496 matches found
Softbiz Auctions Script - product_desc.php SQL Injection
Softbiz Auctions Script - productdesc.php SQL Injection Softbiz Auctions Script Sql Injection BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://www.softbizscripts.com/ Google Dork : "Starting bid" "Powered by SoftbizScripts" Injection Adress : http://sitename/productdesc.php?id= SQL...
Sql injection
Multiple SQL injection vulnerabilities in wolioCMS allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to member.php in a page action, related to a SELECT statement in common.php; and the 2 loginid parameter uid variable, and possibly the 3 pwd parameter, to...
CVE-2007-4021
Multiple cross-site scripting XSS vulnerabilities in login.php in Brain Book Software Secure 1.0.20070629 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 user and 2 pwd parameters...
CVE-2007-4020
Multiple cross-site scripting XSS vulnerabilities in login.php in AdMan 1.0.20051202 FF 3 patch and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 user and 2 pwd parameters...
FTP Explorer 1.0.1 Build 047 - Remote CPU Consumption (Denial of Service)
/ FTP Explorer 1.0.1 Build 047 Remote DoS CPU consumption FTP Explorer is prone to a DoS after receiving a long PWD response leading to 100% CPU consumption. Have Fun! Coded by Marsu / include "winsock2.h" include "stdio.h" include "stdlib.h" include "windows.h" pragma commentlib, "ws232.lib" int...
CVE-2007-0825
FlashFXP 3.4.0 build 1145 allows remote servers to cause a denial of service CPU consumption via a response to a PWD command that contains a long string with deeply nested directory structure, possibly due to a buffer overflow...
Sql injection
SQL injection vulnerability in MgrLogin.asp in Addsoft StoreBot 2005 Professional allows remote attackers to execute arbitrary SQL commands via the Pwd parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Sql injection
Multiple SQL injection vulnerabilities in admin.asp in WPC.easy allow remote attackers to execute arbitrary SQL commands via the 1 uid and 2 pwd parameter...
CVE-2006-0832
Multiple SQL injection vulnerabilities in admin.asp in WPC.easy allow remote attackers to execute arbitrary SQL commands via the 1 uid and 2 pwd parameter...
PT-2005-4231 · Archilles · Archilles Newsworld
Name of the Vulnerable Software and Affected Versions: Archilles Newsworld versions up to 1.3.0 Description: The issue allows attackers to bypass authentication by obtaining the password hash for another user and specifying the hash in the pwd argument. This can be achieved, for example, through...
CVE-2004-2388
The vulnerability CVE-2004-2388 affects the AIX 4.3.3 rexecd component. It stems from not properly using a local copy of the pwd structure when calling getpwnam, allowing the authenticate function to overwrite the pwd data and potentially assign privileges to the wrong user. This creates a privil...
CVE-2005-0746
The Mini FTP server in Novell iChain 2.2 and 2.3 SP2 and earlier allows remote unauthenticated attackers to obtain the full path of the server via the PWD command...
CVE-2004-2388
rexecd for AIX 4.3.3 does not properly use a local copy of the pwd structure when calling getpwnam, which may cause the structure to be overwritten by the authenticate function and assign privileges to the wrong user...
CVE-2003-1319
Multiple buffer overflows in SmartFTP 1.0.973, and other versions before 1.0.976, allow remote attackers to execute arbitrary code via 1 a long response to a PWD command, which triggers a stack-based overflow, and 2 a long line in a response to a file LIST command, which triggers a heap-based...