CVE-2008-7250: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Squid Analysis Report Generator Sarg 2.2.4 allows remote attackers to inject arbitrary web script or HTML via a JavaScript onload event in the User-Agent header, which is not properly handled when displaying the Squid proxy log. NOTE: this issue exists...

Streamcast <= 0.9.75 HTTP User-Agent Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Streamcast %...

PHP - MultiPart Form-Data Denial of Service (PoC)

!/usr/bin/python PHP MultiPart Form-Data Denial of Service proof of concept, 23-10-2009 Bogdan Calin [email protected] import httplib, urllib, sys, string, threading from string import replace from urlparse import urlparse def usage: print "" print " PHP MultiPart Form-Data Denial of Service...

CVE-2009-3904: Undefined Security Weakness

classes/session/ccadminsession.php in CubeCart 4.3.4 does not properly restrict administrative access permissions, which allows remote attackers to bypass restrictions and gain administrative access via a HTTP request that contains an empty 1 sessID ccAdmin cookie, 2 XCLUSTERCLIENTIP header, or 3...

Sun Java JRE AWT setDiffICM Buffer Overflow

This module exploits a flaw in the setDiffICM function in the Sun JVM. The payload is serialized and passed to the applet via PARAM tags. It must be a native payload. The effected Java versions are JDK and JRE 6 Update 16 and earlier, JDK and JRE 5.0 Update 21 and earlier, SDK and JRE 1.4.223 and...

CubeCart 4 - Session Management Bypass

CubeCart 4 Session Management Bypass Release Date: 2009/10/29 Author: Bogdan Calin bogdan at acunetix dot com Severity: Critical Vendor Status: Vendor has released an updated version I. Background From Wikipedia: CubeCart is a free-to-use eCommerce software solution, designed to allow individuals...

Search Engine Domain Email Address Collector

This module uses Google, Bing and Yahoo to create a list of valid email addresses for the target domain. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'net/http' class MetasploitModule 'Search Engine Domain...

Cross site scripting

Cross-site scripting XSS vulnerability in the "Monitor browsers' feature in Browscap before 5.x-1.1 and 6.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header...

CVE-2009-3651

Cross-site scripting XSS vulnerability in the "Monitor browsers' feature in Browscap before 5.x-1.1 and 6.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header...

CVE-2009-3652

The CVE-2009-3652 entry covers a Cross-site scripting (XSS) vulnerability in Drupal's Organic Groups (OG) module. It affects OG 5.x-7.x before 5.x-7.4, OG 5.x-8.x before 5.x-8.1, and OG 6.x-1.x before 6.x-1.4. The issue allows remote authenticated users (with create or edit group nodes permission...

CVE-2009-3652: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Organic Groups OG 5.x-7.x before 5.x-7.4, 5.x-8.x before 5.x-8.1, and 6.x-1.x before 6.x-1.4, a module for Drupal, allows remote authenticated users, with create or edit group nodes permissions, to inject arbitrary web script or HTML via the User-Agent HT...

CVE-2009-3651: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the "Monitor browsers' feature in Browscap before 5.x-1.1 and 6.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header...

SA-CONTRIB-2009-065 - Browscap - Cross Site Scripting

The Browscap module provides a way to identify the visitors to your site based on the user agent in their browser. It can also record these user agent strings and provide reports about them. When displaying reports about visitors, the module does not properly sanitize the user agent strings befor...

SuSE9 Security Update : netpbm (YOU Patch Number 11701)

This update fixes a buffer overflow in the RGBA-palette code. The bug can be abused to trigger a denial-or-service attack by feeding untrusted data to 'pnmtopng -alpha' maybe via a remote service like a CGI, mail user agent, etc. The execution of arbitrary code is theoretically possible but...

PHP Pro Bid Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl //////////////////////////////////\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\\\////////////////////////////////// o PHP Pro Bid Blind SQL Injection Exploit Software : PHP Pro Bid Vendor : http://www.phpprobid.com/ Author :...

Agoko CMS <= 0.4 Remote Command Execution Exploit

Exploit for unknown platform in category web applications ================================================= Agoko CMS perl xpl.pl host path Example - perl agk.pl localhost /Agoko ; ------------ Working ------------ perl xpl.pl host path Example - perl agk.pl localhost /Agoko shell already exists...

php5 characteristics of the vulnerability-vulnerability warning-the black bar safety net

Use is PHP5,is because of the SERVER variables are not affected by the'quotes of the limit,even on a escape Vulnerabilities in User-Agent Second:the insert into a plurality of data insertion Hereinafter, the structure of the place is insert INTO $dbprefixsessions...

Steady CMS 5.5 SQL Injection

=============================================== Steady-CmS Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 + Discovered By : Inj3ct0r + Site : Inj3ct0r.com + support e-mail :...

ITechBids 8.0 (itechd.php productid) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " \n"; print " ITechBids v8.0 Blind SQL Injection Exploit \n"; print " \n"; print " itechd.php productid...

Joomla Component com_pms 2.0.4 (Ignore-List) SQL Injection Exploit

No description provided by source. ?php / -------------------------- Joomla =1.0.15 Component compms =2.0.4 Ignore-List SQl-Injection Vuln -------------------------- Author: M4dhead Vulnerable joomla component : compms Conditions : magicquotesgpc = On or Off it doesn't matter ;...