CVE-2006-5189

PHP remote file inclusion vulnerability in funzioni/lib/showhlp.php in klinza professional cms 5.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the applAPPL parameter...

CVE-2006-5189

CVE-2006-5189 is a PHP remote file inclusion in klinza professional CMS 5.0.1 and earlier. The vulnerability lies in funzioni/lib/show_hlp.php, which allows an attacker to execute arbitrary PHP code by providing a crafted URL in the appl[APPL] parameter. Affected software: klinza professional CMS...

CVE-2006-5189

PHP remote file inclusion vulnerability in funzioni/lib/showhlp.php in klinza professional cms 5.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the applAPPL parameter...

CVE-2006-5177

MailEnable Professional 2.0 and Enterprise 2.0 NTLM authentication is vulnerable. Remote attackers can craft base64 NTLM messages to trigger a buffer over-read, enabling arbitrary code execution or a denial of service via NTLM Type 1/Type 3 messages. The vulnerability affects the SMTP/NTLM handli...

CVE-2006-5176

MailEnable Professional 2.0 and Enterprise 2.0 are affected by a buffer overflow in NTLM authentication, allowing remote, unauthenticated attackers to execute arbitrary code via the signature field of NTLM Type 1 messages. The issue enables remote code execution or service crash in the MailEnable...

Klinza Professional CMS 5.0.1 - 'show_hlp.php' File Inclusion

!/usr/bin/perl ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+ +:+:+ +:+ ++ +++:++ +++:++++: ++...

Klinza Professional CMS <= 5.0.1 (show_hlp.php) File Include Exploit

Exploit for unknown platform in category web applications ==================================================================== Klinza Professional CMS = 5.0.1 showhlp.php File Include Exploit ==================================================================== !/usr/bin/perl ::::::::: ::::::::::...

Klinza Professional CMS 5.0.1 - show_hlp.php File Inclusion

Klinza Professional CMS 5.0.1 - showhlp.php File Inclusion !/usr/bin/perl ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+:...

Klinza Professional CMS &lt;= 5.0.1 (show_hlp.php) File Include Exploit

No description provided by source. !/usr/bin/perl ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +...

FutureSoft TFTP Server 2000 Transfer-Mode Overflow

This module exploits a stack buffer overflow in the FutureSoft TFTP Server 2000 product. By sending an overly long transfer-mode string, we were able to overwrite both the SEH and the saved EIP. A subsequent write-exception that will occur allows the transferring of execution to our shellcode via...

CVE-2006-3350

Stack-based buffer overflow in AutoVue SolidModel Professional Desktop Edition 19.1 Build 5993 allows user-assisted remote attackers to execute arbitrary code via a long filename in a 1 ARJ, 2 RAR, or 3 ZIP archive...

CVE-2006-3350

Stack-based buffer overflow in AutoVue SolidModel Professional Desktop Edition 19.1 Build 5993 allows user-assisted remote attackers to execute arbitrary code via a long filename in a 1 ARJ, 2 RAR, or 3 ZIP archive...

[Full-disclosure] Secunia Research: AutoVue SolidModel Professional Buffer Overflow Vulnerability

====================================================================== Secunia Research 26/07/2006 - AutoVue SolidModel Professional Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

[SA20852] AutoVue SolidModel Professional Buffer Overflow Vulnerability

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

[SA20852] AutoVue SolidModel Professional Buffer Overflow Vulnerability

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

CVE-2006-3837

CVE-2006-3837 affects the Guestbook component of Professional Home Page Tools. The vulnerable code path in the delcookie.php script alters a cookie’s expiration date instead of deleting its value, enabling an attacker to more easily retrieve the cookie and, after logout, obtain the administrator’...

CVE-2006-3752

Multiple SQL injection vulnerabilities in class.php in Professional Home Page Tools Guestbook allow remote attackers to execute arbitrary SQL commands via the 1 hidemail, 2 name, 3 mail, 4 ip, or 5 text parameters...

CVE-2006-3753

setcookie.php for the administration login in Professional Home Page Tools Guestbook records the hash of the administrator password in a cookie, which allows attackers to conduct brute force password guessing attacks after obtaining the hash...

CVE-2006-3752

The CVE-2006-3752 entry concerns SQL injection in the class.php of the Professional Home Page Tools Guestbook. The vulnerability allows remote attackers to inject SQL via any of the five parameters: hidemail, name, mail, ip, or text, potentially compromising data integrity and confidentiality and...

CVE-2006-3753

The CVE-2006-3753 entry describes a vulnerability in setcookie.php used for the administration login in Professional Home Page Tools Guestbook. The implementation stores the hash of the administrator password in a cookie, which could enable an attacker to perform brute-force password guessing aft...