3780 matches found
Three minutes to get to the hidden administrator account-vulnerability warning-the black bar safety net
On the regedit. exe everyone is familiar with, but not to the registry key set permissions, regedt32. exe the biggest advantages is the ability to the registry key set permissions. nt/2 0 0 0/xp account information in the registry of HKEYLOCALMACHINE＼SAM＼SAM key, but in addition to the system use...
Format string
frame.html in Aida-Web Aida Web allows remote attackers to bypass a protection mechanism and obtain comment and task details via modified values to the 1 Mehr and 2 SUPER parameters...
CVE-2007-6056
frame.html in Aida-Web Aida Web allows remote attackers to bypass a protection mechanism and obtain comment and task details via modified values to the 1 Mehr and 2 SUPER parameters...
CVE-2002-2420
sitesearcher.cgi in Super Site Searcher allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter...
CVE-2002-2420
The CVE-2002-2420 entry describes a remote command execution vulnerability in site_searcher.cgi (Super Site Searcher) that allows an attacker to execute arbitrary shell commands via metacharacters in the page parameter. Connected documents corroborate the basic description but do not provide conc...
CVE-2002-2420: Improper Input Validation
sitesearcher.cgi in Super Site Searcher allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter...
Hidden administrator account the three minutes to get-vulnerability warning-the black bar safety net
On the regedit. exe everyone is familiar with, but not to the registry key set permissions, regedt32. exe the biggest advantages is the ability to the registry key set permissions. nt/2 0 0 0/xp account information in the registry HKEYLOCALMACHINE\SAM\SAM key, but in addition to the system user...
The history of the most simple Windows System Password rescue-vulnerability warning-the black bar safety net
Forgot Windows login password? On the Internet about solution are numerous, but after trying you will find that many methods are simply not effective, and some may even cause the system to collapse completely. By the author in Windows 2 0 0 0 and Windows XP in the repeated research and testing,...
CVE-2007-3620: Undefined Security Weakness
Multiple directory traversal vulnerabilities in Maia Mailguard 1.0.2 and earlier might allow remote attackers to read arbitrary files via a .. dot dot in the 1 prevlang and 2 super parameters to a php/login.php; the 3 charset parameter to a php/login.php, b php/internal-init.php, and c...
Web Thunder(xunlei)0day vulnerability-exposure-vulnerability warning-the black bar safety net
First, the event analysis: DSW Lab AVERT panel monitor to a high risk of hearing ray vulnerability is the exposure, the vulnerability occurs in the Web thunder of one of the controls, when you install Web thunder of the user in browsing hacker carefully constructed to contain malicious code of a...
Hidden administrator account the three minutes to get-vulnerability warning-the black bar safety net
On the regedit. exe everyone is familiar with, but not to the registry key set permissions, regedt32. exe the biggest advantages is the ability to the registry key set permissions. nt/2 0 0 0/xp account information in the registry HKEYLOCALMACHINE\SAM\SAM key, but in addition to the system user...
Cross site scripting
Dynamic variable evaluation vulnerability in shared/config/cpconfig.php in All In One Control Panel AIOCP before 1.3.016 allows remote attackers to conduct cross-site scripting XSS and possibly other attacks via the SERVER superglobal array. NOTE: some of these details are obtained from third par...
php -- multiple vulnerabilities
The PHP development team reports: Security Enhancements and Fixes in PHP 5.2.2 and PHP 4.4.7: Fixed CVE-2007-1001, GD wbmp used with invalid image size Fixed asciiz byte truncation inside mail Fixed a bug in mbparsestr that can be used to activate registerglobals Fixed unallocated memory...
The establishment of the hidden super-user-vulnerability warning-the black bar safety net
A few days ago on a websitecan't remember, sorry ^on saw an article introduce how to build a hidden super-user graphic tutorial, give me a lot of inspiration, the author only describes how the local graphical interface is established under the hidden super-user, and the author said he could not a...
WinMail Server 4.4 build 1124 (WebMail) Remote Add Super User Exploit
No description provided by source. ?php / WinMail Server 4.4 build 1124 WebMail remote add new Super User exploit by rgod software site: http://www.magicwinmail.net/download.asp vulnerable code in /inc/class.session.php at lines 8-25: ... function Load $result = Array; $sessionfile =...
PHP < 5.2.1 Multiple Vulnerabilities
According to its banner, the version of PHP installed on the remote host is older than 5.2.1. Such versions may be affected by several issues, including buffer overflows, format string vulnerabilities, arbitrary code execution, 'safemode' and 'openbasedir' bypasses, and clobbering of super-global...
PHP < 4.4.5 Multiple Vulnerabilities
According to its banner, the version of PHP installed on the remote host is older than 4.4.5. Such versions may be affected by several issues, including buffer overflows, format string vulnerabilities, arbitrary code execution, 'safemode' and 'openbasedir' bypasses, and clobbering of super-global...
WinMail Server 4.4 build 1124 (WebMail) Remote Add Super User Exploit
Exploit for unknown platform in category web applications ===================================================================== WinMail Server 4.4 build 1124 WebMail Remote Add Super User Exploit =====================================================================...
WinMail Server 4.4 build 1124 - WebMail Remote Add Super User
WinMail Server 4.4 build 1124 - WebMail Remote Add Super User tempfolder."sessions/".$this-sid.".sess"; if!fileexists$sessionfile return false; $size = filesize$sessionfile; $fp = fopen$sessionfile, "rb"; if $fp $result = fread$fp, $size; fclose$fp; $result = unserializebase64decode$result; retur...
WinMail Server 4.4 build 1124 - 'WebMail' Remote Add Super User
tempfolder."sessions/".$this-sid.".sess"; if!fileexists$sessionfile return false; $size = filesize$sessionfile; $fp = fopen$sessionfile, "rb"; if $fp $result = fread$fp, $size; fclose$fp; $result = unserializebase64decode$result; return $result; ... This function should check for session files...