TransLucid 1.75 (fckeditor) Remote Arbitrary File Upload

www.BugReport.ir AmnPardaz Security Research Team Title: TransLucid 1.75 fckeditor Remote Arbitrary File Upload Vendor: www.translucidonline.com Vulnerable Version: 1.75 prior versions also may be affected Exploitation: Remote with browser Exploit: Available Impact: Medium Fix: N/A Original...

Secunia Research: Novell iPrint Client nipplib.dll "IppCreateServerRef()" Buffer Overflow

====================================================================== Secunia Research 03/09/2008 - Novell iPrint Client - - nipplib.dll "IppCreateServerRef" Buffer Overflow - ====================================================================== Table of Contents Affected...

TransLucid 1.75 - 'FCKeditor' Arbitrary File Upload

www.BugReport.ir AmnPardaz Security Research Team Title: TransLucid 1.75 fckeditor Remote Arbitrary File Upload Vendor: www.translucidonline.com Vulnerable Version: 1.75 prior versions also may be affected Exploitation: Remote with browser Exploit: Available Impact: Medium Fix: N/A Original...

TransLucid 1.75 - FCKeditor Arbitrary File Upload

TransLucid 1.75 - FCKeditor Arbitrary File Upload www.BugReport.ir AmnPardaz Security Research Team Title: TransLucid 1.75 fckeditor Remote Arbitrary File Upload Vendor: www.translucidonline.com Vulnerable Version: 1.75 prior versions also may be affected Exploitation: Remote with browser Exploit...

crafty-sql.txt

GulfTech Security Research August 25, 2008 Vendor : Eric Gerdes URL : http://www.craftysyntax.com Version : Crafty Syntax Live Help = 2.14.6 Risk : SQL Injection Description: Crafty Syntax Live Help is a full featured, open source, online support system written in php that allows the visitors of ...

[DSECRG-08-038] Multiple Local File Include Vulnerabilities in ezContents CMS 2.0.3

Digital Security Research Group DSecRG Advisory DSECRG-08-038 Application: ezContents CMS Versions Affected: 2.0.3 Application URL: http://www.ezcontents.org/ Vendor URL: http://www.visualshapers.com/ Bug: Multiple Local File Include Exploits: YES Reported: 05.08.2008 Second report: 18.08.2008...

Crafty Syntax Live Help 2.14.6 - department SQL Injection

Crafty Syntax Live Help 2.14.6 - department SQL Injection Crafty Syntax Live Help = 2.14.6 SQL Injection August 25, 2008 Vendor : Eric Gerdes URL : http://www.craftysyntax.com Version : Crafty Syntax Live Help = 2.14.6 Risk : SQL Injection Description: Crafty Syntax Live Help is a full featured,...

Secunia Research: Trend Micro Products Web Management Authentication Bypass

====================================================================== Secunia Research 22/08/2008 - Trend Micro Products Web Management Authentication Bypass - ====================================================================== Table of Contents Affected...

EZContents CMS 2.0.3 - Multiple Local File Inclusions

Digital Security Research Group DSecRG Advisory DSECRG-08-038 Application: ezContents CMS Versions Affected: 2.0.3 Application URL: http://www.ezcontents.org/ Vendor URL: http://www.visualshapers.com/ Bug: Multiple Local File Include Exploits: YES Reported: 05.08.2008 Second report: 18.08.2008...

Dana IRC 1.4a - Remote Buffer Overflow

!/usr/bin/perl ksOSe - 08/24/2008 This is a useless and not portable exploit code, tested only on my winxp-sp3 VM. I was looking for a vuln to write an exploit for when I found this PoC: http://www.milw0rm.com/exploits/5817 The author wrote: "The reason why there isnt any shellcode here is becaus...

EZContents CMS 2.0.3 - Multiple Local File Inclusions

EZContents CMS 2.0.3 - Multiple Local File Inclusions Digital Security Research Group DSecRG Advisory DSECRG-08-038 Application: ezContents CMS Versions Affected: 2.0.3 Application URL: http://www.ezcontents.org/ Vendor URL: http://www.visualshapers.com/ Bug: Multiple Local File Include Exploits:...

ezContents CMS 2.0.3 Multiple Local File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== ezContents CMS 2.0.3 Multiple Local File Inclusion Vulnerabilities ================================================================== Digital Security Research Group DSecRG...

SunShop Shopping Cart 4.1.4 - 'id' SQL Injection

GulfTech Security Research August 18, 2008 Vendor : Turnkey Web Tools, Inc URL : http://www.turnkeywebtools.com Version : SunShop queryfirst"SELECT FROM ".$dbprefix."usersregistry WHERE id='".$POSTid."' AND userid='".$sess-gvar'userid'."'"; $data = filterdata$data; $out =...

SunShop Shopping Cart 4.1.4 - id SQL Injection

SunShop Shopping Cart 4.1.4 - id SQL Injection GulfTech Security Research August 18, 2008 Vendor : Turnkey Web Tools, Inc URL : http://www.turnkeywebtools.com Version : SunShop queryfirst"SELECT FROM ".$dbprefix."usersregistry WHERE id='".$POSTid."' AND userid='".$sess-gvar'userid'."'"; $data =...

linux/x86 writes a php connectback shell to the fs 508 bytes

No description provided by source. include stdlib.h / Grayscale Research: Linux Write FS PHP Connect Back Utility Shellcode Function: Opens /var/www/cb.php and writes a php connectback shell to the filesystem. Shellcode Size: 508 bytes No Encodings PHP Shell Usage: // victim...

DSECRG-08-036.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-036 Application: Freeway eCommerce Versions Affected: 1.4.1.171 Vendor URL: http://www.openfreeway.org/ Bugs: RFI, Multiple LFI, XSS Exploits: YES Reported: 27.06.2008 Second report: 04.07.2008 Vendor response: 06.07.2008 Solution: YES Dat...

SunShop <= 4.1.4 (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== SunShop queryfirst"SELECT FROM ".$dbprefix."usersr...

sunshop414-sql.txt

GulfTech Security Research August 18, 2008 Vendor : Turnkey Web Tools, Inc URL : http://www.turnkeywebtools.com Version : SunShop queryfirst"SELECT FROM ".$dbprefix."usersregistry WHERE id='".$POSTid."' AND userid='".$sess-gvar'userid'."'"; $data = filterdata$data; $out =...

linux/x86 - writes a php connectback shell to the fs 508 bytes

linux/x86 writes a php connectback shell to the fs 508 bytes. Shellcode exploit for linx86 platform include / Grayscale Research: Linux Write FS PHP Connect Back Utility Shellcode Function: Opens /var/www/cb.php and writes a php connectback shell to the filesystem. Shellcode Size: 508 bytes No...

phplivehelper-sqlexec.txt

GulfTech Security Research August 16, 2008 Vendor : Turnkey Web Tools, Inc URL : http://www.turnkeywebtools.com Version : PHP Live Helper DBsite-queryfirst"SELECT FROM ". $this-dbprefix.$table." where ".$from."='$id'"; if isarray$result foreach $result as $key = $val $info$key = stripslashes$val;...