CVE-2018-1070

routing before version 3.10 is vulnerable to an improper input validation of the Openshift Routing configuration which can cause an entire shard to be brought down. A malicious user can use this vulnerability to cause a Denial of Service attack for other users of the router shard...

Hex : Shard of Fate 1.0.1.026 - Unquoted Path Privilege Escalation

Hex : Shard of Fate 1.0.1.026 - Unquoted Path Privilege Escalation ----------------------------------------------------------------------------------------------------------------- Exploit Title: Hex : Shard of Fate 1.0.1.026 - Privilege Escalation Unquoted path vulnerability Date: 15/05/2016...

HEX: Shards of Fate 1.0.1.026 - Unquoted Path Privilege Escalation

Exploit for windows platform in category local exploits ----------------------------------------------------------------------------------------------------------------- Exploit Title: Hex : Shard of Fate 1.0.1.026 - Privilege Escalation Unquoted path vulnerability Date: 15/05/2016 Exploit Author...

Hex: Shard Of Fate 1.0.1.026 Privilege Escalation

----------------------------------------------------------------------------------------------------------------- Exploit Title: Hex : Shard of Fate 1.0.1.026 - Privilege Escalation Unquoted path vulnerability Date: 15/05/2016 Exploit Author : Cyril Vallicari Vendor Homepage: http://gameforge.com...

Hex : Shard of Fate 1.0.1.026 - Unquoted Path Privilege Escalation

----------------------------------------------------------------------------------------------------------------- Exploit Title: Hex : Shard of Fate 1.0.1.026 - Privilege Escalation Unquoted path vulnerability Date: 15/05/2016 Exploit Author : Cyril Vallicari Vendor Homepage: http://gameforge.com...

CVE-2006-3065

SQL injection vulnerability in engine/shards/blog.php in blur6ex 0.3.462 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a procreply action in the blog shard. NOTE: This is a similar vulnerability to CVE-2006-1763, but the affected code and versions are different...

CVE-2006-3065

CVE-2006-3065 is a SQL injection vulnerability in blur6ex 0.3.462 affecting engine/shards/blog.php. The flaw allows remote attackers to inject arbitrary SQL via the ID parameter in a proc_reply action on the blog shard. The description notes similarity to CVE-2006-1763 but cites different affecte...

Sql injection

Multiple SQL injection vulnerabilities in index.php in blur6ex 0.3.452 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a 1 greply or 2 gpermaPost action to the blog shard engine/shards/blog.php, or a 3 gviewContent action to the content shard...

CVE-2006-1763

Multiple SQL injection vulnerabilities in index.php in blur6ex 0.3.452 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a 1 greply or 2 gpermaPost action to the blog shard engine/shards/blog.php, or a 3 gviewContent action to the content shard...

CVE-2006-1762

Directory traversal vulnerability in index.php in blur6ex 0.3.452 allows remote attackers to include arbitrary files via the shard parameter. NOTE: this issue can be exploited to produce resultant XSS when the parameter has XSS manipulations, and path disclosure with other invalid values...

Directory traversal

Directory traversal vulnerability in index.php in blur6ex 0.3.452 allows remote attackers to include arbitrary files via the shard parameter. NOTE: this issue can be exploited to produce resultant XSS when the parameter has XSS manipulations, and path disclosure with other invalid values...

CVE-2006-1761

Cross-site scripting vulnerability in index.php in blur6ex 0.3.452 allows remote attackers to inject arbitrary web script or HTML via the errormsg parameter, which is not sanitized in the error message. NOTE: the vector in the shard parameter is not XSS and has been assigned a separate name...

CVE-2006-1763

Multiple SQL injection vulnerabilities in index.php in blur6ex 0.3.452 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a 1 greply or 2 gpermaPost action to the blog shard engine/shards/blog.php, or a 3 gviewContent action to the content shard...

CVE-2006-1763

Summary (CVE-2006-1763) : Multiple SQL injection vulnerabilities in blur6ex v0.3.452 allow remote attackers to execute arbitrary SQL commands via the ID parameter in blog and content shards. Specifically, the issues affect engine/shards/blog.php (actions g_reply, g_permaPost) and engine/shards/co...