Image Racer SearchResults.ASP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25010/info Image Racer is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise t...

Racer 0.5.3 Beta 5 - Remote Buffer Overflow (Metasploit)

$Id: racer503beta5.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Racer v0.5.3 beta 5 Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Racer v0.5.3...

Racer v0.5.3 Beta 5 Buffer Overflow

This module exploits the Racer Car and Racing Simulator game versions v0.5.3 beta 5 and earlier. Both the client and server listen on UDP port 26000. By sending an overly long buffer we are able to execute arbitrary code remotely. This module requires Metasploit: https://metasploit.com/download...

Racer 0.5.3b5 Stack Buffer Overflow

/ Racer vs 0.5.3 beta 5 Remote Stack Buffer OverflowC exploit by fl0 fl0w -------------------------------------------------------------------------------------------------- Description : Bug found some time ago by n00b Cheers mate ! :D ,I wanted to make a more improved sploit , with lots of targe...

Racer 0.5.3b5 Remote Stack Buffer Overflow Exploit

No description provided by source. / Racer vs 0.5.3 beta 5 Remote Stack Buffer OverflowC exploit by fl0 fl0w -------------------------------------------------------------------------------------------------- Description : Bug found some time ago by n00b Cheers mate ! :D ,I wanted to make a more...

Racer 0.5.3b5 Remote Stack Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================== Racer 0.5.3b5 Remote Stack Buffer Overflow Exploit ================================================== / Racer vs 0.5.3 beta 5 Remote Stack Buffer OverflowC exploit by fl0 fl0w...

Racer 0.5.3 Beta 5 - Remote Stack Buffer Overflow

/ Racer vs 0.5.3 beta 5 Remote Stack Buffer OverflowC exploit by fl0 fl0w -------------------------------------------------------------------------------------------------- Description : Bug found some time ago by n00b Cheers mate ! :D ,I wanted to make a more improved sploit , with lots of targe...

Racer 0.5.3 Beta 5 - Remote Stack Buffer Overflow

Racer 0.5.3 Beta 5 - Remote Stack Buffer Overflow / Racer vs 0.5.3 beta 5 Remote Stack Buffer OverflowC exploit by fl0 fl0w -------------------------------------------------------------------------------------------------- Description : Bug found some time ago by n00b Cheers mate ! :D ,I wanted t...

CVE-2007-4370

Multiple buffer overflows in the 1 client and 2 server in Racer 0.5.3 beta 5 allow remote attackers to execute arbitrary code via a long string to UDP port 26000...

CVE-2007-4370

CVE-2007-4370 describes multiple buffer overflows in Racer 0.5.3 beta 5 that affect both the client and server. An attacker can trigger via a long UDP payload to port 26000, potentially allowing remote arbitrary code execution. Connected sources show public exploit activity (Metasploit/Exploit-DB...

CVE-2007-4370

Multiple buffer overflows in the 1 client and 2 server in Racer 0.5.3 beta 5 allow remote attackers to execute arbitrary code via a long string to UDP port 26000...

Racer v0.5.3 beta 5 Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl Credit's to n00b. Racer v0.5.3 beta 5 12-03-07 remote exploit. Racer is also prone to a buffer over flow in the server and client.Automatically the game open's Udp port 26000 and is waiting for a msg buffer. If we send an overly long buffer we are...

racer-overflow.txt

!/usr/bin/perl Credit's to n00b. Racer v0.5.3 beta 5 12-03-07 remote exploit. Racer is also prone to a buffer over flow in the server and client.Automatically the game open's Udp port 26000 and is waiting for a msg buffer. If we send an overly long buffer we are able to Control the eip register a...

Racer v0.5.3 beta 5 Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================== Racer v0.5.3 beta 5 Remote Buffer Overflow Exploit ================================================== !/usr/bin/perl Credit's to n00b. Racer v0.5.3 beta 5 12-03-07 remote exploit. Racer is...

Racer 0.5.3 Beta 5 - Remote Buffer Overflow

!/usr/bin/perl Credit's to n00b. Racer v0.5.3 beta 5 12-03-07 remote exploit. Racer is also prone to a buffer over flow in the server and client.Automatically the game open's Udp port 26000 and is waiting for a msg buffer. If we send an overly long buffer we are able to Control the eip register a...

Racer 0.5.3 Beta 5 - Remote Buffer Overflow

Racer 0.5.3 Beta 5 - Remote Buffer Overflow !/usr/bin/perl Credit's to n00b. Racer v0.5.3 beta 5 12-03-07 remote exploit. Racer is also prone to a buffer over flow in the server and client.Automatically the game open's Udp port 26000 and is waiting for a msg buffer. If we send an overly long buff...

imageracer-sql.txt

Aria-Security Team Image Racer SearchResults.asp SQL Injection Vendor: http://www.junctionquest.com/Software.asp Example: http://www.TARGET.com/SearchResults.asp?SearchWord=SQL COMMAND&WordSearchCrit=Yes&image.x=0&image.y=0 Example : -1 'union select username,password from admin where FIND IT YOU...

Image Racer - 'searchresults.asp' SQL Injection

source: https://www.securityfocus.com/bid/25010/info Image Racer is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

[Aria-Security] Image Racer SearchResults.asp SQL INJECTION vuln.

Aria-Security Team Image Racer SearchResults.asp SQL Injection Vendor: http://www.junctionquest.com/Software.asp Example: http://www.TARGET.com/SearchResults.asp?SearchWord=SQL COMMAND&WordSearchCrit=Yes&image.x=0&image.y=0 Example : -1 'union select username,password from admin where FIND IT YOU...