4338 matches found
2zproject-multi.txt
Digital Security Research Group DSecRG Advisory Name: 2z project Systems Affected: 2z project 0.9.6.1 Vendor URL: http://2z-project.ru Authors: Alexandr Polyakov, Stas Svistunovich Digital Security Reasearch Group DSecRG research at dsec dot ru Reported: 27.12.2007 Vendor response: 27.12.2007 Dat...
Local file include, Directory traversal and Full path disclosure in WordPress
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Local file include, Directory traversal и Full path disclosure уязвимостях в WordPress. Дыры в файлах admin.php параметр import и themes.php параметр page. Full path disclosure: http://site/wp-admin/admin.php?import=....wp-config...
openbiblio-multi.txt
Security Advisory - - OpenBiblio 0.5.2-pre4 and prior multiple vulnerabilities - ---------------------------------------------------- Product: OpenBiblio Version: Version 0.5.2 Prerelease 4 and prior is affected Url: http://obiblio.sourceforge.net/ Affected by: Full path disclosure, local file...
[Full-disclosure] OpenBiblio 0.5.2-pre4 and prior multiple vulnerabilities
Security Advisory - - OpenBiblio 0.5.2-pre4 and prior multiple vulnerabilities - ---------------------------------------------------- Product: OpenBiblio Version: Version 0.5.2 Prerelease 4 and prior is affected Url: http://obiblio.sourceforge.net/ Affected by: Full path disclosure, local file...
2z-project 0.9.6.1 Multiple Security Vulnerabilities
Digital Security Research Group DSecRG Advisory Name: 2z project Systems Affected: 2z project 0.9.6.1 Vendor URL: http://2z-project.ru Authors: Alexandr Polyakov, Stas Svistunovich Digital Security Reasearch Group DSecRG research at dsec dot ru Reported: 27.12.2007 Vendor response: 27.12.2007 Dat...
CVE-2007-6502
Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to obtain sensitive information via 1 the AdminName and AdminLevel parameters to fp2000/NEWSRVR.asp, which discloses usernames; and 2 certain XML HTTP requests to hosting/css.asp using Microsoft.XMLHTTP or...
Information disclosure vulnerabilities in WordPress
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Information disclosure уязвимостях в WordPress. Это SQL DB Structure Extraction и Full path disclosure уязвимости. SQL DB Structure Extraction: http://site/?feed=rss2&p=1 Full path disclosure: http://site/?feed=rss2&p=1 Где p - это id несуществующ...
Multiple vulnerabilities in BadBlue 2.72b
Luigi Auriemma Application: BadBlue http://www.badblue.com Versions: = 2.72b Platforms: Windows Bugs: A PassThru buffer-overflow B upload directory traversal C path disclosure Exploitation: remote Date: 10 Dec 2007 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction...
BadBlue <= 2.72b Multiple Remote Vulnerabilities
No description provided by source. Luigi Auriemma Application: BadBlue http://www.badblue.com Versions: = 2.72b Platforms: Windows Bugs: A PassThru buffer-overflow B upload directory traversal C path disclosure Exploitation: remote Date: 10 Dec 2007 Author: Luigi Auriemma e-mail:...
BadBlue 2.72b - Multiple Vulnerabilities
BadBlue 2.72b - Multiple Vulnerabilities Luigi Auriemma Application: BadBlue http://www.badblue.com Versions: = 2.72b Platforms: Windows Bugs: A PassThru buffer-overflow B upload directory traversal C path disclosure Exploitation: remote Date: 10 Dec 2007 Author: Luigi Auriemma e-mail:...
BadBlue 2.72b - Multiple Vulnerabilities
Luigi Auriemma Application: BadBlue http://www.badblue.com Versions: = 2.72b Platforms: Windows Bugs: A PassThru buffer-overflow B upload directory traversal C path disclosure Exploitation: remote Date: 10 Dec 2007 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction...
BadBlue <= 2.72b Multiple Remote Vulnerabilities
Exploit for unknown platform in category remote exploits ================================================ BadBlue = 2.72b Multiple Remote Vulnerabilities ================================================ Luigi Auriemma Application: BadBlue http://www.badblue.com Versions: = 2.72b Platforms: Window...
Absolute News Manager .NET 5.1 - getpath.aspx Direct Request Error Message Information
Absolute News Manager .NET 5.1 - getpath.aspx Direct Request Error Message Information source: https://www.securityfocus.com/bid/26692/info Absolute News Manager .NET is prone to multiple remote vulnerabilities, including multiple cross-site scripting, SQL-injection, and information-disclosure...
Tilde CMS <= 4.x (aarstal) Remote SQL Injection Vulnerability
No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / &nb...
Gekko <=0.8.2 (temp directory) Path Disclosure
Gekko =0.8.2 temp directory Path Disclosure Download: http://www.gekkoware.org/ Bug found by JosS / Jose Luis Gуngora Fernбndez Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join fullsecure d0rk: "Powered by Gekko" Stop lammer sensitive...
Tilde CMS <= 4.x (aarstal) Remote SQL Injection Vulnerability
No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / &nb...
Tilde CMS <= v. 4.x "aarstal" parameter of "yeardetail" SQL Injection
--------------------------------------------------------------- / | | / | / |/ | | |/ | | / | | | | | |/ | | // | || | ||| /| / / | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...
tildecms-sql.txt
--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Tilde CMS...
Tilde CMS <= 4.x (aarstal) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================= Tilde CMS | |||| /| / / --------------------------------------------------------------- Tilde CMS = v. 4.x "aarstal" parameter SQL Injection...
Tilde CMS 4.x - 'aarstal' SQL Injection
--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg Original Here: http://www.inj3ct-it.org/exploit/tilde.txt...