1033 matches found
CVE-2014-5375: Improper Input Validation
The server in Adaptive Computing Moab before 7.2.9 and 8 before 8.0.0 does not properly validate the message owner matches the submitting user, which allows remote authenticated users to impersonate arbitrary users via the UserId and Owner tags...
PT-2014-6436
Name of the Vulnerable Software and Affected Versions Adaptive Computing Moab versions prior to 7.2.9 Adaptive Computing Moab version 8 before 8.0.0 Description The issue arises from the server's failure to properly validate whether the message owner matches the submitting user. This allows remot...
PT-2014-2214
Name of the Vulnerable Software and Affected Versions XOOPS versions prior to 2.5.5 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the to userid parameter to "modules/pm/pmlite.php" or the current file, imgcat id, or target parameter...
vBulletin 4.0.x 4.1.2 - search.php?cat SQL Injection
vBulletin 4.0.x 4.1.2 - search.php?cat SQL Injection vBulletin 4.0.x = 4.1.2 AUTOMATIC SQL Injection exploit Author: D35m0nd142, Google Dork: inurl:search.php?searchtype=1 Date: 02/09/2014 Vendor Homepage: http://www.vbulletin.com/ Tested on: vBulletin 4.1.2 Usage: perl exploit.pl Tutorial video:...
vBulletin 4.0.x < 4.1.2 - 'search.php?cat' SQL Injection
vBulletin 4.0.x = 4.1.2 AUTOMATIC SQL Injection exploit Author: D35m0nd142, Google Dork: inurl:search.php?searchtype=1 Date: 02/09/2014 Vendor Homepage: http://www.vbulletin.com/ Tested on: vBulletin 4.1.2 Usage: perl exploit.pl Tutorial video: https://www.youtube.com/watch?v=jec3nkoYFc...
EFS Software Easy File Management Web Server UserID Buffer Overflow
A stack buffer overflow vulnerability exist in Easy File Management Web Server. The vulnerability is due to an boundary error when handling UserID cookie. An unauthenticated remote attacker could exploit this vulnerability by sending a crafted HTTP request to the vulnerable server...
Easy File Management Web Server UserID Cookie Handling Buffer Overflow
Added: 07/02/2014 BID: 67542 OSVDB: 107241 Background Easy File Management Web Server is a Microsoft Windows based file management application that allows remote users to upload and download files through a web browser. It also supports online editing of Word, Excel, PowerPoint and PDF documents ...
Easy File Management Web Server UserID Cookie Handling Buffer Overflow
Added: 07/02/2014 BID: 67542 OSVDB: 107241 Background Easy File Management Web Server is a Microsoft Windows based file management application that allows remote users to upload and download files through a web browser. It also supports online editing of Word, Excel, PowerPoint and PDF documents ...
Woltlab Burningboard Addon Kleinanzeigenmarkt SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w Woltlab Burningboard Addon Kleinanzeigenmarkt SQL Injection Exploit Exploit by fred777 full np stuff 3 Greez to all teh l33t sh1t like : Core.am Back2hack.cc Free-hack.com fred777.de Usage: exploit.pl page userid Example: perl exploit.pl...
Kerio MailServer 5.6.3 - Remote Buffer Overflow Exploit
No description provided by source. / Remote Buffer Overflow Exploit for Kerio MailServer 5.6.3 / / ========================================= / / By B-r00t / / / / In response to the Kerio Mailserver vulnerabilities / / discovered by David F.Madrid. / / / / Although this exploit requires valid...
OvBB 0.x profile.php userid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/15566/info OvBB is prone to multiple SQL injection vulnerabilities. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit...
ISC INN 2.x Command-Line Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/2620/info The innfeed utility, part of ISC InterNetNews, has an exploitable buffer overflow in its command-line parser. Specifically, innfeed will overflow if an overly long -c option is passed to it. A local attacker in...
PHP Gift Registry 1.5.5 - SQL Injection
No description provided by source. Exploit Title: PHP Gift Registry 1.5.5 SQL Injection Date: 02/22/12 Author: G13 Software Link: https://sourceforge.net/projects/phpgiftreg/ Version: 1.5.5 Category: webapps php Vulnerability The userid parameter in the users.php file is vulnerable to SQL...
ASPNuke <= 0.80 (article.asp) SQL Injection Exploit
No description provided by source. !/usr/bin/perl T r a p - S e t U n d e r g r o u n d H a c k i n g T e a m EXPLOIT FOR: ASPNuke ASP Portal Expl0it By: [email protected] Discovered By: Trap-Set Underground Hacking Team oilKarchacK GR33tz T0 == Alphaprogrammer -- oilKarchack -- theCephaleX --...
FileBound 6.2 Privilege Escalation Vulnerability
No description provided by source. Sense of Security - Security Advisory - SOS-12-010 Release Date. 10-Oct-2012 Last Update. - Vendor Notification Date. 14-Aug-2012 Product. FileBound On-Site Platform. Windows Affected versions. All versions prior to 6.2 Severity Rating. High Impact. Privilege...
Easy File Management Web Server Stack Buffer Overflow
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking Reliable memory corruption include...
phpArcadeScript <= 3.0RC2 (userid) SQL Injection Vulnerability
No description provided by source. phpArcadeScript all version Remote Sql Injection Exploit AUTHOR:SoSo H H Iraqi-Cracker Script Site: http://www.phparcadescript.com/ Price:$30.00 Tested on: Versions:1.0,2.0,3.0 RC1 &RC2 Dorks:Powered by phpArcadeScript v1.0 Powered by phpArcadeScript v2.0 Powere...
webSPELL <= 4.01.01 Database Backup Download Vulnerability
No description provided by source. WebSPELL = 4.01.01 Accessible Database Backup Download Exploit Discovered by: Trex Visit: www.SecuritySector.org / www.UnderGround.ag Exploit: http://SITE/PATH/admin/database.php?action=write&userID=1 Solution: http://cms.webspell.org/index.php?site=files&file=1...
Stack overflow
Stack-based buffer overflow in Easy File Sharing EFS Web Server 6.8 allows remote attackers to execute arbitrary code via a long string in a cookie UserID parameter to vfolder.ghp...
