CVE-2004-2191

CVE-2004-2191 describes a cross-site scripting (XSS) vulnerability in the ttt-webmaster.php component of Turbo Traffic Trader PHP 1.0. The flaw allows remote attackers to inject arbitrary web script or HTML through the parameters (1) msg[0] or (2) siteurl, potentially compromising user data or se...

CVE-2004-2191: Undefined Security Weakness

Cross-site scripting XSS vulnerability in ttt-webmaster.php in Turbo Traffic Trader PHP 1.0 allows remote attackers to inject arbitrary web script or HTML via the 1 msg0 or 2 siteurl parameters...

CVE-2004-2192: Undefined Security Weakness

SQL injection vulnerability in tttadmin/settings.php in Turbo Traffic Trader PHP 1.0 allows remote attackers to execute arbitrary SQL commands via the tttadmin parameter...

CVE-2004-2017

CVE-2004-2017 covers multiple XSS vulnerabilities in Turbo Traffic Trader C (TTT-C) 1.0. Remote attackers can inject HTML/script via (1) the link parameter to ttt-out, (2) the X-Forwarded-For header to ttt-in, (3) the Referer header to ttt-in, or (4) the site name and (5) site URL fields in the m...

CVE-2004-2017

Multiple cross-site scripting XSS vulnerabilities in Turbo Traffic Trader C TTT-C 1.0 allow remote attackers to inject arbitrary HTML or web script, as demonstrated via 1 the link parameter to ttt-out, 2 the X-Forwarded-For header in a GET request to ttt-in, 3 the Referer header in a GET request ...

CVE-2004-2017: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Turbo Traffic Trader C TTT-C 1.0 allow remote attackers to inject arbitrary HTML or web script, as demonstrated via 1 the link parameter to ttt-out, 2 the X-Forwarded-For header in a GET request to ttt-in, 3 the Referer header in a GET request ...

CVE-2004-2192

SQL injection vulnerability in tttadmin/settings.php in Turbo Traffic Trader PHP 1.0 allows remote attackers to execute arbitrary SQL commands via the tttadmin parameter...

CVE-2004-2191

Cross-site scripting XSS vulnerability in ttt-webmaster.php in Turbo Traffic Trader PHP 1.0 allows remote attackers to inject arbitrary web script or HTML via the 1 msg0 or 2 siteurl parameters...

CVE-2004-2017

Multiple cross-site scripting XSS vulnerabilities in Turbo Traffic Trader C TTT-C 1.0 allow remote attackers to inject arbitrary HTML or web script, as demonstrated via 1 the link parameter to ttt-out, 2 the X-Forwarded-For header in a GET request to ttt-in, 3 the Referer header in a GET request ...

turboTraffic.txt

+-----------------------------------------------------------------------+ | Turbo Traffic Trader Nitro v1.0 SQL Injection & XSS Proofs of Concept | | By aCiDBiTS [email protected] 10-Oct-2004 | +-----------------------------------------------------------------------+ Your web application needs a...

Turbo Seek tseekdir.cgi location Parameter Arbitrary File Access

The remote host is running Turbo Seek, a search engine and directory tool. The version of this software running on the remote host has a vulnerability that allows a remote attacker to read arbitrary files from the remote system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Turbo Seek Null Byte Error Discloses Files to Remote Users

No description provided by source. Some demonstration exploit URLs are provided: /cgi-bin/cgi/tseekdir.cgi?location=/etc/passwd%00 /cgi-bin /tseekdir.cgi?id=799&location=/etc/passwd%00 milw0rm.com 2004-09-13...

Turbo Seek Null Byte Error Discloses Files to Remote Users

Exploit for cgi platform in category web applications ========================================================== Turbo Seek Null Byte Error Discloses Files to Remote Users ========================================================== Some demonstration exploit URLs are provided:...

Turbo Seek < 1.7.2 tseekdir.cgi location Parameter Information Disclosure

Binary data 2280.prm...

Turbo Seek - Null Byte Error Discloses Files

Turbo Seek - Null Byte Error Discloses Files Some demonstration exploit URLs are provided: /cgi-bin/cgi/tseekdir.cgi?location=/etc/passwd%00 /cgi-bin /tseekdir.cgi?id=799&location=/etc/passwd%00 milw0rm.com 2004-09-13...

adv17.txt

+| Advisory 17. Search Engine & Directory by Turbo Seek Software: Search Engine & Directory Powered by Turbo Seek Vendor: FocalMedia.Net http://www.focalmedia.net Vulnerability: âîçìîæíîñòü ÷òåíèÿ ôàéëîâ Risk: ñðåäíèé Date: 10'Sept 2004 discovered by durito -duritoatmaildotru- HTTP: www.lwb57.org...

Просмотр файлов в Search Engine & Directory Powered by Turbo Seek от FocalMedia.Net

Здравствуйте, 3APA3A. нашел новую узвимость. Просмотр файлов в Search Engine & Directory Powered by Turbo Seek от FocalMedia.Net Software / Application - Search Engine & Directory Powered by Turbo Seek Problem-Type - удаленная Vulnerability - возможность чтения файлов. Vendor - FocalMedia.Net...

Multiple TTT-C XSS vulnerabilities

-------------------------------------------------------- Subject: Multiple TTT-C Turbo Traffic Trader C XSS vulnerabilityes. Author: Kaloyan Olegov Georgiev ICEFIRE Package name: Turbo Traffic Trader C TTT-C or TTT3 Sumary: Multiple XSS issues Date: 2004-05-16 Affected versions: Latest stable TTT...

CVE-2001-0863

Cisco 12000 Series routers running IOS 12.0 with Engine 2 line cards are vulnerable in Turbo ACL handling; the compiled ACL may ignore the fragment keyword for packets to the router, enabling remote denial of service via a flood of fragments. Affected component: fragmented traffic in ACLs. Impact...

CVE-2001-0863: Undefined Security Weakness

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not handle the "fragment" keyword in a compiled ACL Turbo ACL for packets that are sent to the router, which allows remote attackers to cause a denial of service via a flood of fragments...