Sql injection

SQL injection vulnerability in the ResendEmail module in Raven Web Services RavenNuke 2.30 allows remote authenticated administrators to execute arbitrary SQL commands via the userprefix parameter to modules.php...

Code injection

images/captcha.php in Raven Web Services RavenNuke 2.30, when registerglobals and displayerrors are enabled, allows remote attackers to determine the existence of local files by sending requests with full pathnames in the aFonts array parameter, and then observing the error messages, which differ...

Code injection

avatarlist.php in the Your Account module, reached through modules.php, in Raven Web Services RavenNuke 2.30 allows remote authenticated users to execute arbitrary code via PHP sequences in an element of the replacements array, which is processed by the pregreplace function with the eval switch, ...

CVE-2009-0674

CVE-2009-0674 affects RavenNuke 2.30 (Raven Web Services). The vulnerability arises when register_globals and display_errors are enabled, allowing remote attackers to probe local file existence by sending requests with full paths in the aFonts array parameter and observing differing error message...

Joomla Live Ticket Component 1.0 SQL Injection

Joomla Component comlivetickertid Blind SQL-injection Author : boom3rang Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1. Vulnerability : Blind SQL injection Google Dork : inurl:comliveticker -------------------------------------------------- ! Name : Live Ticker ! Auth...

Joomla Component Live Ticker 1.0 (tid) Blind SQL Injection Vuln

No description provided by source. Joomla Component comlivetickertid Blind SQL-injection Author : boom3rang Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1. Vulnerability : Blind SQL injection Google Dork : inurl:comliveticker...

Joomla! Component Live Ticker 1.0 - Blind SQL Injection

Joomla! Component Live Ticker 1.0 - Blind SQL Injection Joomla Component comlivetickertid Blind SQL-injection Author : boom3rang Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1. Vulnerability : Blind SQL injection Google Dork : inurl:comliveticker...

Joomla! Component Live Ticker 1.0 - Blind SQL Injection

Joomla Component comlivetickertid Blind SQL-injection Author : boom3rang Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1. Vulnerability : Blind SQL injection Google Dork : inurl:comliveticker -------------------------------------------------- ! Name : Live Ticker ! Auth...

linkbid-sql.txt

Link Bid Script 1.5 Multiple Remote SQL Injection + Discovered By SirGod + wWw.MorTal-TeaM.OrG + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke + Remote SQL Injection - Note : For PoC 2 you need administrative rights. PoC 1 :...

talkback-lfidisclose.txt

Talkback 2.3.6 Multiple Local File Inclusion/PHPInfo Disclosure + Discovered By SirGod + MorTal TeaM + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke + Local File Inclusion PoC 1 : http://target/path/comments.php?language=Local File%00 Example 1 :...

NukeSentinel 2.5.05 (nukesentinel.php) File Disclosure Exploit

Exploit for unknown platform in category web applications ============================================================== NukeSentinel 2.5.05 nukesentinel.php File Disclosure Exploit ============================================================== !/usr/bin/php File Disclosure Maybe work on other...

NukeSentinel 2.5.05 - 'nukesentinel.php' File Disclosure

!/usr/bin/php File Disclosure Maybe work on other versions. Interesting exploit = if$argc URL: http://www.acid-root.new.fr/ ------------------------------------------------------------------ Usage: $argv0 -url -file Options Example: $argv0 -url http://www.victim.com/ -file config.php Options:...

CVE-2006-2587

Buffer overflow in the WebTool HTTP server component in 1 PunkBuster before 1.229, as used by multiple products including 2 America's Army 1.228 and earlier, 3 Battlefield 1942 1.158 and earlier, 4 Battlefield 2 1.184 and earlier, 5 Battlefield Vietnam 1.150 and earlier, 6 Call of Duty 1.173 and...

Buffer-overflow in the WebTool service of PunkBuster for servers (minor than v1.229)

Luigi Auriemma Application: PunkBuster http://www.punkbuster.com Versions: PunkBuster for servers, versions minor than v1.229: America's Army = v1.228 Battlefield 1942 = v1.158 Battlefield 2 = v1.184 Battlefield Vietnam = v1.150 Call of Duty = v1.173 Call of Duty 2 = v1.108 DOOM 3 = v1.159 Enemy...

PunkBuster 1.229 - WebTool Service Remote Buffer Overflow (Denial of Service) (PoC)

PunkBuster 1.229 - WebTool Service Remote Buffer Overflow Denial of Service PoC Luigi Auriemma Application: PunkBuster http://www.punkbuster.com Versions: PunkBuster for servers, versions minor than v1.229: America's Army = v1.228 Battlefield 1942 = v1.158 Battlefield 2 = v1.184 Battlefield Vietn...

In-game /ignore crash in Soldier of Fortune II 1.03

Luigi Auriemma Application: Soldier of Fortune II http://sof2.ravensoft.com Versions: 1.02x and 1.03 Platforms: Windows, Linux and Mac Bug: bad memory access Exploitation: remote, versus server in-game Date: 29 Jun 2005 Author: unknown, found in the wild and reported to me by two admins Advisory:...

Raven Software Soldier Of Fortune 2 - Ignore Command Remote Denial of Service

Raven Software Soldier Of Fortune 2 - Ignore Command Remote Denial of Service source: https://www.securityfocus.com/bid/14098/info A remote denial of service vulnerability affects Raven Software Soldier Of Fortune 2. The problem presents itself specifically when the affected server application...

Raven Software Soldier Of Fortune 2 - Ignore Command Remote Denial of Service

source: https://www.securityfocus.com/bid/14098/info A remote denial of service vulnerability affects Raven Software Soldier Of Fortune 2. The problem presents itself specifically when the affected server application receives an excessively large value through a '/ignore' command from a malicious...

Sad-Raven GuestBook

Product : Sad-Raven GuestBook Version : 1.1 WebSite : http://www.sad-raven.ru Problem : Admin access rus Description: ------------ Если посмотреть файл admin.php, можно увидеть следующие строки: admin.php ========= ... if fileexists"passwd.dat" && $QUERYSTRING != "": require "passwd.dat";...