2406 matches found
Metamod-P DoS
Denial of service on oversized list command...
CVE-2007-1981
The safevoidvsnprintf function in Metamod-P 1.19p29 and earlier on Windows allows remote attackers to cause a denial of service daemon crash via a long meta list command...
Command injection
The safevoidvsnprintf function in Metamod-P 1.19p29 and earlier on Windows allows remote attackers to cause a denial of service daemon crash via a long meta list command...
CVE-2007-1981
The safevoidvsnprintf function in Metamod-P 1.19p29 and earlier on Windows allows remote attackers to cause a denial of service daemon crash via a long meta list command...
CVE-2007-1981
The safevoidvsnprintf function in Metamod-P 1.19p29 and earlier on Windows allows remote attackers to cause a denial of service daemon crash via a long meta list command...
CVE-2007-1981
The CVE-2007-1981 issue affects Metamod-P 1.19p29 and earlier on Windows, where the safevoid_vsnprintf function can be triggered by a long meta list command to cause a denial of service (daemon crash). The available connected data confirms the affected component and the impact as described (DoS)....
CVE-2007-1981: Undefined Security Weakness
The safevoidvsnprintf function in Metamod-P 1.19p29 and earlier on Windows allows remote attackers to cause a denial of service daemon crash via a long meta list command...
Battle.net Clan Script for PHP 1.5.1 - SQL Injection
Battle.net Clan Script for PHP 1.5.1 - SQL Injection script : Battle.net Clan Script 1.5 file : login.php attack : injection sql auteur : h a c k e r X code : ------------------------------------------------------------------------------------------ line 9 -- $user = $POST'user'; line 10-- $pass ...
Sql injection
SQL injection vulnerability in modules/myalbum/viewcat.php in the myAlbum-P 2.0 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...
CVE-2007-1807
SQL injection vulnerability in modules/myalbum/viewcat.php in the myAlbum-P 2.0 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...
CVE-2007-1807
CVE-2007-1807 involves an SQL injection in the myAlbum-P 2.0 and earlier module for Xoops, specifically in modules/myalbum/viewcat.php via the cid parameter. Remote attackers could potentially execute arbitrary SQL commands. The description confirms the vulnerable component (myAlbum-P module for ...
CVE-2007-1807
SQL injection vulnerability in modules/myalbum/viewcat.php in the myAlbum-P 2.0 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...
CVE-2007-1807: Undefined Security Weakness
SQL injection vulnerability in modules/myalbum/viewcat.php in the myAlbum-P 2.0 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...
XOOPS Module myAlbum-P <= 2.0 (cid) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================ XOOPS Module myAlbum-P : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit...
XOOPS Module myAlbum-P <= 2.0 (cid) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: XOOPS Module myAlbum-P = 2.0 cid Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : Dork : myAlbum-P 2.0 original Example S. : http://www.google.com.tr/search?q=+myAlbum-P+2.0+++original&hl=tr&start=0&sa=N...
XOOPS Module myAlbum-P 2.0 - 'cid' SQL Injection
!/usr/bin/perl Script Name: XOOPS Module myAlbum-P : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User ID uid: "; $id = ; chop $id; $target =...
PHP <= 4.4.6 mssql_[p]connect() Local Buffer Overflow Exploit
No description provided by source...
CVE-2006-7114
P-News 2.0 stores db/user.txt under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and password hashes via a direct request. NOTE: this might be the same issue as CVE-2006-6888...
CVE-2006-7113
Unrestricted file upload vulnerability in P-News 2.0 allows remote attackers to upload and execute arbitrary files via an avatar file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-7114
P-News 2.0 stores db/user.txt under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and password hashes via a direct request. NOTE: this might be the same issue as CVE-2006-6888...