GenesisTrader 1.0 - form.php Multiple Cross-Site Scripting Vulnerabilities

GenesisTrader 1.0 - form.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/21595/info GenesisTrader is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. These issues include...

PHP Classifieds catid_search及catid变量远程SQL注入漏洞

PHP Classifieds是一款基于WEB的PHP编写的目录分类程序。 PHP Classifieds对用户提交给的参数缺少正确充分的过滤，远程攻击者可以利用此漏洞非授权操作数据库。 PHP Classifieds的index.php和search.php脚本对用户提交catidsearch或catid参数数据缺少充分过滤，远程攻击者可以通过在输入数据中插入特定的SQL命令来非授权获取对数据库的访问。 DeltaScripts PHP Classifieds = 7.1 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Boonex Dolphin <= 5.2 index.php Remote Code Execution Exploit

Exploit for unknown platform in category web applications ============================================================= Boonex Dolphin //templates/tmpldfl/scripts/index.php?dirinc= w4ck1ng - w4ck1ng.com / if!$argv3 die"Usage: php $argv0 host path command\n Usage Example: php $argv0 domain.com...

phpBB PlusXL 2.0_272 - 'constants.php' Remote File Inclusion

!/usr/bin/perl phpBB PlusXL 2.X biuld 272 Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://www.xs4all.nl/hkicken/plusxl.htm...

phpIncludes.txt

Title..: 7 php scripts File Inclusion Vuln / Source disclosure Credits: DarkFig Og.link: http://acid-root.new.fr/poc/13061007.txt Using http://www.google.com/codesearch Few examples about what we can do with a code search engine For educational purpose only. You can use regex in your research, th...

Infecting Elf Binaries to Gain Local Root Exploit

Exploit for linux platform in category local exploits ================================================= Infecting Elf Binaries to Gain Local Root Exploit ================================================= gcc infR3.s -o infR3 strip infR3 find a writable binary example: ls ./infR3 /bin/ls when root...

vBulletin v3.5.4: HTTP Response Splitting

Здравствуйте, vuln. Уязвимость в параметре url скрипта inlinemod.php при POST-запросе: зарегистрированный пользователь может редактировать http-ответ. ПРИМЕР: POST /vb354/inlinemod.php HTTP/1.0 Cookie: bbpassword=a5c3d9e61bcb8dea99105143c772bcd9; bbuserid=1 Content-Length: 93 Accept: /...

CoreNews 2.0.1 - userid SQL Injection

CoreNews 2.0.1 - userid SQL Injection !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=24 Usage: corenews.pl use IO::Socket; if@ARGV != 2 usage; else exploit; sub header...

Clansys v.1.1 (showid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================== Clansys v.1.1 showid Remote SQL Injection Exploit =================================================== Internet Security |...

Sentinel is a compact anti-sniffer tools-vulnerability warning-the black bar safety net

by xundi This morning a friend asked me, say what tool found in the network to be sniffing the better, I say ISS the anti-Sniffer? he said too slow! Later to remember the previous visiting network when seen Such a program is also antisniffer type, so they put it to find out. The Sentinel is...

Symantec Sygate Management Server: SMS Authentication Servlet SQL Injection

SUMMARY A SQL injection vulnerability in Symantec's Sygate Management Server SMS version 4.1, build 1417 and earlier could potentially allow a remote or local attacker to gain administrative privileges to the SMS server. Risk Impact High Remote Access | Yes ---|--- Local Access | Yes Authenticati...

xeCMS 1.0.0 RC 2 (cookie) Remote Command Execution Exploit

Exploit for unknown platform in category web applications ========================================================== xeCMS 1.0.0 RC 2 cookie Remote Command Execution Exploit ========================================================== !/usr/bin/perl xeCMS 1.0.0 RC 2 Remote Command Execution Exploit...

SimpleBBS &lt;= 1.1 Remote Commands Execution Exploit (c code)

No description provided by source. / SimpleBBS = v1.1 remote commands execution in c coded by: unitedasia v.Dec.7.2005 greetz: iloveyouma http://geography.about.com/library/maps/blrasia.htm http://www.lib.utexas.edu/maps/middleeastandasia/asiapol00.jpg $ gcc -o bbs bbs.c Usage ./bbs host /folder/...

[Full-disclosure] [scip_Advisory] e107 v0.6 rate.php manipulation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 e107 v0.6 rate.php voting manipulation and forwarding vulnerability scip AG Vulnerability Advisory 11/10/2005 http://www.scip.ch I. INTRODUCTION e107 is the name of an open-source content management system cms that relies on php and sql. More...

Lore 1.5.4/1.5.6 - 'article.php' SQL Injection

source: https://www.securityfocus.com/bid/15665/info Lore is prone to an SQL injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or modify data, or...

Microsoft IIS 'bdir.htr' Default Files - Active Check

The file bdir.htr is a default IIS files which can give a malicious user a lot of unnecessary information about your file system. SPDX-FileCopyrightText: 2003 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Check for Chargen Service (TCP)

The remote host is running a SPDX-FileCopyrightText: 1999 Mathieu Perrin Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10043";...

Too long line

It was possible to kill the service by sending a single long text line. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nuked-klan <= 1.3b Multiple Vulnerabilities - Active Check

Nuked-klan is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2003 k-otik.com Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BasiliX Detection

The remote web server contains a webmail application written in PHP. Description : This script detects whether the remote host is running BasiliX and extracts version numbers and locations of any instances found. BasiliX is a webmail application based on PHP and IMAP and powered by MySQL. OpenVAS...