Xion Audio Player 1.0 121 - .m3u Remote Buffer Overflow (1)

Xion Audio Player 1.0 121 - .m3u Remote Buffer Overflow 1 Vulnerability : Xion Audio Player Local BOF Discovered by : Dragon Rider http://securityreason.com/exploitalert/7392 drag0n.riderathotmail.com Sploit written by : corelanc0d3r corelanc0d3ratgmaildotcom Sploit released : nov 3rd, 2009 Type ...

Xion Audio Player 1.0 121 - '.m3u' Remote Buffer Overflow (1)

Vulnerability : Xion Audio Player Local BOF Discovered by : Dragon Rider http://securityreason.com/exploitalert/7392 drag0n.riderathotmail.com Sploit written by : corelanc0d3r corelanc0d3ratgmaildotcom Sploit released : nov 3rd, 2009 Type : local and remote code execution OS : Windows Product :...

Xion Audio Player .m3u Buffer Overflow

!/usr/bin/perl ===================================== Xion Audio Player.m3u File Local buffer Overflow PoC download:http://www.brothersoft.com/xion-audio-player-download-49404.html ===================================== Author:Dragon Rider contact:drag0n.riderathotmail.com...

Xion Audio Player 1.0 121 m3u file buffer overflow

No description provided by source. !/usr/bin/perl ===================================== Xion Audio Player.m3u File Local buffer Overflow PoC download:http://www.brothersoft.com/xion-audio-player-download-49404.html ===================================== Author:Dragon Rider...

Xion Audio Player 1.0 121 - .m3u Local Buffer Overflow (2)

Xion Audio Player 1.0 121 - .m3u Local Buffer Overflow 2 !/usr/bin/perl ===================================== Xion Audio Player.m3u File Local buffer Overflow PoC download:http://www.brothersoft.com/xion-audio-player-download-49404.html ===================================== Author:Dragon Rider...

Authentication flaw

Text Rider 2.4 allows attackers to bypass authentication and upload files without providing a valid password by obtaining the MD5 hash of the password possibly via another vulnerability that reads it from a data file, then including the hash in a cookie...

CVE-2006-0440

Text Rider 2.4 allows attackers to bypass authentication and upload files without providing a valid password by obtaining the MD5 hash of the password possibly via another vulnerability that reads it from a data file, then including the hash in a cookie...

CVE-2006-0440

Text Rider 2.4 is affected by an authentication-bypass vulnerability: an attacker can obtain the MD5 hash of the password (potentially from another vulnerability that reads it from a data file) and include the hash in a cookie to bypass login and upload files without a valid password. The descrip...

CVE-2006-0439

Text Rider 2.4 stores sensitive data in the data directory under the web document root with insufficient access control, which allows remote attackers to obtain usernames and password hashes by directly accessing data/userlist.txt...

CVE-2006-0440

Text Rider 2.4 allows attackers to bypass authentication and upload files without providing a valid password by obtaining the MD5 hash of the password possibly via another vulnerability that reads it from a data file, then including the hash in a cookie...

[eVuln] Text Rider Sensitive Information Disclosure

New eVuln Advisory: Text Rider Sensitive Information Disclosure http://evuln.com/vulns/46/summary.html --------------------Summary---------------- Software: Text Rider Sowtware's Web Site: http://robot.ir/blog/mollasadra/textrider/ Versions: 2.4 Critical Level: Dangerous Type: Sensitive Informati...

CVE-2006-0440: Undefined Security Weakness

Text Rider 2.4 allows attackers to bypass authentication and upload files without providing a valid password by obtaining the MD5 hash of the password possibly via another vulnerability that reads it from a data file, then including the hash in a cookie...

CVE-2006-0439: Undefined Security Weakness

Text Rider 2.4 stores sensitive data in the data directory under the web document root with insufficient access control, which allows remote attackers to obtain usernames and password hashes by directly accessing data/userlist.txt...

ASPrider16.txt

Vendor : http://www.asp-rider.com Vulnerable Versions : 1.6 Where is the bug ---------------------- in default.asp : refsss=splitrefererssss, "/",-1,1 refererdomain=refsss2 strsql="Select From tblrefererd where domain='" & refererdomain & "'" objrs.open strsql, objconn,3,3 ----------------------...

CVE-2005-3931

CVE-2005-3931 : A SQL injection flaw exists in default.asp of ASP-Rider 1.6 , allowing remote attackers to inject arbitrary SQL commands via the HTTP Referer. The vulnerability targets the input handling in that page/file, enabling unauthorized data access or manipulation as described in the publ...

CVE-2005-3931

SQL injection vulnerability in default.asp in ASP-Rider 1.6 allows remote attackers to execute arbitrary SQL commands via the HTTP referer...

CVE-2005-3931

SQL injection vulnerability in default.asp in ASP-Rider 1.6 allows remote attackers to execute arbitrary SQL commands via the HTTP referer...

CVE-2005-3931: Undefined Security Weakness

SQL injection vulnerability in default.asp in ASP-Rider 1.6 allows remote attackers to execute arbitrary SQL commands via the HTTP referer...

ASP-Rider Default.asp SQL Injection

Vendor : http://www.asp-rider.com Vulnerable Versions : 1.6 Where is the bug ---------------------- in default.asp : refsss=splitrefererssss, "/",-1,1 refererdomain=refsss2 strsql="Select From tblrefererd where domain='" & refererdomain & "'" objrs.open strsql, objconn,3,3 ----------------------...

ASP-Rider 1.6 - default.asp SQL Injection

ASP-Rider 1.6 - default.asp SQL Injection source: https://www.securityfocus.com/bid/15617/info ASP-Rider is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...