Lucene search
+L

3521 matches found

exploitpack
exploitpack
•added 2007/04/01 12:00 a.m.•21 views

WinMail Server 4.4 build 1124 - WebMail Remote Add Super User

WinMail Server 4.4 build 1124 - WebMail Remote Add Super User tempfolder."sessions/".$this-sid.".sess"; if!fileexists$sessionfile return false; $size = filesize$sessionfile; $fp = fopen$sessionfile, "rb"; if $fp $result = fread$fp, $size; fclose$fp; $result = unserializebase64decode$result; retur...

7.5AI score
SaveExploits0
myhack58
myhack58
•added 2007/03/11 12:00 a.m.•33 views

Teach you simple methods to easily crack the super bodyguard of password-vulnerability warning-the black bar safety net

Super bouncer from the market since it is by the majority of computer enthusiasts of welcome, which the disk protection function is amazing, there is one sentence say is“it has Cons”, so powerful function must also have the Cons side. If you forget your super bodyguard system administrator...

0.6AI score
SaveExploits0
seebug.org
seebug.org
•added 2007/02/28 12:00 a.m.•21 views

vBulletin <= 3.6.4 (inlinemod.php postids) Remote SQL Injection Exploit

No description provided by source. ?php printr' ----------------------------------------------------------------------------- vBulletin = 3.6.4 inlinemod.php "postids" sql injection / privilege escalation by session hijacking exploit by rgod mail: retrog at alice dot it site:...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2007/02/28 12:00 a.m.•17 views

vBulletin 3.6.4 - inlinemod.php?postids SQL Injection

vBulletin 3.6.4 - inlinemod.php?postids SQL Injection input-cleanarraygpc'p', array 'postids' = TYPESTR, ; $postids = exp...

0.5AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2007/02/28 12:00 a.m.•44 views

vBulletin 3.6.4 - 'inlinemod.php?postids' SQL Injection

input-cleanarraygpc'p', array 'postids' = TYPESTR, ; $postids = explode',', $vbulletin-GPC'postids'; foreach $pos...

7.5CVSS5.8AI score0.01321EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2007/02/27 12:00 a.m.•39 views

Fedora Core 5 : php-5.1.6-1.4 (2007-287)

This update fixes a number of security issues in PHP. A number of buffer overflow flaws were found in the PHP session extension, the strreplace function, and the imapmailcompose function. If very long strings under the control of an attacker are passed to the strreplace function then an integer...

10CVSS6.8AI score0.12197EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
•added 2007/02/26 9:49 a.m.•13 views

Important: Red Hat Security Advisory: php security update for Stronghold

Updated PHP packages that fix multiple security issues are now available for Stronghold 4.0 for Enterprise Linux. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web...

10CVSS6.5AI score0.12197EPSS
SaveExploits6References2
RedHat Linux
RedHat Linux
•added 2007/02/26 9:49 a.m.•12 views

security flaw

Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via unspecified vectors...

10CVSS5.8AI score0.03402EPSS
SaveExploits0References4
Cent OS
Cent OS
•added 2007/02/25 6:02 a.m.•94 views

php security update

CentOS Errata and Security Advisory CESA-2007:0081-01 Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting...

10CVSS6.3AI score0.12197EPSS
SaveExploits6References8
NVD
NVD
•added 2007/02/23 3:28 a.m.•28 views

CVE-2006-7034

SQL injection vulnerability in directory.php in Super Link Exchange Script 1.0 might allow remote attackers to execute arbitrary SQL queries via the cat parameter...

7.5CVSS8.2AI score0.01105EPSS
SaveExploits0References3
NVD
NVD
•added 2007/02/23 3:28 a.m.•25 views

CVE-2006-7033

Cross-site scripting XSS vulnerability in Super Link Exchange Script 1.0 allows remote attackers to inject arbitrary web script or HTML via IMG tags in the search box...

6.8CVSS5.7AI score0.01191EPSS
SaveExploits0References3
CVE
CVE
•added 2007/02/23 1:00 a.m.•58 views

CVE-2006-7033

The CVE-2006-7033 entry describes a Cross-site Scripting (XSS) vulnerability in Super Link Exchange Script 1.0. The flaw allows remote attackers to inject arbitrary web script or HTML through IMG tags in the search box. This affects the vulnerable component (the search input handling in Super Lin...

6.8CVSS5.9AI score0.01191EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2007/02/23 1:00 a.m.•29 views

CVE-2006-7034

SQL injection vulnerability in directory.php in Super Link Exchange Script 1.0 might allow remote attackers to execute arbitrary SQL queries via the cat parameter...

8.2AI score0.01105EPSS
SaveExploits0References3
CVE
CVE
•added 2007/02/23 1:00 a.m.•65 views

CVE-2006-7035

The CVE concerns a directory traversal in the Make_thumbnail.php script of the Super Link Exchange Script 1.0. The vulnerability arises from unsafely handling the imgpath parameter, allowing remote attackers to traverse directories (“..” sequences) and read arbitrary files. Affected software: Sup...

7.8CVSS7.1AI score0.01819EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2007/02/23 1:00 a.m.•33 views

CVE-2006-7033

Cross-site scripting XSS vulnerability in Super Link Exchange Script 1.0 allows remote attackers to inject arbitrary web script or HTML via IMG tags in the search box...

5.7AI score0.01191EPSS
SaveExploits0References3
CVE
CVE
•added 2007/02/23 1:00 a.m.•68 views

CVE-2006-7034

CVE-2006-7034 corresponds to an SQL injection in the Super Link Exchange Script 1.0, specifically via the cat parameter in directory.php. The underlying flaw is unsanitized user input in the SQL query construction, enabling remote attackers to execute arbitrary SQL commands. The CVSS v2 base scor...

7.5CVSS8.6AI score0.01105EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2007/02/23 1:00 a.m.•37 views

CVE-2006-7035

Directory traversal vulnerability in makethumbnail.php in Super Link Exchange Script 1.0 allows remote attackers to read arbitrary files via ".." sequences in the imgpath parameter...

6.7AI score0.01819EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/02/23 12:00 a.m.•5 views

CVE-2006-7034: Undefined Security Weakness

SQL injection vulnerability in directory.php in Super Link Exchange Script 1.0 might allow remote attackers to execute arbitrary SQL queries via the cat parameter...

7.5CVSS6.4AI score0.01105EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/02/23 12:00 a.m.•3 views

CVE-2006-7035: Undefined Security Weakness

Directory traversal vulnerability in makethumbnail.php in Super Link Exchange Script 1.0 allows remote attackers to read arbitrary files via ".." sequences in the imgpath parameter...

7.8CVSS6AI score0.01819EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/02/23 12:00 a.m.•4 views

CVE-2006-7033: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Super Link Exchange Script 1.0 allows remote attackers to inject arbitrary web script or HTML via IMG tags in the search box...

6.8CVSS6AI score0.01191EPSS
SaveExploits0References1
Rows per page
Query Builder