[BMSA-2009-01] Authentication bypass in Interspire Shopping Cart v4.0.1 and below

BLUE MOON SECURITY ADVISORY 2009-01 =================================== :Title: Authentication bypass in Interspire Shopping Cart :Severity: Critical :Reporter: Truong Van Tri and Blue Moon Consulting :Products: Interspire Shopping Cart v4.0.1 Ultimate edition :Fixed in: v4.0.2 Description...

LinksPro Ultimate Edition SQL Injection

--------------------------------------------------------- Portal Name: LinksPro Ultimate Edition Vendor : http://www.codefixer.com/applinkspro/ultimate.asp Author : PouyaServer , [email protected] Aria-Security.Net Vulnerability : SQL ---------------------------------------------------------...

Ultimate PHP Board <= 2.2.1 (log inj) Privilege Escalation Exploit

No description provided by source. !/usr/bin/perl -w ------------------------------------------------------------------ Ultimate PHP Board = 2.2.1 log inj Privilege Escalation Exploit ------------------------------------------------------------------ by athos - stakerathotmaildotit download on...

Ultimate PHP Board 2.2.1 - Privilege Escalation

Ultimate PHP Board 2.2.1 - Privilege Escalation !/usr/bin/perl -w ------------------------------------------------------------------ Ultimate PHP Board admin xpl by athos - stakerathotmaildotit\n". "\nUsage + perl $0 host path ID email". "\nHost + localhost". "\nPath + forum path /upb". "\nID +...

Sql injection

SQL injection vulnerability in webboard.php in Ultimate Webboard 3.00 allows remote attackers to execute arbitrary SQL commands via the Category parameter...

CVE-2008-4666

CVE-2008-4666: A SQL injection vulnerability exists in Ultimate Webboard 3.00 (webboard.php) allowing remote attackers to execute arbitrary SQL via the Category parameter. This is documented in multiple sources (NVD entry with CVSS v2 base score 6.8, Attack Vector: Network, Privileges Required: N...

CVE-2008-4666

SQL injection vulnerability in webboard.php in Ultimate Webboard 3.00 allows remote attackers to execute arbitrary SQL commands via the Category parameter...

CVE-2008-4666: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in webboard.php in Ultimate Webboard 3.00 allows remote attackers to execute arbitrary SQL commands via the Category parameter...

Unfixed Redirect vulnerability at ultimate-guitar.com

Security researcher MrDoug, has submitted on 22/10/2008 a Redirect vulnerability affecting ultimate-guitar.com, which at the time of submission ranked 537 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2009. It is currently unfixed. If y...

CVE-2008-4510

Microsoft Windows Vista Home and Ultimate Edition SP1 and earlier allows local users to cause a denial of service page fault and system crash via multiple attempts to access a virtual address in a PAGENOACCESS memory page...

CVE-2008-4510: Undefined Security Weakness

Microsoft Windows Vista Home and Ultimate Edition SP1 and earlier allows local users to cause a denial of service page fault and system crash via multiple attempts to access a virtual address in a PAGENOACCESS memory page...

Ultimate Webboard 3.00 (Category) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Ultimate Webboard 3.00 Category SQL Injection Vulnerability ============================================================= ,--^----------,--------,-----,-------^--, | |||||||||...

ultimatewebboard-sql.txt

================================================================================ Ultimate Webboard webboard.php Category Remote SQL Injection Vulnerability ================================================================================ ,--^----------,--------,-----,-------^--, | |||||||||...

Ultimate WebBoard 3.00 - 'Category' SQL Injection

================================================================================ Ultimate Webboard webboard.php Category Remote SQL Injection Vulnerability ================================================================================ ,--^----------,--------,-----,-------^--, | |||||||||...

Ultimate Webboard 3.00 (Category) SQL Injection Vulnerability

No description provided by source. ================================================================================ Ultimate Webboard webboard.php Category Remote SQL Injection Vulnerability ================================================================================...

Ultimate WebBoard 3.00 - Category SQL Injection

Ultimate WebBoard 3.00 - Category SQL Injection ================================================================================ Ultimate Webboard webboard.php Category Remote SQL Injection Vulnerability ================================================================================...

PHP-Ultimate WebBoard 2.0 - admindel.php Multiple Input Validation Vulnerabilities

PHP-Ultimate WebBoard 2.0 - admindel.php Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/30822/info PHP-Ultimate Webboard is prone multiple-input validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Successful...

PHP-Ultimate WebBoard 2.0 - 'admindel.php' Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/30822/info PHP-Ultimate Webboard is prone multiple-input validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Successful exploits will allow unauthorized attackers to delete arbitrary questions and answers...

Unfixed XSS vulnerability at www.ultimatevacationdestinations.com

Security researcher mckt, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.ultimatevacationdestinations.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. ...

FreeSSHD 1.2.1 (Post Auth) Remote Seh Overflow Exploit

!/usr/bin/perl FreeSSHD 1.2.1 Post Auth Remote Seh Overflow http://freeddsshd.com/ Exploit based on securfrog Poc http://www.milw0rm.com/exploits/5709 Coded by Matteo Memelli aka ryujin Spaghetti & PwnSauce http://www.be4mind.com http://www.gray-world.net Tested on Windows XPSp2 EN / Windows Vist...