779 matches found
mg.applanix <= 1.3.1 (apx_root_path) Remote File Include Vulnerabilities
No description provided by source. v1per-haCker How I Can lives Without FooL Programmer! ======================================================================================= mg.applanix RFI ======================================================================================= Information:-...
mg.applanix (RFI)
v1per-haCker How I Can lives Without FooL Programmer! ======================================================================================= mg.applanix RFI ======================================================================================= Information:- Scripts: mg.applanix download :...
mg.applanix 1.3.1 - 'apx_root_path' Remote File Inclusion
v1per-haCker How I Can lives Without FooL Programmer! ======================================================================================= mg.applanix RFI ======================================================================================= Information:- Scripts: mg.applanix download :...
PT-2006-6556 · Brewblogger · Brewblogger
Name of the Vulnerable Software and Affected Versions: BrewBlogger version 1.3.1 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the printLog.php file. Recommendations: For BrewBlogger version 1.3.1, consider restricting...
bitweaver131.txt
bitweaver xss post in message title submit article http://localhost/bitweaver/blogs/post.php == xss post in message title blog http://localhost/bitweaver/wiki/edit.php?page=SandBox == xss post in message description wiki those xss are pretty dangerous , like in submit article , wich is only viewe...
PEAR XML_RPC Remote Code Execution Vulnerability
GulfTech Security Research June 29th, 2005 Vendor : The PEAR Group URL : http://pear.php.net/package/XMLRPC/ Version : PEAR XMLRPC 1.3.0 && Earlier Risk : Remote Command Execution Description: PEAR XMLRPC is a PHP implementation of the XML-RPC web RPC protocol, and used by many different develope...
Gaim < 1.3.1 Multiple Vulnerabilities
Binary data 3012.prm...
invision203.txt
Invision Power Board v2.0.3 XSS vulnerabilities found more at user signature. when Admin read attacker topics, admin will lost his passhash example...
Invision Power Board (IP.Board) 1.x2.0.3 - SML Code Script Injection
Invision Power Board IP.Board 1.x2.0.3 - SML Code Script Injection source: https://www.securityfocus.com/bid/12607/info Invision Power Board is reported prone to a JavaScript injection vulnerability. It is reported that the SML Code 'COLOR' tag is not sufficiently sanitized of malicious script...
Invision Power Board (IP.Board) 1.x/2.0.3 - SML Code Script Injection
source: https://www.securityfocus.com/bid/12607/info Invision Power Board is reported prone to a JavaScript injection vulnerability. It is reported that the SML Code 'COLOR' tag is not sufficiently sanitized of malicious script content. Since this could permit an attacker to inject hostile...
DEBIAN-CVE-2004-0643
Double free vulnerability in the krb5rdcred function for MIT Kerberos 5 krb5 1.3.1 and earlier may allow local users to execute arbitrary code...
Painkiller <= 1.3.1 Denial of Service Exploit
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h ifdef WIN32 include winsock.h include "winerr.h" define close closesocket else include unistd.h include sys/socket.h include sys/types.h include arpa/inet.h include netdb.h endif define VER...
Painkiller <= 1.3.1 Denial of Service Exploit
Exploit for unknown platform in category dos / poc ============================================= Painkiller include include ifdef WIN32 include include "winerr.h" define close closesocket else include include include include include endif define VER "0.1" define BUFFSZ 2048 define PORT 3455 defin...
Painkiller 1.3.1 - Denial of Service
/ by Luigi Auriemma / include include include ifdef WIN32 include include "winerr.h" define close closesocket else include include include include include endif define VER "0.1" define BUFFSZ 2048 define PORT 3455 define TIMEOUT 3 define GAMEVER "1.3" define INFO "xfexfdx00xDExADxC0xDExffxffxff"...
CuteNews 1.3.1 - 'show_archives.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/10948/info It is reported that CuteNews is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issue could permit a remote attacker to create a malicious UR...
Invision Power Board 1.3 - 'SSI.php' SQL Injection
source: https://www.securityfocus.com/bid/10511/info Invision Power Board is reported prone to an SQL injection vulnerability in its 'ssi.php' script. Due to improper filtering of user supplied data, 'ssi.php' is exploitable by attackers to pass SQL statements to the underlying database. The impa...
Invision Power Board (IP.Board) < 1.3.1 - Design Error
IP.Board Design Error Vendor: Invision Power Services Product: IP.Board Version: = 1.3.1 Website: http://www.invisionpower.com/ BID: 10559 Description: Invision Power Board IPB is a professional forum system that has been built from the ground up with speed and security in mind, taking advantage ...
Invision Power Board (IP.Board) 1.3.1 - Design Error
Invision Power Board IP.Board 1.3.1 - Design Error IP.Board Design Error Vendor: Invision Power Services Product: IP.Board Version: = 1.3.1 Website: http://www.invisionpower.com/ BID: 10559 Description: Invision Power Board IPB is a professional forum system that has been built from the ground up...
YABB information leakage on failed login
YABB is a popular web-based bulletin board system, written in perl and available from http://www.yabbforum.com/. While evaluating it, I found a minor issue where an attacker trying to log in to the forums can extract some useful information making his job easier than it needs to be. Most YABB...