1951 matches found
iLife iPhoto Photocast - XML Title Remote Format String (PoC)
iLife iPhoto Photocast - XML Title Remote Format String PoC !/usr/bin/ruby c 2006 LMH bug by Kevin Finisterre proof of concept for MOAB-04-01-2007 see http://projects.info-pull.com/moab/MOAB-04-01-2007.rb require 'socket' IPHOTOFEED = "\r\n" + "\r\n" + "\r\n" + "" + "A" 256 +...
iLife iPhoto Photocast (XML title) Remote Format String PoC
Exploit for macOS platform in category dos / poc =========================================================== iLife iPhoto Photocast XML title Remote Format String PoC =========================================================== !/usr/bin/ruby c 2006 LMH bug by Kevin Finisterre proof of concept for...
iLife iPhoto Photocast - XML Title Remote Format String (PoC)
!/usr/bin/ruby c 2006 LMH bug by Kevin Finisterre proof of concept for MOAB-04-01-2007 see http://projects.info-pull.com/moab/MOAB-04-01-2007.rb require 'socket' IPHOTOFEED = "\r\n" + "\r\n" + "\r\n" + "" + "A" 256 + "%x.%n.%n.%n.%n.%n\r\n" + "\r\n" + "In Gruber We Trust\r\n" +...
Ciberia Content Federator 1.0 (path) Remote File Include Exploit
No description provided by source. !/usr/bin/perl Portal Name : ciberia 1.0maquetacionsocio.php Remote File Inclusion Exploit BUG: Path/socios/maquetacionsocio.php?path=Dr.Trojan.TxT Vulnerable Code: 1-include "$path/datos/datossocios.php"; 2-include "$path/elementos/actos.php"; 3-include...
SH-News 0.93 - 'misc.php' Remote File Inclusion
!/usr/bin/perl SH-News 0.93 misc.php Remote File Include Exploit Download: http://www.scripthome.de/down.php?id=6 Vulnerable Code: require "$newscfg'path'/german.inc.php"; Coded by bd0rk || SOH-Crew Usage: shnews.pl target cmd shell shell variable Greetings: str0ke, TheJT, Kacper, rgod use...
CJ Tag Board User-Agent PHP注入漏洞
CJ Tag Board是一款基于PHP的论坛程序。 CJ Tag Board不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题一是tag.php脚本对"User-Agent" HTTP头数据缺少过滤，可导致任意PHP代码注入，并通过请求all.php脚本执行。 问题二是adminindex.php脚本对用户提交的"banned"参数缺少过滤，可导致任意PHP代码注入。 CJ Tag Board 3.0 http://www.scriptsearch.com/cgi-bin/jump.cgi?ID=10068...
Cahier de texte 2.0 (Database Backup/Source Disclosure) Remote Exploit
Exploit for unknown platform in category web applications ====================================================================== Cahier de texte 2.0 Database Backup/Source Disclosure Remote Exploit ====================================================================== !/usr/bin/perl INFORMATIONS...
CMSmelborp Beta (user_standard.php) Remote File Include Exploit
No description provided by source. !/usr/bin/perl Portal Name : CMSmelborpuserstandard.php Remote File Inclusion Exploit Bug Found DeltahackingSecurityTEAM Code :Dr.Trojan&Dr.Pantagon Download =http://superb-west.dl.sourceforge.net/sourceforge/cmsmelborp/CMSmelborp.zip usage: perl CMSmelborp.pl...
KnowledgeBuilder 2.2 - visEdit_Control.Class.php Remote File Inclusion
KnowledgeBuilder 2.2 - visEditControl.Class.php Remote File Inclusion source: https://www.securityfocus.com/bid/20857/info KnowledgeBuilder is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to...
CVE-2006-5661
Cross-site scripting XSS vulnerability in nquser.php in VIRtech Netquery allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header...
CVE-2006-5661
Cross-site scripting XSS vulnerability in nquser.php in VIRtech Netquery allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header...
[Full-disclosure] Cross Site Scripting (XSS) Vulnerability in Netquery by "VIRtech"
·= Security Advisory =· Issue: Cross Site Scripting XSS Vulnerability in Netquery by "VIRtech" Discovered Date: 04/10/2006 Author: Tal Argoni, LegendaryZion. talargoni at gmail.com Product Vendor: http://www.virtech.org Details: VIRtechs Netquery system is prone to a Cross Site Scripting...
Cross Site Scripting (XSS) Vulnerability in Netquery by "VIRtech"
·= Security Advisory =· Issue: Cross Site Scripting XSS Vulnerability in Netquery by "VIRtech" Discovered Date: 04/10/2006 Author: Tal Argoni, LegendaryZion. talargoni at gmail.com Product Vendor: http://www.virtech.org Details: VIRtechs Netquery system is prone to a Cross Site Scripting...
Netquery 4.0 - NQUser.php Cross-Site Scripting
Netquery 4.0 - NQUser.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20837/info Netquery is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...
CVE-2006-5508
Multiple SQL injection vulnerabilities in addentry.php in WoltLab Burning Book 1.1.2 allow remote attackers to execute arbitrary SQL commands via 1 the n parameter and 2 the User-Agent HTTP header...
Abidia OAnywhere认证信息泄露漏洞
OAnywhere是运行在移动设备上用于在eBay上进行拍卖的工具。 OAnywhere在处理用户名和口令的传输时存在漏洞，攻击者可能通过嗅探攻击获取认证信息。 OAnywhere的更新请求会通过简单的HTTP POST包含认证。在这个过程中eBay的用户名/口令信息是通过明文发送的，这就可能导致帐号信息的暴露。 Abidia OAnywhere 厂商补丁： Abidia ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.abidia.com/products/oanywhere POST...
PowerMovieList 0.13/0.14 - Edit User HTML Injection
source: https://www.securityfocus.com/bid/20564/info PowerMovieList is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would execute in the...
CVE-2006-5227
Cross-site scripting XSS vulnerability in admin.php in TorrentFlux 2.1 allows remote attackers to inject arbitrary web script or HTML via 1 the $useragent variable, probably obtained from the User-Agent HTTP header, and possibly 2 the $ipresolved variable...
CVE-2006-5227
Cross-site scripting XSS vulnerability in admin.php in TorrentFlux 2.1 allows remote attackers to inject arbitrary web script or HTML via 1 the $useragent variable, probably obtained from the User-Agent HTTP header, and possibly 2 the $ipresolved variable...
