6466 matches found
MixedCMS 1.0 LFI / Shell Upload / Bypass
---------------------------------------------------- MULTIPLE REMOTE VULNERABILITIES Mixed CMS 1.0 ---------------------------------------------------- CMS INFORMATION: --WEB: http://sourceforge.net/projects/mixedcms/ --DOWNLOAD: http://sourceforge.net/projects/mixedcms/ --DEMO: N/A --CATEGORY: C...
e107 Plugin userjournals_menu (blog.id) SQL Injection Vulnerability
No description provided by source. e107 Plugin userjournalsmenu blog.id SQL injection vulnerability Author : boom3rang Greetz : H!tm@N, KHG, chs, redc00de Vulnerability : Remote SQL-injection Google Dork : inurl:"userjournals.php?blog." -------------------------------------------------- ! Product...
FreznoShop 1.3.0 (id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ======================================================== FreznoShop 1.3.0 id Remote SQL Injection Vulnerability ========================================================...
FTPDMIN 'RNFR' Command Buffer Overflow Vulnerability
According to its version number, the remote version of Ftpdmin is prone to a buffer-overflow vulnerability. A successful exploit may allow attackers to execute arbitrary code in the context of the vulnerable service. Failed exploit attempts will likely cause denial-of-service conditions. OpenVAS...
[SECURITY] [DSA 1768-1] New openafs packages potential code execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1768-1 [email protected] http://www.debian.org/security/ Florian Weimer April 10, 2009 http://www.debian.org/security/faq -...
IBM Bladecenter Advanced Management Module 1.42 - Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/34447/info IBM BladeCenter Advanced Management Module is prone to the following remote vulnerabilities: - An HTML-injection vulnerability - A cross-site scripting vulnerability - An information-disclosure vulnerability - Multiple cross-site request-forger...
DEBIAN-CVE-2008-6621
Unspecified vulnerability in GraphicsMagick before 1.2.3 allows remote attackers to cause a denial of service crash via unspecified vectors in DPX images. NOTE: some of these details are obtained from third party information...
MyioSoft Ajax Portal 3.0 (page) SQL Injection Vulnerability
No description provided by source. AjaxPortal 3.0 ajaxpbackend.php page Remote SQL Injection Vulnerability Bug found && Exploited by cOndemned Greetz: ZaBeaTy, d2, Beowulf, str0ke, Alfons Luja, 0in and others Proof of Concept :...
XBMC 8.10 Tag Overflow
!/usr/bin/env python ''' Xbmc get tag from file name request remote buffer overflow 8.10 !!! Tested:Win xp sp2 eng Vendor url:http://xbmc.org/ versions affected: Linux windows tested other versions are also possibly affected. Release date:April the 1st 2009 Restrictions:No filtering needed. This...
CVE-2009-0841
Directory traversal vulnerability in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when running on Windows with Cygwin, allows remote attackers to create arbitrary files via a .. dot dot in the id parameter...
[SECURITY] [DSA 1757-1] New auth2db packages fix SQL injection
------------------------------------------------------------------------ Debian Security Advisory DSA-1757-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 30, 2009 http://www.debian.org/security/faq -...
BandSite CMS 1.1.4 - 'members.php' SQL Injection
BandSite CMS 1.1.4 SQL/Upload Shell Multiple Remote Vulnerabilites + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Remote SQL Injection - The script is full of SQLI bugs.This is one of them. - Vulnerable code in includes\content\membercontent.php...
iWare CMS 5.0.4 Multiple Remote SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ============================================================= iWare CMS 5.0.4 Multiple Remote SQL Injection Vulnerabilities ============================================================= CMS IWARE 5.0.4 REMOTE SQL-injection vulnerability...
Simply Classified <= 0.2 SQLi Vulnerability - Active Check
Simply Classified is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
KLA10286 WLF vulnerability in Orbit Downloader
An argument injection vulnerability was found in Orbit Downloader. By exploiting this vulnerability malicious users can overwrite arbitrary files. This vulnerability can be exploited remotely via a specially designed method call. Original advisories - Exploitation Public exploits exist for this...
Comparison Engine Power <= 1.0 SQLi Vulnerability - Active Check
Comparison Engine Power is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...
[ECHO_ADV_106$2009] FireAnt <= 1.3 Critical File Disclosure Vulnerability
ECHOADV106$2009 ----------------------------------------------------------------------------------------- ECHOADV106$2009 FireAnt = 1.3 Critical File Disclosure Vulnerability ----------------------------------------------------------------------------------------- Author : K-159 Date : March, 16 ...
ComicShout <= 2.8 SQLi Vulnerability - Active Check
ComicShout is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
PHPRecipeBook 2.24 - base_id SQL Injection
PHPRecipeBook 2.24 - baseid SQL Injection + PHPRecipeBook 2.24 idRemort SQL Injection Vulnerability - + Discovered By d3b4g + script: http://phprecipebook.sourceforge.net/demo/phprecipebook/ + Greetz : str0ke | Inerd | & friends - Follow me on twitter www.twitter.com/schaba About: ------...
taifajobs <= 1.0 (jobid) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications =========================================================== taifajobs = 1.0 jobid Remote SQL Injection Vulnerability ===========================================================...