2221 matches found
Ubuntu Update for opie vulnerability USN-955-1
Ubuntu Update for Linux kernel vulnerabilities USN-955-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9551.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for opie vulnerability USN-955-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...
CVE-2010-2073
authdbconfig.py in Pyftpd 0.8.4 contains hard-coded usernames and passwords for the 1 test, 2 user, and 3 roxon accounts, which allows remote attackers to read arbitrary files from the FTP server...
CVE-2010-2073
authdbconfig.py in Pyftpd 0.8.4 contains hard-coded usernames and passwords for the 1 test, 2 user, and 3 roxon accounts, which allows remote attackers to read arbitrary files from the FTP server...
Netvolution CMS 2.x - SQL Injection Script
Netvolution CMS 2.x - SQL Injection Script !/usr/bin/perl Exploit Title: Netvolution exploit script for CMS Version = 2.xx.xx.xx Date: 10/6/2010 Sotware Link: www.netvolution.net Bug found : amquen, krumel Exploited by: krumel Exploit Coded: mr.pr0n Many thanks to icesurfer author of SQLNINJA and...
ECShop - 'search.php' SQL Injection
Exploit Title: ECShop Search.php SQL Injection Exploit Date: 2010-05-17 Author: Jannock Software Link: http://www.ecshop.com Version: ECShop All Version Tested on: CVE : WAVDB: WAVDB-01606 Code : ". "\n+ Ex.: php ".$argv0." localhost / 1". "\n\n"; function query$pos, $chr, $chs,$goodid switch $ch...
WebJaxe 1.01 SQL Injection
Exploit Title: WebJaxe Sql Injection Date: 14-05-2010 Author: IHTeam Software Link: http://media4.obspm.fr/outils/webjaxe/en/ Version: 1.01 Tested on: Win/Linux !You need a registred user! http://site/path/php/partieadministrateur/administration.php?page=projetcontribution&idcontribution=SQL...
Easynet Forum Host - topic.php SQL Injection
Easynet Forum Host - topic.php SQL Injection Exploit Title: Easynet Forum Host topic.php SQL Injection Vulnerbility Date: 05/04/2008 Author: Pr0T3cT10n Software Link: http://www.easynet4u.com/forum Version: all Tested on: all CVE: Code: //------------------------------------------------ // Easyne...
Easynet Forum Host SQL Injection
Exploit Title: Easynet Forum Host topic.php SQL Injection Vulnerbility Date: 05/04/2008 Author: Pr0T3cT10n Software Link: http://www.easynet4u.com/forum Version: all Tested on: all CVE: Code: //------------------------------------------------ // Easynet Forum Host SQL Injection Vulnerbility...
PHPKit 1.6.1 - mailer.php SQL Injection
PHPKit 1.6.1 - mailer.php SQL Injection Phpkit 1.6.1 SQL Injection member.php | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: Phpkit 1.6.1 SQL Injection member.php Vulnerabilities SQL Injection Language: PHP Download: this script is for free Founder: ea$y laster...
Drupal's <= v6.x-1.0 Realname User Reference Widget contributed module
Exploit for unknown platform in category web applications ====================================================================== Drupal's Description of Vulnerability: ----------------------------- Drupal is a free software package that allows an individual or a community of users to easily...
Authentication flaw
MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote attackers to discover usernames, passwords, and unspecified other data from the user database via a modified authentication sequence to the Audio Server, aka Bug ID CSCsv76935...
CVE-2010-0141
MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote attackers to discover usernames, passwords, and unspecified other data from the user database via a modified authentication sequence to the Audio Server, aka Bug ID CSCsv76935...
Joomla Component com_gurujibook SQL injection Vulnerability
No description provided by source. -------------------------------------------------------- Joomla comgurujibook SQL injection Vulnerability -------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected] site:anti-sec.info/vb/index.php...
autocomplete box in page restrictions finds deleted users, wrong usernames
We recently migrated our user management from JIRA to Crowd, our Confluence instance used to link to JIRA for authentication, and now links to Crowd. We now found that, when editing the restrictions on individual pages, the autocomplete feature in that dialog acts strange: Users that have been...
Joomla DM Orders SQL Injection
============================================================================== o Joomla Components comdmorders SQL Injection Vulnerability Software : comdmorders joomla components Author : NoGe Contact : nogedotcodeatgmaildotcom Blog : http://evilc0de.blogspot.com/...
SQL Injection Hits Social Net for Developers
A SQL injection flaw has been discovered in Rockyou.com – a social networking application development website used by app developers for Bebo, Facebook and Myspace; The flaw could have allowed hackers access to the 32 million usernames and passwords. Read the full article. eWEEK Europe...
Joomla Component MusicGallery SQL injection vulnerability
No description provided by source. / ! Joomla Component MusicGallery SQL injection vulnerability ! Author : Don Tukulesto [email protected] ! Homepage : http://www.indonesiancoder.com ! Date : November 15, 2009 ! Tune In : http://antisecradio.fm choose your weapon / Software Information +...
CVE-2009-3727
Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.3, 1.6.0.x before 1.6.0.17, and 1.6.1.x before 1.6.1.9; Business Edition A.x.x, B.x.x before B.2.5.12, C.2.x.x before C.2.4.5, and C.3.x.x before C.3.2.2; AsteriskNOW 1.5; and s800i 1.3.x before 1.3.0.5 generate different error message...
CVE-2009-3727
Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.3, 1.6.0.x before 1.6.0.17, and 1.6.1.x before 1.6.1.9; Business Edition A.x.x, B.x.x before B.2.5.12, C.2.x.x before C.2.4.5, and C.3.x.x before C.3.2.2; AsteriskNOW 1.5; and s800i 1.3.x before 1.3.0.5 generate different error message...
DEBIAN-CVE-2009-3727
Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.3, 1.6.0.x before 1.6.0.17, and 1.6.1.x before 1.6.1.9; Business Edition A.x.x, B.x.x before B.2.5.12, C.2.x.x before C.2.4.5, and C.3.x.x before C.3.2.2; AsteriskNOW 1.5; and s800i 1.3.x before 1.3.0.5 generate different error message...