Microsoft IIS ASP chunked encoding buffer overflow

Added: 11/10/2006 CVE: CVE-2002-0079 BID: 4485 OSVDB: 768 Background Microsoft IIS web servers include ISAPI extensions which are invoked in the server process to handle requests of a given type. Problem A buffer overflow in the ASP ISAPI filter allows remote attackers to execute arbitrary comman...

Microsoft IIS ASP chunked encoding buffer overflow

Added: 11/10/2006 CVE: CVE-2002-0079 BID: 4485 OSVDB: 768 Background Microsoft IIS web servers include ISAPI extensions which are invoked in the server process to handle requests of a given type. Problem A buffer overflow in the ASP ISAPI filter allows remote attackers to execute arbitrary comman...

SHTTPD URI-Encoded POST Request Overflow

This module exploits a stack buffer overflow in SHTTPD 'SHTTPD URI-Encoded POST Request Overflow', 'Description' = %q This module exploits a stack buffer overflow in SHTTPD 'LMH ', 'hdm', 'skOd', 'License' = MSFLICENSE, 'References' = 'CVE', '2006-5216', 'OSVDB', '29565' , 'URL',...

shttpd web server buffer overflow

Buffer overflow on oversized POST request URL...

CVE-2006-4511

Messenger Agents nmma.exe in Novell GroupWise 2.0.2 and 1.0.6 allows remote attackers to cause a denial of service crash via a crafted HTTP POST request to TCP port 8300 with a modified val parameter, which triggers a null dereference related to "zero-size strings in blowfish routines."...

XennoBB 1.0.x2.2 - Icon_Topic SQL Injection

XennoBB 1.0.x2.2 - IconTopic SQL Injection source: https://www.securityfocus.com/bid/19606/info XennoBB is prone to an SQL-injection vulnerability that could allow an attacker to influence the structure or logic of SQL queries made by the application. --------------------- EXPLOIT...

CVE-2006-3819

Eval injection vulnerability in the configure script in TWiki 4.0.0 through 4.0.4 allows remote attackers to execute arbitrary Perl code via an HTTP POST request containing a parameter name starting with "TYPEOF"...

ToendaCMS 1.0.0 - FCKeditor Arbitrary File Upload

ToendaCMS 1.0.0 - FCKeditor Arbitrary File Upload !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; retur...

CVE-2006-3546

Patrice Freydiere ImgSvr aka ADA Image Server allows remote attackers to cause a denial of service daemon crash via a long HTTP POST request. NOTE: this might be the same issue as CVE-2004-2463...

imgsvrDoS.txt

I have provided the fillowing proof of concept.. Afected-softwear Credit's :n00b. http://freshmeat.net/projects/imgsvr/ Exploit, !/usr/bin/perl Proof of concept. Credit's:to n00b for finding this bug. Afected :ImgSvr.exe Download softwear: http://freshmeat.net/projects/imgsvr/ Crash the server wi...

ImgSvr 0.6.5 - POST Denial of Service

!/usr/bin/perl Proof of concept. Credit's:to n00b for finding this bug. Afected :ImgSvr.exe Download softwear: http://freshmeat.net/projects/imgsvr/ Crash the server with overly long http post request.. Main site of affected product. http://freshmeat.net/projects/imgsvr/ Sending an overly long po...

Cisco Secure ACS 2.3 - LoginProxy.cgi Cross-Site Scripting

Cisco Secure ACS 2.3 - LoginProxy.cgi Cross-Site Scripting source: https://www.securityfocus.com/bid/18449/info Cisco Secure ACS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage...

WinGate proxy server buffer overflow

Buffer overflow on oversized POST request...

ozjournals.txt

OZJournals 1.2 alert"lol";&vemail=mail%40mail.it&vlocation=test&vcomment=test ---------------------------------------------------------------------------------------------- Credit Author: Kiki Site: http://kiki91.altervista.org IRC Channel: irc.azzurra.org 6667 system...

Cross site scripting

Bitrix Site Manager 4.1.x allows remote attackers to redirect users to other websites via a modified backurl during a HTTP POST request. NOTE: this issue has been referred to as "cross-site scripting," but that is inconsistent with the common use of the term...

punBB1211.txt

PunBB 1.2.11 Cross-Site Scripting File name :- misc.php Action :- Send Email Line :- 123 php redirect$POST'redirecturl', $langmisc'E-mail sent redirect'; /php The $POST'redirecturl' = Unfilter Input Exploit :- Send POST Request code GET :- /PunBB/misc.php?email=2 POST :-...

PunBB 1.2.11 Cross-Site Scripting

PunBB 1.2.11 Cross-Site Scripting File name :- misc.php Action :- Send Email Line :- 123 php redirect$POST'redirecturl', $langmisc'E-mail sent redirect'; /php The $POST'redirecturl' = Unfilter Input Exploit :- Send POST Request code GET :- /PunBB/misc.php?email=2 POST :-...

sBlog 0.7.2 - 'comments_do.php' Multiple POST Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/17044/info sBlog is prone to HTML-injection vulnerabilities. The application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would be executed in the context of the...

Noah's Classifieds 1.0/1.3 - Search Page SQL Injection

source: https://www.securityfocus.com/bid/16773/info Noah's Classifieds is prone to an SQL-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromise the application, access...

Noahs Classifieds 1.01.3 - Search Page SQL Injection

Noahs Classifieds 1.01.3 - Search Page SQL Injection source: https://www.securityfocus.com/bid/16773/info Noah's Classifieds is prone to an SQL-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...