813 matches found
Moodle <= 1.6dev SQL Injection / Command Execution Exploit
No description provided by source. ?php moodle16devxpl.php 4.19 10/11/2005 Moodle = 1.6dev get record SQL injection / / remote commands execution by rgod site: http://rgod.altervista.org usage: launch from Apache, fill in requested fields, then go! make these changes in php.ini if you have troubl...
atutor151pl2.txt
ATutor 1.5.1pl2 SQL Injection / Remote commands execution software: site: http://www.atutor.ca/ description : "ATutor is an Open Source Web-based Learning Content Management System LCMS designed with accessibility and adaptability in mind." if magicquotesgpc off - SQL INJECTION vulnerable code in...
ATutor 1.5.1pl2 - SQL Injection Command Execution
ATutor 1.5.1pl2 - SQL Injection Command Execution ?php atutor151pl2xpl.php 5.12 08/11/2005 Atutor 1.5.1 pl2 possibly prior versions SQL injection / / remote commands execution by rgod site: http://rgod.altervista.org usage: launch from Apache, fill in requested fields, then go! make these changes...
ATutor 1.5.1pl2 SQL Injection / Command Execution Exploit
No description provided by source. ?php atutor151pl2xpl.php 5.12 08/11/2005 Atutor 1.5.1 pl2 possibly prior versions SQL injection / / remote commands execution by rgod site: http://rgod.altervista.org usage: launch from Apache, fill in requested fields, then go! make these changes in php.ini if...
CuteNews1.4.1.txt
CuteNews 1.4.1 Arbitrary file inclusion / remote code execution exploit software: site: http://cutephp.com/ description: "Cute news is a powerful and easy for using news management system that use flat files to store its database. It supports comments, archives, search function, image uploading,...
mwchat.txt
20.23 21/10/2005 MWCHAT 6.8 SQL INJECTION / REMOTE COMMANDS EXECUTION software: site: http://www.appindex.net description: a php chat no need for exploit code, poc:...
phpnuke78sql.txt
PHPNuke 7.8 with all security fixes/patches "Downloads", "WebLinks" & "YourAccount" SQL INjection - remote commands execution poc exploit there are a lot of unsanitized vars in every module, as I can see, so if magicquotesgpc is Off - SQL INJECTION 1 you can go to "Your Account" and submit a...
w-Agora 4.2.0 - quicklist.php Remote Code Execution
w-Agora 4.2.0 - quicklist.php Remote Code Execution ?php --- wagora420xpl.php 13.33 14/10/2005 W-Agora 4.2.0 possibly prior versions Remote commands execution through quicklist.php and/or upload features by rgod site: http://rgod.altervista.org make these changes in php.ini if you have troubles t...
w-Agora 4.2.0 - 'quicklist.php' Remote Code Execution
?php --- wagora420xpl.php 13.33 14/10/2005 W-Agora 4.2.0 possibly prior versions Remote commands execution through quicklist.php and/or upload features by rgod site: http://rgod.altervista.org make these changes in php.ini if you have troubles to launch this script: allowcalltimepassreference = o...
lucid_cms_1011_expl.txt
Lucid CMS 1.0.11a remote commands execution Lucid CMS V 1.0.11a possibly prior versions remote commands executiona script by rgod at a href="http://rgod.altervi...
FlatNuke 2.5.5 (possibly prior versions) remote commands execution / cross site scripting / path disclosure (by rgod)
0.34 2005-08-05 FlatNuke 2.5.5 possibly prior versions remote commands execution / cross site scripting / path disclosure by rgod release date: 2005-07-20 software: author site: http://flatnuke.sourceforge.net/ path disclosure: http://target/path/themes/butterfly/structure.php supllying a null by...
silvernews203.txt
Silvernews 2.0.3 possibly previous versions SQL Injection / Login Bypass / Remote commands execution / cross site scripting software: author site: http://www.silver-scripts.de/scripts.php?l=en&script=SilverNews SQL Injection / Login bypass: A user can bypass admin password check, if magicquotes i...
Silvernews 2.0.3 (possibly previous versions ) SQL Injection / Login Bypass / Remote commands execution / cross site scripting
Silvernews 2.0.3 possibly previous versions SQL Injection / Login Bypass / Remote commands execution / cross site scripting software: author site: http://www.silver-scripts.de/scripts.php?l=en&script=SilverNews SQL Injection / Login bypass: A user can bypass admin password check, if magicquotes i...
xmlrpcAnti.pl.txt
Advisory : http://gulftech.org/?node=research&articleid=00088-07022005 ------------------------------------------------------- /| | | | | /\ | | / \ \ / / |\ | | / /\ \ \ | | / | | | || \ || | | | / /\ | \ || | / | | | ||/ || | || / \ | || || | / | | | || \ || | | / / \ \ | || || | / | | ||| ||...
Low: Red Hat Security Advisory: rsh security update
Updated rsh packages that fix a theoretical security issue are now available. This update has been rated as having low security impact by the Red Hat Security Response Team The rsh package contains a set of programs that allow users to run commands on remote machines, login to other machines, and...
rsh security update
CentOS Errata and Security Advisory CESA-2005:165 Updated rsh packages that fix various bugs and a theoretical security issue are now available. This update has been rated as having low security impact by the Red Hat Security Response Team The rsh package contains a set of programs that allow use...
Low: Red Hat Security Advisory: rsh security update
Updated rsh packages that fix various bugs and a theoretical security issue are now available. This update has been rated as having low security impact by the Red Hat Security Response Team The rsh package contains a set of programs that allow users to run commands on remote machines, login to...
MaxWebPortal < 1.360 Multiple Vulnerabilities
Binary data 2898.prm...
MaxWebPortal < 1.36 XSS and SQL Injection Vulnerabilities
Binary data 2783.prm...
HP-UX PHNE_16091 : s700_800 11.00 r-commands cumulative patch
s700800 11.00 r-commands cumulative patch : Various remote network commands have security defects. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE16091. The text itself is copyright C Hewlett-Packard...