CVE-2006-4876

Multiple SQL injection vulnerabilities in Jupiter CMS allow remote attackers to execute arbitrary SQL commands via 1 the user name during login, or the 2 key or 3 fpwusername parameters in modules/register...

CVE-2006-4876: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Jupiter CMS allow remote attackers to execute arbitrary SQL commands via 1 the user name during login, or the 2 key or 3 fpwusername parameters in modules/register...

Jupiter CMS 1.1.41.1.5 - modulesregister Multiple SQL Injections

Jupiter CMS 1.1.41.1.5 - modulesregister Multiple SQL Injections source: https://www.securityfocus.com/bid/20048/info Jupiter CMSA is prone to multiple input-validation vulnerabilities, including cross-site scripting, SQL-injection, and arbitrary file-upload issues, because the application fails ...

Speedy ASP Forum - 'profileupdate.asp' User Pass Change

Speedy Forum User Pass Change // ajannUser Name : Example: Surname Name User Mail : Example: [email protected] User Ýd : Example: Ýd:1 Admin User Country : Choose Country Turkey Example: Turkey User Pass /f...

Invision Power Board 2.1.5 - search.php Remote Code Execution

Invision Power Board 2.1.5 - search.php Remote Code Execution !/usr/bin/perl Wed Apr 26 16:44:15 CEST 2006 [email protected] INVISION POWER BOARD 2.1.5 pr00f 0f c0ncept remote command execution. vuln credits goes to IceShaman. works only if you have perms to post a comment. Exploit with replye is...

Improper access control

Hosting Controller 6.1 stores forum/db/forum.mdb under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as user name and password credentials. NOTE: the provenance of this information is unknown; the details are obtained fr...

Sql injection

SQL injection vulnerability in admin/login.php in Chipmunk Guestbook allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the User name...

CVE-2006-1683

SQL injection vulnerability in admin/login.php in Chipmunk Guestbook allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the User name...

Cross site scripting

Cross-site scripting XSS vulnerability in Gallery before 1.5.2 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving the user name fullname...

CVE-2006-0330

Cross-site scripting XSS vulnerability in Gallery before 1.5.2 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving the user name fullname...

www.miibeian.gov.cn ICP website record validation vulnerability-vulnerability warning-the black bar safety net

1: login to: 2: registration registration is over the phone does not receive text messages, no verification code） 3: the return home page to 4: input user name, password, CAPTCHA and click Login 5: at this point you enter the“phone code”and“mail code”---- do not enter 6: in the address bar enter“...

FreeFTPd user name buffer overflow

Added: 12/08/2005 CVE: CVE-2005-3683 BID: 15457 OSVDB: 20909 Background FreeFTPd is a free FTP/FTPS/SFTP server for Windows platforms. Problem An unauthenticated remote attacker could execute arbitrary commands by sending a long, specially crafted argument to the USER command. Resolution Upgrade ...

FreeFTPd user name buffer overflow

Added: 12/08/2005 CVE: CVE-2005-3683 BID: 15457 OSVDB: 20909 Background FreeFTPd is a free FTP/FTPS/SFTP server for Windows platforms. Problem An unauthenticated remote attacker could execute arbitrary commands by sending a long, specially crafted argument to the USER command. Resolution Upgrade ...

Have to say by the campus network see Network Security status-vulnerability warning-the black bar safety net

Preface originally really do not want to write this article, but really can not let people endure. Did not expect the school campus network security situation is actually so bad, one of the most impressive Willy-nilly. Or administrator of quality and safety awareness. Status of the recall a year...

Cyphor 0.19 - 'show.php?id' SQL Injection

!/bin/env perl //----------------------------------------------------------- // Cyphor Forum SQL Injection Exploit .. By HACKERS PAL // Greets For Devil-00 - Abducter - Almaster // http://WwW.SoQoR.NeT //----------------------------------------------------------- use LWP::Simple; print "\n"; prin...

CVE-2005-3031

Buffer overflow in vxFtpSrv 0.9.7 allows remote attackers to execute arbitrary code via a long USER name...

CVE-2005-3031

Buffer overflow in vxFtpSrv 0.9.7 allows remote attackers to execute arbitrary code via a long USER name...

CVE-2005-3031: Undefined Security Weakness

Buffer overflow in vxFtpSrv 0.9.7 allows remote attackers to execute arbitrary code via a long USER name...

FreeBSD : mpg123 -- buffer overflow in URL handling (20d16518-2477-11d9-814e-0001020eed82)

Carlos Barros reports that mpg123 contains two buffer overflows. These vulnerabilities can potentially lead to execution of arbitrary code. The first buffer overflow can occur when mpg123 parses a URL with a user-name/password field that is more than 256 characters long. This problem can be...

PhotoPost - Arbitrary Data Hash

PhotoPost - Arbitrary Data Hash !/usr/bin/perl PhotoPost Arbitrary Data Exploit -------------------------------- INFPG - Hacking&Security Research Use first the exploit code,then You'll get admin MD5 hash and user name on your mail. Greats: Infam0us Gr0up...