6462 matches found
AutoDealer 2.0 - 'detail.asp?iPro' SQL Injection
Title : autoDealer = 2.0 iPro Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.aspsiteware.com $$ : $60.00 SQL--------------------------------------------------------- http://target/path//detail.asp?iPro=SQL Example:...
Enthrallweb ePhotos 1.0 (subLevel2.asp) SQL Injection Vulnerability
No description provided by source. Title : Enthrallweb ePhotos 1.0 subLevel2.asp Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 179.40 USD SQL---------------------------------------------------------...
Ananda Real Estate 3.4 - 'agent' SQL Injection
Title : Ananda Real Estate = 3.4 agent Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 179.40 USD SQL--------------------------------------------------------- http://target/path//list.asp?agent=SQL Example:...
Calendar MX BASIC <= 1.0.2 (ID) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================== Calendar MX BASIC = 1.0.2 ID Remote SQL Injection Vulnerability ================================================================== Title : Calendar MX BASIC = 1.0.2 ID Remo...
Mandrake Linux Security Advisory : heartbeat (MDKSA-2006:142)
Two vulnerabilities in heartbeat prior to 2.0.6 was discovered by Yan Rong Ge. The first is that heartbeat would set insecure permissions in an shmget call for shared memory, allowing a local attacker to cause an unspecified denial of service via unknown vectors CVE-2006-3815. The second is a...
[SECURITY] [DSA 1232-1] New clamav packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 1232-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 9th, 2006 http://www.debian.org/security/faq -...
SpotLight CRM 1.0 - login.asp SQL Injection
SpotLight CRM 1.0 - login.asp SQL Injection Title : SpotLight CRM 1.0 login.asp | Remote SQL Injection Vulnerability Author : ajann Contact : : $$$ : $2,499 SQL http://target/path//login.asp=POST SQL Example: - All User UserName And Password Changed "kro" // login.asp UserName: ';update login set...
LS-20060908 - Computer Associates BrightStor ARCserve Backup v11.5 Remote Buffer Overflow Vulnerability
LS-20060908 LSsec has discovered a vulnerability in Computer Associates BrightStor ARCserve Backup v11.5, which could be exploited by an anonymous attacker in order to execute arbitrary code with SYSTEM privileges on an affected system. The flaw specifically exists within the Tape Engine...
VUPlayer <= 2.44 m3u parsing remote buffer overflow
No description provided by source. / . \ \ \ \ | | / | | | | \ / / /\ \ / \ | | \ / | |/ | |/ / \ / \ | / \ // | Y / ^ /\ | //\ \ /| / / || /\ | \ | \ / / / / 30\11\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet...
WTcom <= 0.2.4-alpha (torrents.php) Remote SQL Injection Vulnerability
No description provided by source. WebTorrent WTcom Script = 0.2.4 ---------------------------------- Remote SQL Injection Every Username, Password and Email ---------------------------------- Author: sh1r081 sh1r081atgmail.com...
ZoneX 1.0.3 Publishers Gold Edition Remote File Inclusion Vulnerability
No description provided by source. ///////////////////CYBER-WARRiOR.ORG\\\\\\\\\\\ ZoneX 1.0.3 - Publishers Gold Edition Remote File Inclusion Vulnerability - Author: xoron - script: ZoneX 1.0.3 - Publishers Gold Edition - Class : Remote - cont@ct: x0r0nathotmaildotcom - CODE:...
Seditio <= 1.10 (pollid) Remote SQL Injection Vulnerability
Title : Seditio = 1.10 pollid Remote SQL Injection Vulnerability Author : ajann Contact : : Dork : "Powered by Seditio" SQL------------------------------------------------------ http://target/path/polls.php?id= Example: //...
Basic Forum <= 1.1 (edit.asp) Remote SQL Injection Vulnerability
No description provided by source. Title : basicforum v 1.1 edit.asp Remote SQL Injection Vulnerability Author : bolivar Dork : "This script created by www.script.canavari.com" ---------------------------------------------------------------------------...
Basic Forum 1.1 - 'edit.asp' SQL Injection
Title : basicforum v 1.1 edit.asp Remote SQL Injection Vulnerability Author : bolivar Dork : "This script created by www.script.canavari.com" ---------------------------------------------------------------------------...
fipsGallery <= 1.5 (index1.asp) Remote SQL Injection Vulnerability
No description provided by source. Title : fipsGallery = v1.5 index1.asp Remote SQL Injection Vulnerability Author : ajann Contact : : $$$ : 29 Euro http://target/path//index1.asp?what=artists&which=SQL Example:...
ASPNuke 0.80 - register.asp SQL Injection
ASPNuke 0.80 - register.asp SQL Injection Title : ASPNuke = 0.80 register.asp Remote SQL Injection Vulnerability Author : ajann S.Page : http://www.aspnuke.com D.Page : http://sourceforge.net/project/showfiles.php?groupid=92470...
dev_wms => 1.5 Remote File Include Vulnerabilities
""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ DigitaL Hacking TeaM devwms =...
upublisher-10.txt
Title : UPublisher 1.0 viewarticle.asp Remote SQL Injection Vulnerability Author : ajann Dork : UPublisher http://target/path//viewarticle.asp?ID=SQL Example: //viewarticle.asp?ID=-1%20union%20select%200,password,username,0,0,0,0%20from%20tblusers OR ---...
PT-2006-1005 · Proftpd +1 · Proftpd +1
Name of the Vulnerable Software and Affected Versions: ProFTPD versions 1.3.0a and earlier Description: The issue is related to the improper setting of the buffer size limit when CommandBufferSize is specified in the configuration file, potentially leading to an off-by-two buffer underflow...
[Full-disclosure] [SECURITY] [DSA 1204-1] New ingo1 packages fix arbitrary shell command execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1204-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 2nd, 2006 http://www.debian.org/security/faq -...