2095 matches found
Seccubus 2.0.alpha1 released, Download Now !
So what is the difference between Seccubus V2 and Seccubus V2 ? Before you try something new you want to know if it is going to be worth it. This article should give you an idea of why we spend quite a lot of time and energy in rebuilding Seccubus V2 from scratch. I clearly recall the conversatio...
ProQuiz 2.0.0b Arbitrary Upload Vulnerability
Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................ProQuiz V2 Vulnerability...........Arbitrary Upload Download................http://proquiz.softon.org/ Release Date............2/20/2011 Tested...
ProQuiz 2.0.0b - Arbitrary File Upload
ProQuiz 2.0.0b - Arbitrary File Upload Source: http://packetstormsecurity.org/files/view/98669/ProQuiz-Shell.py.txt ------------------------------------------------------------------------ Software................ProQuiz V2 Vulnerability...........Arbitrary Upload...
ProQuiz 2.0.0b - Arbitrary File Upload
Source: http://packetstormsecurity.org/files/view/98669/ProQuiz-Shell.py.txt ------------------------------------------------------------------------ Software................ProQuiz V2 Vulnerability...........Arbitrary Upload Download................http://proquiz.softon.org/ Release...
ProQuiz 2 Shell Upload
------------------------------------------------------------------------ Software................ProQuiz V2 Vulnerability...........Arbitrary Upload Download................http://proquiz.softon.org/ Release Date............2/20/2011 Tested On...............Windows Vista + XAMPP...
CVE-2011-0645
SQL injection vulnerability in data.php in PHPCMS 2008 V2 allows remote attackers to execute arbitrary SQL commands via the wheretime parameter in a get action...
Sql injection
SQL injection vulnerability in include/admin/modelfield.class.php in PHPCMS 2008 V2 allows remote attackers to execute arbitrary SQL commands via the modelid parameter to flashupload.php...
Sql injection
SQL injection vulnerability in data.php in PHPCMS 2008 V2 allows remote attackers to execute arbitrary SQL commands via the wheretime parameter in a get action...
CVE-2011-0644
SQL injection vulnerability in include/admin/modelfield.class.php in PHPCMS 2008 V2 allows remote attackers to execute arbitrary SQL commands via the modelid parameter to flashupload.php...
CVE-2011-0645
SQL injection vulnerability in data.php in PHPCMS 2008 V2 allows remote attackers to execute arbitrary SQL commands via the wheretime parameter in a get action...
CVE-2011-0645
CVE-2011-0645 corresponds to a SQL injection in PHPCMS 2008 V2, specifically in data.php via the where_time parameter of a get action, enabling remote arbitrary SQL execution. The vulnerability is due to improper handling of user-supplied input in the query, as reported across multiple sources (N...
phpcms 2 0 0 8 V2 injection vulnerability 0day analysis-vulnerability warning-the black bar safety net
Release date: 2011-01. 2 2 Publishing author: xhm1n9 Affected versions: Phpcms 2 0 0 8 V2 Official website: Vulnerability type: SQL injection Vulnerability description: 根目录下flashupload.php file$modelid useless in single quotation marks protection, the front is also missing the filter, the presenc...
SuSE 11.1 Security Update : ed (SAT Patch Number 3792)
This update fixes a heap-based buffer overflow in ed which can be exploited remotely only with user-assistance. CVE-2008-3916: CVSS v2 Base Score: 9.3 HIGH AV:N/AC:M/Au:N/C:C/I:C/A:C: Buffer Errors. CWE-119 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...
SuSE 11 / 11.1 Security Update : kdenetwork (SAT Patch Numbers 3563 / 3564)
This update of kdenetwork fixes several bugs, the security related issues are : - The 'name' attribute of the 'file' element of metalink files is not properly sanitised this can be exploited to download files to arbitrary directories. CVE-2010-1000: CVSS v2 Base Score: 4.3...
SuSE 11 / 11.1 Security Update : CUPS (SAT Patch Numbers 3575 / 3576)
This updates fix several bugs, but only the security fixes are listed here : - Special IPP requests allow to crash cupsd remotely. CVE-2010-2941: CVSS v2 Base Score: 3.3 AV:A/AC:L/Au:N/C:N/I:N/A:P: CWE-399 - A NULL pointer dereference exists in the WriteProlog function of the texttops image filte...
Easy Travel Portal 2 - 'travelbycountry.asp' SQL Injection
TITLE: Easy Travel Portal "travelbycountry.asp" SQL Injection Vulnerability PRODUCT: Easy Travel Portal v2 PRODUCT URL: http://www.softwebsnepal.com/travelwebsiteprogammingportal.htm RESEARCHERS: underground-stockholm.com RESEARCHERS URL: http://underground-stockholm.com/ VULN:...
ZYXEL P-660R-T1 V2 - HomeCurrent_Date Cross-Site Scripting
ZYXEL P-660R-T1 V2 - HomeCurrentDate Cross-Site Scripting source: https://www.securityfocus.com/bid/45027/info ZyXEL P-660R-T1 V2 is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary...
ZYXEL P-660R-T1 V2 - 'HomeCurrent_Date' Cross-Site Scripting
source: https://www.securityfocus.com/bid/45027/info ZyXEL P-660R-T1 V2 is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary HTML and script code in the browser of an unsuspecting us...
ZyXEL P-660R-T1 V2 Cross Site Scripting
Name : ZyXEL P-660R-T1 V2 XSS Author : Usman Saeed from Xc0re Security Research Group Homepage :http://www.xc0re.net Dated : 22/11/2010 Exploit: VECTOR :http://IP/Forms/home1?&HomeCurrentDate='alert1;'01%2F01%2F2000 This works with the post request ! As by default this value is sent through POST...
ReOS v2 0 5 RFI Vulnerability
Exploit for php platform in category web applications ============================= ReOS v2 0 5 RFI Vulnerability ============================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /\ \ 7 1 /, /\L\ \ /\L\ \///'/' \ \ \ \ 1 3...