5218 matches found
Sql injection
SQL injection vulnerability in webboard.php in Ultimate Webboard 3.00 allows remote attackers to execute arbitrary SQL commands via the Category parameter...
CVE-2008-4666
CVE-2008-4666: A SQL injection vulnerability exists in Ultimate Webboard 3.00 (webboard.php) allowing remote attackers to execute arbitrary SQL via the Category parameter. This is documented in multiple sources (NVD entry with CVSS v2 base score 6.8, Attack Vector: Network, Privileges Required: N...
CVE-2008-4666
SQL injection vulnerability in webboard.php in Ultimate Webboard 3.00 allows remote attackers to execute arbitrary SQL commands via the Category parameter...
Unfixed Redirect vulnerability at ultimate-guitar.com
Security researcher MrDoug, has submitted on 22/10/2008 a Redirect vulnerability affecting ultimate-guitar.com, which at the time of submission ranked 537 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2009. It is currently unfixed. If y...
CVE-2008-4666: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in webboard.php in Ultimate Webboard 3.00 allows remote attackers to execute arbitrary SQL commands via the Category parameter...
CVE-2008-4510
Microsoft Windows Vista Home and Ultimate Edition SP1 and earlier allows local users to cause a denial of service page fault and system crash via multiple attempts to access a virtual address in a PAGENOACCESS memory page...
CVE-2008-4510: Undefined Security Weakness
Microsoft Windows Vista Home and Ultimate Edition SP1 and earlier allows local users to cause a denial of service page fault and system crash via multiple attempts to access a virtual address in a PAGENOACCESS memory page...
Ultimate Webboard 3.00 (Category) SQL Injection Vulnerability
No description provided by source. ================================================================================ Ultimate Webboard webboard.php Category Remote SQL Injection Vulnerability ================================================================================...
Ultimate WebBoard 3.00 - Category SQL Injection
Ultimate WebBoard 3.00 - Category SQL Injection ================================================================================ Ultimate Webboard webboard.php Category Remote SQL Injection Vulnerability ================================================================================...
Ultimate Webboard 3.00 (Category) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================= Ultimate Webboard 3.00 Category SQL Injection Vulnerability ============================================================= ,--^----------,--------,-----,-------^--, | |||||||||...
Ultimate WebBoard 3.00 - 'Category' SQL Injection
================================================================================ Ultimate Webboard webboard.php Category Remote SQL Injection Vulnerability ================================================================================ ,--^----------,--------,-----,-------^--, | |||||||||...
ultimatewebboard-sql.txt
================================================================================ Ultimate Webboard webboard.php Category Remote SQL Injection Vulnerability ================================================================================ ,--^----------,--------,-----,-------^--, | |||||||||...
PHP-Ultimate WebBoard 2.0 - admindel.php Multiple Input Validation Vulnerabilities
PHP-Ultimate WebBoard 2.0 - admindel.php Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/30822/info PHP-Ultimate Webboard is prone multiple-input validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Successful...
PHP-Ultimate WebBoard 2.0 - 'admindel.php' Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/30822/info PHP-Ultimate Webboard is prone multiple-input validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Successful exploits will allow unauthorized attackers to delete arbitrary questions and answers...
Unfixed XSS vulnerability at www.ultimatevacationdestinations.com
Security researcher mckt, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.ultimatevacationdestinations.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. ...
FreeSSHD 1.2.1 (Post Auth) Remote Seh Overflow Exploit
!/usr/bin/perl FreeSSHD 1.2.1 Post Auth Remote Seh Overflow http://freeddsshd.com/ Exploit based on securfrog Poc http://www.milw0rm.com/exploits/5709 Coded by Matteo Memelli aka ryujin Spaghetti & PwnSauce http://www.be4mind.com http://www.gray-world.net Tested on Windows XPSp2 EN / Windows Vist...
freeSSHd 1.2.1 (Post Auth) Remote SEH Overflow Exploit
Exploit for unknown platform in category remote exploits ====================================================== freeSSHd 1.2.1 Post Auth Remote SEH Overflow Exploit ====================================================== !/usr/bin/perl FreeSSHD 1.2.1 Post Auth Remote Seh Overflow...
freesshd-sehoverflow.txt
!/usr/bin/perl FreeSSHD 1.2.1 Post Auth Remote Seh Overflow http://freeddsshd.com/ Exploit based on securfrog Poc http://www.milw0rm.com/exploits/5709 Coded by Matteo Memelli aka ryujin Spaghetti & PwnSauce http://www.be4mind.com http://www.gray-world.net rm thisJunk use strict; use Net::SSH2; my...
freeSSHd 1.2.1 - (Authenticated) Remote Overflow (SEH)
!/usr/bin/perl FreeSSHD 1.2.1 Post Auth Remote Seh Overflow http://freeddsshd.com/ Exploit based on securfrog Poc http://www.milw0rm.com/exploits/5709 Coded by Matteo Memelli aka ryujin Spaghetti & PwnSauce http://www.be4mind.com http://www.gray-world.net Tested on Windows XPSp2 EN / Windows Vist...
Cross site scripting
Cross-site scripting XSS vulnerability in search.php in CMS Faethon 2.2 Ultimate allows remote attackers to inject arbitrary web script or HTML via the what parameter. NOTE: some of these details are obtained from third party information...