PT-2011-2848

Name of the Vulnerable Software and Affected Versions Cherry-Design Photopad version 1.2.0 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the id or datatitle parameters in an edit action to "files.php", or the id parameter in a view...

iOS SideBooks 1.0 - Directory Traversal

Exploit Title: SideBooks v1.0 for iPhone / iPod touch, Directory Traversal Date: 02/22/2011 Author: R3d@l3rt, Sp@2K, Sunlight, Hackkey Software Link: http://itunes.apple.com/kr/app/sidebooks/id409777225?mt=8 Version: 1.0 Tested on: iPhone, iPod 3GS with 4.2.1 firmware There is directory traversal...

Escort Directory CMS SQL Injection

Exploit Title: Escort Directory CMS SQL Injection Vunerability Google Dork: "Powered By Escort Web design" Platform: php Date: 09.02.2011 Author: NoNameMT Software Link: http://www.escortwebsitedesign.co.uk/directory-design/ Price: 750 € Tested on: Windows 7 Mail: [email protected] Homepage:...

Escort Directory CMS - SQL Injection

Escort Directory CMS - SQL Injection Exploit Title: Escort Directory CMS SQL Injection Vunerability Google Dork: "Powered By Escort Web design" Platform: php Date: 09.02.2011 Author: NoNameMT Software Link: http://www.escortwebsitedesign.co.uk/directory-design/ Price: 750 € Tested on: Windows 7...

PT-2011-1401

Name of the Vulnerable Software and Affected Versions abcm2ps versions prior to 5.9.12 Description The issue is related to multiple buffer overflows that could allow remote attackers to execute arbitrary code. This can be achieved through a crafted input file related to the PUT0 and PUT1 output...

ActFax Server (LPD/LPR) 4.25 Build 0221 (2010-02-11) - Remote Buffer Overflow

!/usr/bin/perl Exploit Title: ActFax Server LPD/LPR Remote Buffer Overflow Exploit Date: Feb 15, 2011 Author: chap0 Software Link: http://www.actfax.com/download/actfaxsetupen.exe Version: Version 4.25, Build 0221 2010-02-11 Tested on: Windows XP SP3 en Big thanks to Sud0 - and an extra greetz to...

jSchool Advanced SQL Injection Vulnerability

Exploit for php platform in category web applications ----------------------------------------------------------------------- Exploit Title : jSchool Advanced SQL Injection Vulnerability Dork : inurl: "action=profil.main" Found : 15 Jan '11 Author : eXa.DisC Software : jSchool Advanced...

PHP-CMS 1.2 / 3.0 SQL Injection

Exploit Title : content Management PHPCMS 3.0 Sql Injection Vunerability Author : ThunDEr HeaD Contact : [email protected] Date : 11-01-2011 HomePage : www.indishell.in Version : 1.2 , 3.0 Tested on : PBL Technology Vulnerability Style : PHPCMS Sql Injection Vunerability...

XM Easy Personal FTP Server 5.8.0 (TYPE) Denial Of Service

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title : XM Easy Personal FTP Server 5.8.0 Denial Of Service LIST command Date: 10/02/2011 Author: Houssam Sahli Software Link: http://www.dxm2008.com/data/ftpserversetup.exe Version: 5.8.0 Tested on: Windows XP SP3 French...

MyMarket 1.71 (index.php) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: MyMarket version 1.71index.php sql Injection Google Dork: allinurl:mymarket/shopping/index.php Date: 7-2-2011 Author: ahmadso Version: 1.71 Tested on: win xp sp2 ====================================================...

PMB Services <= 3.4.3 SQL injection vulnerability-vulnerability warning-the black bar safety net

PMB Services is a France php web application, PMB Services =3.4.3 of the index. php existssql injectionvulnerabilities that could lead to sensitive information disclosure. +info: Exploit Title: PMB Services = 3.4.3 Remote SQL Injection Author : Luchador Date : 29-01-2011 Location : Algeria Site :...

A-PDF All to MP3 Converter 2.0.0 - '.wav' Local Buffer Overflow (SEH)

Exploit Title: A-PDF All to MP3 Converter v.2.0.0 SEH overflow Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: = 2.0.0 Tested on: Win XP SP2 English Date: 29/01/2011 Author: m0nna Email: [email protected] triggering details: Open the app, drag the crafted .wav file, cal...

Web Articles SQL Injection

Exploit Title: Web Articlesarticledisp.phpSQL Injection Vulnerability Google Dork: inurl:"articledisp.php " Date: 24/01/2011 Author: PenetraDz AuthorEmail:[email protected] Home:Algeria/Freedom tO Palestine Language: php Tested on: windows xp sp3 en...

SuSE 11.1 Security Update : vte, vte-debuginfo, vte-debugsource, vte-devel, vte-doc, vte-lang (SAT Patch Number 2718)

This update fixes a vulnerability of VTE to an old title set and query attack which could be used by remote attackers to execute arbitrary code. CVE-2010-2713 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11...

Nmap NSE: HTML Title

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Enzip 3.00 Buffer Overflow

+Exploit Title: Exploit Buffer Overflow Enzip 3.00 +Date: 01\06\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.bcuc.ac.uk/files/enzip300.exe +Version: 3.00 +Tested on: WIN-XP SP3 PORTUGUESE BRAZILIAN +CVE: N/A Create BY C4SS!0 G0M3S [email protected] Website http://www.invasao.com.br HOW...

CVE-2010-4520

Multiple cross-site scripting XSS vulnerabilities in the Views module 6.x before 6.x-2.11 for Drupal allow remote attackers to inject arbitrary web script or HTML via 1 a URL or 2 an aggregator feed title...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Views module 6.x before 6.x-2.11 for Drupal allow remote attackers to inject arbitrary web script or HTML via 1 a URL or 2 an aggregator feed title...

CVE-2010-4520

Multiple cross-site scripting XSS vulnerabilities in the Views module 6.x before 6.x-2.11 for Drupal allow remote attackers to inject arbitrary web script or HTML via 1 a URL or 2 an aggregator feed title...

CVE-2010-4520: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Views module 6.x before 6.x-2.11 for Drupal allow remote attackers to inject arbitrary web script or HTML via 1 a URL or 2 an aggregator feed title...