Etano 1.201.22 - photo_search.php Multiple Cross-Site Scripting Vulnerabilities

Etano 1.201.22 - photosearch.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/52295/info Etano is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues t...

PT-2010-3334 · Cursorarts · Zipwrangler

Name of the Vulnerable Software and Affected Versions: CursorArts ZipWrangler version 1.20 Description: The issue allows user-assisted remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename. This is due to a stack-based buffer overflow. Recommendations: F...

Vulnerabilities in WP-Cumulus for WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Full path disclosure и Cross-Site Scripting уязвимостях в плагине WP-Cumulus для WordPress. Full path disclosure: http://site/wp-content/plugins/wp-cumulus/wp-cumulus.php XSS:...

Ease Audio Cutter 1.20 (.wav file) Local Crash PoC

Exploit for unknown platform in category dos / poc ================================================== Ease Audio Cutter 1.20 .wav file Local Crash PoC ================================================== !/usr/bin/perl Ease Audio Cutter 1.20 .wav file Local Crash PoC By : zAx Application Homepage :...

HLStats <=1.34 (hlstats.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================= HLStats = 1.20 works with magicquotesgpc=On by Michael Brooks / print "HLStats SQL Injection Exploit...

php-atm.txt

PHP Advanced Transfer Manager Download users password hashes PHP Advanced Transfer Manager 1. Site:http://phpatm.free.fr/ ---------------------------------------------------- Bugs: http://victim.com/path/users/username ---------------------------------------------------- example:...

[Full-disclosure] [SECURITY] [DSA 942-1] New albatross packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 942-1 [email protected] http://www.debian.org/security/ Martin Schulze January 16th, 2006 http://www.debian.org/security/faq -...

CVE-2002-1482

SQL injection vulnerability in login.php for phpGB 1.20 and earlier, when magicquotesgpc is not enabled, allows remote attackers to gain administrative privileges via SQL code in the password entry...