2625 matches found
MyBulletinBoard (MyBB) <= 1.03 Multiple SQL Injection Exploit
No description provided by source. !/bin/env perl //------------------------------------------------------------- // MyBB Forum SQL Injection Exploit .. By HACKERS PAL // Greets For Devil-00 - Abducter - Almaster - GaCkeR // Special Greets For SG SecurityGurus Team And Members //...
[SA18792] PHP Event Calendar User Information Manipulation
TITLE: PHP Event Calendar User Information Manipulation SECUNIA ADVISORY ID: SA18792 VERIFY ADVISORY: http://secunia.com/advisories/18792/ CRITICAL: Less critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: PHP Event Calendar 1.x http://secunia.com/product/7964...
MiniNuke 1.8.2 - Multiple SQL Injections
Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: MiniNuke www.miniex.net Version: 1.8.2 and prior versions must be affected. About:Via this method remote attacker can inject SQL query to the news.asp --- How&Example: GET -...
[eVuln] TinyPHPForum Multiple Vulnerabilities
New eVuln Advisory: TinyPHPForum Multiple Vulnerabilities --------------------Summary---------------- Software: TinyPHPForum Sowtware's Web Site: http://www.ralpharama.co.uk/tpf/ Versions: 3.6 and earlier Critical Level: Moderate Type: Multiple Vulnerabilities Class: Remote Status: Unpatched...
Without a password to view the martial arts world list statistics user information-bug warning-the black bar safety net
With the 50bang this statistic for some time, the user information can be set freely statistical information is disclosed. But often go to the statistics of the station to see the statistical charts of people who might know a little, just click on the list of those sites, the more information it...
Horde MIME Viewer vulnerability
Title : Cross-Site-Scripting Vulnerability in Horde IMP. Date : November 17, 2005 Product : Horde MIME Viewer 3.0.7 vulnerability Discovered by : Daniel Schreckling Overview ====================================================================== The Horde http://www.horde.org Project comprises a s...
CVE-2005-3276
The sysgetthreadarea function in process.c in Linux 2.6 before 2.6.12.4 and 2.6.13 does not clear a data structure before copying it to userspace, which might allow a user process to obtain sensitive information...
Simple Machine Forum 1-0-5 (possibly prior versions) user IP address / information disclosure
Simple Machine Forum 1-0-5 possibly prior versions user IP address / information disclosure Aug 31 2005 10:37AM retrogod aliceposta it Simple Machine Forum 1-0-5 possibly prior versions user IP address / information disclosure software: site: http://www.simplemachines.org/ information disclosure:...
CVE-2005-2038
Fortibus CMS 4.0.0 allows remote attackers to modify information of other users, including Admin, via the "My info" page...
CVE-2005-2038
Fortibus CMS 4.0.0 is affected by CVE-2005-2038, where remote attackers can modify information of other users (including Admin) via the "My info" page. The available documents confirm the affected product and the vulnerability class (unauthorized modification of user data) but do not provide expl...
claroline16.txt
Alphaprogrammer , Oilkarchack , DrCephaleX , Str0ke And Iranian Hacking & Security Teams : IHS TeaM , alphaST , Shabgard Security Team , Emperor Hacking Team , Crouz Security Team & Simorgh-ev Security Team Config : please replace your address : $url = "http:///www.example.com"; Please replace yo...
CVE-2005-2038
Fortibus CMS 4.0.0 allows remote attackers to modify information of other users, including Admin, via the "My info" page...
CVE-2004-1874
Multiple cross-site scripting XSS vulnerabilities in 1 deliver.asp and 2 billing.asp in A-CART Pro and A-CART 2.0 allow remote attackers to inject arbitrary web script or HTML via the user information forms...
CVE-2005-0051
The Server service srvsvc.dll in Windows XP SP1 and SP2 allows remote attackers to obtain sensitive information users who are accessing resources via an anonymous logon using a named pipe, which is not properly authenticated, aka the "Named Pipe Vulnerability."...
GoText 1.01 - Local User Informations Disclosure
GoText 1.01 - Local User Informations Disclosure / GoText 1.01 Local User Informations Disclosure Exploit by Kozan Application: GoText 1.01 Vendor: StumbleInside Software - www.stumbleinside.com Vulnerable Description: GoText 1.01 discloses user informations to local users. Discovered & Coded by:...
GoText 1.01 Local User Informations Disclosure Exploit
No description provided by source. / GoText 1.01 Local User Informations Disclosure Exploit by Kozan Application: GoText 1.01 Vendor: StumbleInside Software - www.stumbleinside.com Vulnerable Description: GoText 1.01 discloses user informations to local users. Discovered & Coded by: Kozan Credits...
GoText 1.01 - Local User Informations Disclosure
/ GoText 1.01 Local User Informations Disclosure Exploit by Kozan Application: GoText 1.01 Vendor: StumbleInside Software - www.stumbleinside.com Vulnerable Description: GoText 1.01 discloses user informations to local users. Discovered & Coded by: Kozan Credits to ATmaCA Web: www.netmagister.com...
PunBB 1.2.4 (change_email) SQL Injection Exploit
No description provided by source. !/usr/bin/python | || | | | | | | | || || \ | |/ || '|/ |/ -| ' \ / -/ |||| /| || / ||||,||| ,|||||||,| || |||||| Proof of concept code from the Hardened-PHP Project -= PunBB 1.2.4 =- changeemail SQL injection exploit user-supplied data within the database...
CVE-2004-0950
NetOp Host before 7.65 build 2004278 allows remote attackers to obtain sensitive hostname, username and local IP address information via 1 a NetOp HELO request, or 2 when responses are disabled, a "custom" HELO request...
