PHP 4.4.3 - 4.4.6 phpinfo() Remote XSS Vulnerability

Exploit for multiple platform in category remote exploits ==================================================== PHP 4.4.3 - 4.4.6 phpinfo Remote XSS Vulnerability ==================================================== //////////////////////////////////////////////////////////////////////// // // // ...

Michelle's L2J Dropcalc

============================================================================================== Title: Michelle's L2J Dropcalc Version: = v4 Web Site: http://www.msknight.com/comps/lineage2/myl2jdropcalc.htm Discovered By: Codebreak [email protected] | www.codebreak.tk...

Torbstoff News 4 (pfad) Remote File Inclusion Vulnerability

No description provided by source. ================================================================= Torbstoff News 4 = pfad Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site : http://www.torbstoff.de | |...

Links ELinks SMBClient远程命令执行漏洞

Links ELinks是一款web浏览器。 Links ELinks存在一个缺陷，允许恶意web站点在目标机器上执行smbclient命令，此缺陷可能导致从目标系统上读取任意文件或者上传恶意文件到目标系统并执行。 具体问题代码如下： smbfunc in smb.c: ... 143 if share 144 if !dir || dirstrlendir - 1 == '/' || dirstrlendir - 1 == '\' 145 if dir 146 vn++ = "-D"; 147 vn++ = dir; 148 149 vn++ = "-c"; 150 vn++ =...

StoryStream 4.0 - baseDir Remote File Inclusion

StoryStream 4.0 - baseDir Remote File Inclusion v1per-haCker How I Can lives Without FooL Programmer! ======================================================================================= Storystream RFI =======================================================================================...

# ForumJBC v4 < = Cross-Site Scripting - XSS Exploit ;

ForumJBC v4 = Cross-Site Scripting - XSS Exploit ; Discovred By : ThELeO ; Software : ForumJBC v4 ; Site Of SoftWare : http://jbc.unlimited.free.fr Version : 4 ; Exploit : http://Www.Victime.Com/Script/haut.php?nbconnecte=scriptalert'hacking20xss' /script ; Greetz : M.I.D.TDrackanZ, Mr.IlysS,...

Torbstoff News 4 - pfad Remote File Inclusion

Torbstoff News 4 - pfad Remote File Inclusion ================================================================= Torbstoff News 4 = pfad Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site :...

Torbstoff News 4 (pfad) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications =========================================================== Torbstoff News 4 pfad Remote File Inclusion Vulnerability ===========================================================...

MySQL 4.x5.x - Server Date_Format Denial of Service

MySQL 4.x5.x - Server DateFormat Denial of Service source: https://www.securityfocus.com/bid/19032/info MySQL is prone to a remote denial-of-service vulnerability because the database server fails to properly handle unexpected input. This issue allows remote attackers to crash affected database...

MySQL 4.x/5.x - Server Date_Format Denial of Service

source: https://www.securityfocus.com/bid/19032/info MySQL is prone to a remote denial-of-service vulnerability because the database server fails to properly handle unexpected input. This issue allows remote attackers to crash affected database servers, denying service to legitimate users...

Sql-injection in PollPro Version 4

Advisory: Sql-injection in PollPro Version 4 Довольно популярный скрипт для голосований. Уязвимый скрипт/Vulnerable script: previouspoll.asp SQL-inlections: http://www.codefixer.com/poll/previouspoll.asp?pollID=36' -------------------------- Cyber Lords Team www.cyberlords.net...

[SA19397] uniForum "websecadmin.aspx" Cross-Site Scripting

TITLE: uniForum "websecadmin.aspx" Cross-Site Scripting SECUNIA ADVISORY ID: SA19397 VERIFY ADVISORY: http://secunia.com/advisories/19397/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: uniForum 4.x http://secunia.com/product/8960/ DESCRIPTION: r0t has reported ...

[SA18885] webSPELL "search.php" SQL Injection Vulnerability

TITLE: webSPELL "search.php" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA18885 VERIFY ADVISORY: http://secunia.com/advisories/18885/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: webSPELL 4.x http://secunia.com/product/8086/ DESCRIPTION: x128 has...

waraxe-2005-SA041.txt

================================================================================ waraxe-2005-SA041 ================================================================================ Critical Sql Injection in PhpNuke 6.x-7.6 Top module...

[Full-disclosure] [USN-112-1] PHP4 vulnerabilities

=========================================================== Ubuntu Security Notice USN-112-1 April 14, 2005 php4 vulnerabilities CAN-2005-1042, CAN-2005-1043 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 4.10 Warty Warth...

CVE-2005-0854

The CVE-2005-0854 entry concerns betaparticle blog (bp blog) prior to version 4. It reports an authentication bypass that enables remote attackers to perform file operations via direct requests to upload.asp or myFiles.asp (upload and delete respectively). The vulnerability allows unauthorized ac...

Debian DSA-266-1 : krb5 - several vulnerabilities

Several vulnerabilities have been discovered in krb5, an implementation of MIT Kerberos. - A cryptographic weakness in version 4 of the Kerberos protocol allows an attacker to use a chosen-plaintext attack to impersonate any principal in a realm. Additional cryptographic weaknesses in the krb4...

ISC BIND Version 4 Detection (deprecated)

Binary data 1014.prm...

NTP service vulnerable to internal overflow if date / time offset is greater than 34 years

Overview NTP Network TIme Protocol contains an integer overflow vulnerability that may lead to clients receiving an incorrect date/time offset. Description NTP Network Time Protocol is a method by which client machines can synchronize the local date and time with a reference server. The server wi...

[SECURITY] [DSA 269-1] New heimdal packages fix authentication failure

-------------------------------------------------------------------------- Debian Security Advisory DSA 269-1 [email protected] http://www.debian.org/security/ Martin Schulze March 26th, 2003 http://www.debian.org/security/faq -...