mod 2.1 SQL Injection Exploit Tested on: Latest version 2.1.0 Discovered on: 06.02.2006 by Alex & fRoGGz Credits to: SecuBox Labs PLEASE READ THIS ! The query of the SQL Injection depends about...
Invision Power Board Army System Mod 2.1 - SQL Injection
Invision Power Board Army System Mod 2.1 - SQL Injection ?php / --------------------------- EXPLOIT --------------------------- Invision Power Board Army System Mod 2.1 SQL Injection Exploit Tested on: Latest version 2.1.0 Discovered on: 06.02.2006 by Alex & fRoGGz Credits to: SecuBox Labs PLEASE...
Invision Power Board Army System Mod 2.1 SQL Injection Exploit
No description provided by source. ?php / --------------------------- EXPLOIT --------------------------- Invision Power Board Army System Mod 2.1 SQL Injection Exploit Tested on: Latest version 2.1.0 Discovered on: 06.02.2006 by Alex & fRoGGz Credits to: SecuBox Labs PLEASE READ THIS ! The query...
phpBB 2.0.19 (Style Changer/Demo Mod) SQL Injection Exploit
Exploit for unknown platform in category web applications =========================================================== phpBB 2.0.19 Style Changer/Demo Mod SQL Injection Exploit =========================================================== !/usr/bin/perl | | | \ | | |/ phpBB Style Changer/Demo Mod--G...
phpBB 2.0.19 - Style ChangerDemo Mod SQL Injection
phpBB 2.0.19 - Style ChangerDemo Mod SQL Injection !/usr/bin/perl | | | \ | | |/ phpBB Style Changer/Demo Mod--GET HASH EXPLOIT Created By SkOd SED security Team http://www.sed-team.be [email protected] ISRAEL google: "Powered by phpBB" inurl:"index.php?s" OR inurl:"index.php?style" use IO::Socke...
phpBB 2.0.19 - Style Changer/Demo Mod SQL Injection
!/usr/bin/perl | | | \ | | |/ phpBB Style Changer/Demo Mod--GET HASH EXPLOIT Created By SkOd SED security Team http://www.sed-team.be [email protected] ISRAEL google: "Powered by phpBB" inurl:"index.php?s" OR inurl:"index.php?style" use IO::Socket; if @ARGV 3 print q phpBB Style Changer\Viewer MO...
Invision Power Board Dragoran Portal Mod 1.3 - SQL Injection
Invision Power Board Dragoran Portal Mod 1.3 - SQL Injection !/usr/bin/perl IPB Portal 1.3-Invision Power Board plugin Created By SkOd SED security Team , http://sed-team.be google: "Portal 1.3 by Dragoran" use IO::Socket; if @ARGV new Proto = "tcp", PeerAddr = "$serv", PeerPort = "80" || die...
Ubuntu 4.10 / 5.04 / 5.10 : libapache2-mod-auth-pgsql vulnerability (USN-239-1)
Several format string vulnerabilities were discovered in the error logging handling. By sending specially crafted user names, an unauthenticated remote attacker could exploit this to crash the Apache server or possibly even execute arbitrary code with the privileges of Apache user 'www-data'. Not...
Ubuntu 4.10 : libapache2-mod-python vulnerabilities (USN-80-1)
Graham Dumpleton discovered an information disclosure in the 'publisher' handle of modpython. By requesting a carefully crafted URL for a published module page, anybody can obtain extra information about internal variables, objects, and other information which is not intended to be visible. Note...
Ubuntu 4.10 / 5.04 : apache2, libapache-mod-ssl vulnerabilities (USN-177-1)
Apache did not honour the 'SSLVerifyClient require' directive within a block if the surrounding block contained a directive 'SSLVerifyClient optional'. This allowed clients to bypass client certificate validation on servers with the above configuration. CAN-2005-2700 Filip Sneppe discovered a...
[SECURITY] [DSA 935-1] New libapache2-mod-auth-pgsql packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 935-1 [email protected] http://www.debian.org/security/ Michael Stone January 10, 2006 http://www.debian.org/security/faq -...
Apache mod-auth-pgsql authorization module format string vulnerabilities
Several format string bugs in error logging...
DSA-935-1 libapache2-mod-auth-pgsql - format string vulnerability
Bulletin has no description...
security flaw
modssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a custom error 400 error page, allows remote attackers to cause a denial of service application crash via a non-SSL request to an SSL port, which triggers a NULL pointer dereference...
DEBIAN-CVE-2005-3357
modssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a custom error 400 error page, allows remote attackers to cause a denial of service application crash via a non-SSL request to an SSL port, which triggers a NULL pointer dereference...
DEBIAN-CVE-2005-4816
Buffer overflow in modradius in ProFTPD before 1.3.0rc2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long password...
security flaw
sslenginekernel.c in modssl before 2.8.24, when using "SSLVerifyClient optional" in the global virtual host configuration, does not properly enforce "SSLVerifyClient require" in a per-location context, which allows remote attackers to bypass intended access restrictions...
httpd cross-site scripting flaw in mod_imap
Cross-site scripting XSS vulnerability in the modimap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps...
DEBIAN-CVE-2005-3352
Cross-site scripting XSS vulnerability in the modimap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps...
eXtremeTraversal.txt
eXtreme Styles mod = 2.2.1 Multiple Vulnerabilities ==================================================== http://www.phpbbstyles.com/ Description =========== These vulnerabilities could allow an attacker that has gained administrative access view file content on the system. 1. Remote File Content...