1049 matches found
ig shop 1.0 - Code Execution / SQL Injection
"If eval is the answer, then you are asking the wrong question." --Unknowen ig-shop suffers from two eval's that can be controlled by an attacker: http://127.0.0.1/igshop/cart.php?action=;phpinfo;// ./cart.php line 692: eval "cart$action;"; http://127.0.0.1/igshop/page.php?action=;phpinfo;//...
Windows XP 3 3 8 9(terminals)multi-user login-bug warning-the black bar safety net
The first step:the first is on Windows XP SP2 installed the official version, according to the conventional manner of mounting can be, not repeat them here. Second step:prepare an earlier version of the SP2 terminal server softwareit is said that from Build 2 0 8 2 start the function is disabled,...
PT-2006-6735 · Baal · Baalasp Forum
Name of the Vulnerable Software and Affected Versions: BaalAsp forum affected versions not specified Description: The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities allow remote attackers to execute arbitrary SQL commands. The vulnerabilities can be exploited through...
FreeWebShop.org script 2.2.2 - Multiple Vulnerabilities
Product: www.freewebshop.org Version: 2.2.x, maybe lower Critical Lvl : Highly critical Where : From Remote Exploits: Bypass Login: username:admin password:' or 'a'='a Read Files: /index.php?page=info&action=../../../../../../../../../../../../etc/passwd%00 List Passwords:...
CLUB-Nuke [XP] 2.0 LCID 2048 (Turkish Version) - SQL Injection
CLUB-Nuke XP v2.0 LCID 2048 Turkish Version SQL Injection Vulnerability Risk : High Credit : ASIANEAGLE Contact: [email protected] Web : www.asianeagle.org Download Link : http://www.aspindir.com/Kategoriler/asp/portal-&-hazir-site/?P=7&K=&T= Exploit: Note : User Logins Must Be Enabled By Admi...
CVE-2006-3826
Multiple cross-site scripting XSS vulnerabilities in Kailash Nadh boastMachine formerly bMachine 3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 userlogin, 2 fullname, and 3 URL parameters in register.php; and allow remote authenticated administrators to...
CentOS 4 : openssh (CESA-2006:0044)
Updated openssh packages that fix bugs in sshd and add auditing of user logins are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation. This...
CesarFTP099g-pm.txt
---ORIGINAL CREDITS TO h07 FOR FINDING THIS VULN--- Ported to metasploit by c0rrupt f34r.us package Msf::Exploit::cesarftpmkd; use base "Msf::Exploit"; use strict; use Pex::Text; my $advanced = ; my $info = 'Name' = 'CesarFTP 0.99g Buffer Overflow', 'Version' = '$Revision: 1.3 $', 'Authors' =...
CVE-2006-3095
Multiple cross-site scripting XSS vulnerabilities in iPostMX 2005 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the RETURNURL parameter in 1 userlogin.cfm and 2 account.cfm...
CesarFTP 0.99g - 'MKD' Remote Buffer Overflow (Metasploit) (1)
---ORIGINAL CREDITS TO h07 FOR FINDING THIS VULN--- Ported to metasploit by c0rrupt f34r.us package Msf::Exploit::cesarftpmkd; use base "Msf::Exploit"; use strict; use Pex::Text; my $advanced = ; my $info = 'Name' = 'CesarFTP 0.99g Buffer Overflow', 'Version' = '$Revision: 1.3 $', 'Authors' =...
FileCOPA FTP Server 1.01 - 'USER' Remote Denial of Service
FILECOPA DOS www.filecopa.com Found Jan 19 2006, Tested again on the new release 6 April 2006 BY Bigeazer http://blacksecurity.org They are selling this software for $39.95... oh well.. maybe they shoud fix it first? It appears that FileCopa does not handle alot of new line char in the USER login...
Crafty Syntax Image Gallery <= 3.1g Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or at your option any later version. This...
Crafty Syntax Image Gallery 3.1g - Remote Code Execution
Crafty Syntax Image Gallery 3.1g - Remote Code Execution !/usr/bin/perl This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or at your option any...
openssh security update
CentOS Errata and Security Advisory CESA-2006:0044 Updated openssh packages that fix bugs in sshd and add auditing of user logins are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's...
RHEL 4 : openssh (RHSA-2006:0044)
Updated openssh packages that fix bugs in sshd and add auditing of user logins are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation. This...
Low: Red Hat Security Advisory: openssh security update
Updated openssh packages that fix bugs in sshd and add auditing of user logins are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation. This...
LinPHA <= 1.0 Multiple Vulnerabilities
The remote host is running LinPHA, a web photo gallery application written in PHP. The installed version of LinPHA suffers from a number of flaws, several of which could allow an unauthenticated attacker to view arbitrary files or to execute arbitrary PHP code on the remote host, subject to the...
DaffodilCRM.txt
Daffodil CRM does not properly sanities it's inputs on the login page; http://www.SITE.com:8080/daffodilcrm/userlogin.jsp Therefore SQL-injection attacks are possible. PoC could be: 1'or'1'='1 Vendors homepage is: http://www.daffodildb.com/crm/ Please credit to: Preben Nyløkken...
PT-2006-1576 · Blackboard · Blackboard Academic Suite
Name of the Vulnerable Software and Affected Versions: Blackboard Academic Suite versions 6.0 and earlier Description: The issue arises when the software does not properly clear session information after a user has been idle and then de-authenticates. This allows subsequent users to log in as the...
cybershopSQL.txt
NightWarrior nightwarrior771athotmail.com CyberShop User Login Sql Injection Site:http://www.gencbeyin.gen.tr/cybershop/test Code For User Login : Username : ' or ''=' Password: ' or ''=' Contact :nightwarrior771athotmail.com NightWarrior...