353 matches found
Invision Power Board 2.0.3 - 'login.php' SQL Injection (Tutorial)
danica jones Tutorial for the recent exploit released by Petey Beege. 1. Get the exploit from http://www.milw0rm.com/id.php?id=1013 https://www.exploit-db.com/exploits/1013/ 2. Make sure you have LWP::UserAgent perl module if not do this: a. perl -MCPAN -e 'shell' b. inside the perl shell, do thi...
Gossamer Threads Links 2.x - 'User.cgi' Cross-Site Scripting
source: https://www.securityfocus.com/bid/13484/info Gossamer Threads Links is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in t...
Gossamer Threads Links 2.x - User.cgi Cross-Site Scripting
Gossamer Threads Links 2.x - User.cgi Cross-Site Scripting source: https://www.securityfocus.com/bid/13484/info Gossamer Threads Links is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may...
[SA13285] JSPWiki "query" Parameter Cross-Site Scripting Vulnerability
TITLE: JSPWiki "query" Parameter Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA13285 VERIFY ADVISORY: http://secunia.com/advisories/13285/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: JSPWiki 2.x http://secunia.com/product/4310/ DESCRIPTION: Jeremy...
[SA12844] AliveSites Forum Unspecified Cross-Site Scripting and SQL Injection
TITLE: AliveSites Forum Unspecified Cross-Site Scripting and SQL Injection SECUNIA ADVISORY ID: SA12844 VERIFY ADVISORY: http://secunia.com/advisories/12844/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: AliveSites Forum 2.x...
WinRAR 1.0 - Local Buffer Overflow
WinRAR 1.0 - Local Buffer Overflow / WinRar local buffer overflow exploit V1.0 Coded By ATmaCA Copyright © 2004 ProGroup Software, Inc. E-Mail:[email protected] Web:www.prohack.net Usage:\r\nexploit Targets: 1 - WinXP SP1 user32.dll 0x77D718FC 2 - WinXP SP2 user32.dll 0x77D8AF0A Example:exploit ...
WinRAR 1.0 - Local Buffer Overflow
/ WinRar local buffer overflow exploit V1.0 Coded By ATmaCA Copyright © 2004 ProGroup Software, Inc. E-Mail:[email protected] Web:www.prohack.net Usage:\r\nexploit Targets: 1 - WinXP SP1 user32.dll 0x77D718FC 2 - WinXP SP2 user32.dll 0x77D8AF0A Example:exploit 1 myrar.rar / / All WinRar 2.x seri...
Cross Site Scripting in XOOPS Version 2.x Dictionary module
-------------------------------------------------------------------------- Cross Site Scripting in XOOPS Version 2.x Dictionary module -------------------------------------------------------------------------- Type: Cross Site Scripting XSS Titule: Xoops Dictionary module by nagl Date: August 28,...
NTP Server Protocol Version 2 Detection
Binary data 1149.prm...
WordPress 2.x < 2.6 'press-this.php' XSS
Binary data 4587.prm...
KPhone 2.x/3.x/4.0.1 - Malformed STUN Packet Denial of Service
source: https://www.securityfocus.com/bid/10159/info A denial of service vulnerability has been reported in KPhone. This issue may be triggered by a malformed SIP Session Initiation Protocol STUN message. This is due to insufficient validation of user-specified STUN packet attribute lengths,...
phpPass (PHP)
Informations : °°°°°°°°°°°°°° Version : 2 Website : http://www.agames-net.com Problem : SQL Injection PHP Code/Location : °°°°°°°°°°°°°°°°°°° accesscontrol.php : ------------------------------------------------ ... sessionregister"uid"; sessionregister"pwd"; ... $sql = "SELECT FROM user WHERE...
