459 matches found
slidepopups-sql.txt
11/07/2008 - You can login as admin with any password, removed /str0ke -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= E-topbiz Slide Popups v1.0 Auth Bypass SQL Injection Vulnerabilities...
E-topbiz Slide Popups 1.0 (Auth Bypass) SQL Injection Vuln
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= E-topbiz Slide Popups v1.0 Auth Bypass SQL Injection Vulnerabilities -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Script: Saphp S...
CVE-2008-2422: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in Web Slider 0.6 allows remote attackers to execute arbitrary SQL commands via the slide parameter in a slides action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Path traversal
Absolute path traversal vulnerability in Apache Jakarta Slide 2.1 and earlier allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag, a related issue to CVE-2007-5461...
CVE-2007-5731
Absolute path traversal vulnerability in Apache Jakarta Slide 2.1 and earlier allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag, a related issue to CVE-2007-5461...
CVE-2007-5731
Absolute path traversal vulnerability in Apache Jakarta Slide 2.1 and earlier allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag, a related issue to CVE-2007-5461...
CVE-2007-5731
CVE-2007-5731: Absolute path traversal in Apache Jakarta Slide (2.1 and earlier) via WebDAV write with a SYSTEM-tag entity allows remote authenticated users to read arbitrary files. Base access requires authentication; impact is partial confidentiality breach. The provided documents do not specif...
CVE-2007-5731: Improper Limitation of a Pathname to a Restricted Directory
Absolute path traversal vulnerability in Apache Jakarta Slide 2.1 and earlier allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag, a related issue to CVE-2007-5461...
Jakarta Slide <= 2.1 RC1 Remote File Disclosure Exploit
Exploit for multiple platform in category remote exploits ======================================================= Jakarta Slide username password\n"; print "example: perl JAKARTAXPL www.hostname.com /slide/users/guest /etc/passwd guest guest\n";exit; if $ARGV newPeerAddr = $hostname, PeerPort =...
Jakarta Slide 2.1 RC1 - Remote File Disclosure
Jakarta Slide 2.1 RC1 - Remote File Disclosure !/usr/bin/perl Jakarta Slide Remote File Disclosure Zeroday Xploit eliteb0y / 2007 thanx to the whole team & andi : +++KEEP PRIV8+++ This Bug may reside in different WebDav implementations, Warp your mind! +You will need auth for the exploit to work...
Jakarta Slide 2.1 RC1 - Remote File Disclosure
!/usr/bin/perl Jakarta Slide Remote File Disclosure Zeroday Xploit eliteb0y / 2007 thanx to the whole team & andi : +++KEEP PRIV8+++ This Bug may reside in different WebDav implementations, Warp your mind! +You will need auth for the exploit to work... use IO::Socket; use MIME::Base64; FIXME! May...
Remote file inclusion
PHP remote file inclusion vulnerability in admin.slideshow1.php in the Flash Slide Show comslideshow component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter...
CVE-2007-5065
CVE-2007-5065 : A PHP remote file inclusion vulnerability exists in Joomla!’s Flash Slide Show (com_slideshow) component, specifically in admin.slideshow1.php, where an attacker can abuse the mosConfig_live_site parameter to execute arbitrary PHP code remotely. This vulnerability affects the Joom...
CVE-2007-5065: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in admin.slideshow1.php in the Flash Slide Show comslideshow component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter...
Joomla Component com_slideshow Remote File Inclusion Vulnerability
No description provided by source. --==+=================== Electronic Security Team www.Yee7.com ====================+==-- --==+ Joomla Component Flash Slide Show admin.slideshow1.php - RFI +==-- --==+================================================================================+==-- Script...
CVE-2006-3435: Improper Control of Generation of Code
PowerPoint in Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac does not properly parse the slide notes field in a document, which allows remote user-assisted attackers to execute arbitrary code via crafted data in this field, which triggers an erroneous object pointer calculation th...
Microsoft PowerPoint Malformed Slide Notes Rebuilding Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft Office. Exploitation requires that the attacker coerce the target user into opening a malicious .PPT file. The specific flaw exists during the parsing of a malformed slide notes field within the...
UNIX 7th Edition binmkdir - Local Buffer Overflow
UNIX 7th Edition binmkdir - Local Buffer Overflow / Exploit for /bin/mkdir Unix V7 PDP-11. mkdir has a buffer overflow when checking if the directory in /arg/with/slashes/fname exists. This will run /bin/sh with euid 0, but not uid 0. Since the shell doesn't do anything special about this, we don...
