E-vanced Solutions Multiple Vulnerabilites

E-vanced Solutions Multiple Vulnerabilites http://www.e-vancedsolutions.com First off, script code can be injected into all fields when you register for some event. This presents a possibility for cookie theft from logged in users. Next off, theres there exists an SQL injection point from the...

Directory traversal flaw in shttp

The most recent version of this advisory including any updates is available at: http://www.digineo.co.uk/shttpdirectorytraversal Directory Traversal Flaw in shttp --------------------------------- Affected product: shttp Product vendor: Vito Caputo - http://serverkit.org/modules/contrib/shttp/...

libvorbis 1.1.2 - Multiple memory corruption flaws

iSEC Partners Security Advisory - 2007-003-libvorbis http://www.isecpartners.com -------------------------------------------- libvorbis 1.1.2 - Multiple memory corruption flaws Vendor: Xiph.org Vendor URL: http://www.xiph.org Systems Affected: All tested software based upon libvorbis 1.1.2...

Netragard Security Advisory 2007-06-28

NETRAGARD ADVISORY http://www.netragard.com "We make IT Safe" Advisory Summary ----------------------------------------------------------------------- Advisory Author : Adriel T. Desautels Advisory ID : NETRAGARD-20070628 Product Name : Maia Mailguard Product Version : = 1.0.2 All Platforms Vendo...

eFiction < 2.0.7 Remote Admin Authentication Bypass Vulnerability

No description provided by source. eFiction vulnerability I am releasing this to the public. Vendor was notified. Someone is also illegally defacing these websites under MY name, which is a shame because they ripped it from a private discussion on g00ns.net. This proof of concept is not to be use...

XSS in Omegasoft's Insel

Hi together, This also works on serveral web-pages of this product. http://host/OmegaMw7a.ASP?WCI=Logon&WCE=0;scriptalertunescapedocument.cookie;/script There might be some ways for SQL-Injection, too, but i am not willing to try this at the real system : Vendor notified as CC regards MC.Iglo...

VP-ASP 6.00 (shopcurrency.asp) Remote SQL Injection Vulnerability

No description provided by source. VP-ASP 6.00 SQL Injection / Exploit by [email protected] people claimed there is some underground sploit for vp-asp 6.00 and I was sure that if a sploit really exist in the ug i can find the bug and make a small hack for it ^^ well it didn't take me mor...

VP-ASP 6.00 (shopcurrency.asp) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= VP-ASP 6.00 shopcurrency.asp Remote SQL Injection Vulnerability ================================================================= VP-ASP 6.00 SQL Injection / Exploit by...

VP-ASP 6.00 - 'shopcurrency.asp' SQL Injection

VP-ASP 6.00 SQL Injection / Exploit by [email protected] people claimed there is some underground sploit for vp-asp 6.00 and I was sure that if a sploit really exist in the ug i can find the bug and make a small hack for it ^^ well it didn't take me more then 5 minutes to find a bug in...

Mozilla Firefox 1.5.0.2 - 'js320.dll/xpcom_core.dll' Denial of Service (PoC)

...

mailEnableDoS.txt

Synopsis: MailEnable Imap Remote DOS. Product: MailEnable Pro MailEnable Enterprise http://www.mailenable.com Version: Confirmed on MailEnable Pro 1.7 and MailEnable Enterprise 1.1 Author: Josh Zlatin-Amishav Date: November 24, 2005 Background: MailEnable's mail server software provides a powerfu...

SEC-20051107-0.txt

SEC-CONSULT Security Advisory 20051107-0 ============================================================================= title: toendaCMS multiple vulnerabilites program: toendaCMS vulnerable version: .xml, where is string composed of 5 bytes e.g. 2ac336ff0d.xml. Each XML file contains username...

comersusXSSsql.txt

Spread The Word comersus based bookstore multiple script and variables XSS and SQL Injections vulnerabilities. vendor url:http://www.stwm.com/opportunity.asp advisore url:http://lostmon.blogspot.com/2005/05/ spread-word-multiple-xss-and-sql.html vendor notified:yes exploit available: yes Spread T...

Local Root exploit (Fedora Core 4)

Local Root Exploit under Fedora Core 4 stable Advisory Florian Strankowski [email protected] www.bildunxxluecke.de/usr/florian/advisory/advisory-05-048.txt Vulnerable System : This vulnerability affects Fedora Core 4.0 stable with the kernelversion 2.6.11-1.1369FC4 1 Thu Jun 2 22:53:35...

4d WebSTAR 5.x Web Server Mac OS X Buffer Overflow

4d WebSTAR 5.x Mac OS X Buffer Overflow Author: Braden Thomas Vendor: http://www.4d.com Product: 4d WebSTAR 5.33 and 5.4 Web Server on Mac OS X only trial version tested Risk: Medium, remote root unlikely, DoS likely PoC Exploit code included Description: 4d WebSTAR 5.x 5.33 and 5.4 tested contai...

phpweblog053.txt

-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: phpWebLog Version: ,,,,,,,,"; Are we developing? $GDEBUG = false; Number of seconds to hold cache $GCACHE = 10; phpWebLog version $GVER = "0.5.3"; ... /== include libraries/functions =========================================/...

Download Center Lite (DCL) - Arbitrary File Inclusion (VXSfx)

-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: Download Center Lite DCL Version: = 1.5 free/commercial Homepage: http://www.stadtaus.com/ Author: Filip Groszynski VXSfx Date: 4 March 2005 -- == -- == -- == -- == -- == -- == -- == -- == -- == -- Vulnerable code in...

Software PBLang 4.63 delpm.php authentication vulnerability

HRG - Hackerlounge Research Group Release: HRG009 Monday 03/01/05 Software PBLang 4.63 delpm.php authentication problem The author can't be held responsible for any damage done by a reader. You have your own resonsibility Please use this document like it's meant to. Vulnerable: PBLang 4.63 and...

ubbXSS.txt

Vendor: Infopop URL: http://www.infopop.com/ tested Versions: 6.2.3 & 6.5 remote: yes vendor notified: 06 Dec 2004 at 01:08 AM Vendor response: 06/07 Dec 2004 01:33 AM/06:08 PM Update status: ..in process ============================================================ Summary: UBBThreads is a High e...

[Full-Disclosure] Multiple XSS Vulnerabilities in several UBB.Thread Versions

Vendor: Infopop URL: http://www.infopop.com/ tested Versions: 6.2.3 & 6.5 remote: yes vendor notified: 06 Dec 2004 at 01:08 AM Vendor response: 06/07 Dec 2004 01:33 AM/06:08 PM Update status: ..in process ============================================================ Summary: UBBThreads is a High e...