CVE-2005-0468

Heap-based buffer overflow in the envoptadd function in telnet.c for various BSD-based Telnet clients allows remote attackers to execute arbitrary code via responses that contain a large number of characters that require escaping, which consumers more memory than allocated...

Snmppd - SNMP Proxy Daemon Remote Format String

Snmppd - SNMP Proxy Daemon Remote Format String / Snmppd SNMP proxy daemon format string exploit cybertronicatgmxdotnet 04/29/2005 buffer space is 1024 bytes MAXSNMPPDOIDLEN defined in snmppd-0.4.5/snmppd.h Apr 29 16:01:31 ctronic snmppd6274: fd 5: Request:...

CVE-2004-1487

wget 1.8.x and 1.9.x allows a remote malicious web server to overwrite certain files via a redirection URL containing a ".." that resolves to the IP address of the malicious server, which bypasses wget's filtering for ".." sequences...

E-Cart 1.1 - 'index.cgi' Remote Command Execution

!/usr/bin/perl Example added if code doesn't work for ya: http://SITE/DIRTOECART/index.cgi?action=viewart&cat=reproductoresdvd&art=reproductordvp-ns315.dat|uname%20-a| /str0ke info: [email protected] use IO::Socket; print "\n\n www.badroot.org \n\n"; print " E-Cart E-Commerce Software...

WU-FTPD wu_fnmatch() Function File Globbing Remote DoS

The version of WU-FTPD running on the remote host exhausts all available resources on the server when it repeatedly receives the following command : LIST .... This issue has been confirmed in WU-FTPD 2.6.2 and earlier. C Tenable Network Security, Inc. References:...

ZPanel <= 2.5 Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================== ZPanel = 2.5 Remote SQL Injection Exploit ========================================== Tested and working /str0ke It is possible to include arbitrary file: local - in version ZPanel = 2.5 beta 10,...

PHPOpenChat 2.3.4/3.0.1 - 'ENGLISH_poc.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/12817/info PHPOpenChat is prone to multiple remote file-include vulnerabilities. An attacker may leverage these issues to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate...

HolaCMS 1.2.x/1.4.x Voting Module - Directory Traversal Remote File Corruption

source: https://www.securityfocus.com/bid/12799/info HolaCMS is prone to a vulnerability that may allow remote users to corrupt files on the server. This issue is similar to the vulnerability described in BID 12789 HolaCMS Voting Module Remote File Corruption Vulnerability. It is reported that...

HolaCMS 1.2/1.4.x Voting Module - Remote File Corruption

source: https://www.securityfocus.com/bid/12789/info HolaCMS is prone to a vulnerability that may allow remote users to corrupt files on the server. This is due an input validation error that allows users to submit voting data to an attacker-specified file. It has been demonstrated that the issue...

Ethereal remote buffer overflow

LSS Security Advisory LSS-2005-03-04 http://security.lss.hr --- Title : Ethereal remote buffer overflow Advisory ID : LSS-2005-03-04 Date : 08.03.2005 Advisory URL: : http://security.lss.hr/en/index.php?page=exp Impact : Stack overflow and possible code execution Risk level : High Vulnerability...

CVE-2005-0694

Hosting Controller 6.1 Hotfix 1.7 and earlier stores log files under the web root, which allows remote attackers to obtain sensitive information via a direct request to HCDiskQuotaService.csv...

CVE-2005-0677

index.php for Zorum 3.5 allows remote attackers to perform certain actions as other users by modifying the id parameter...

CVE-2005-0701

Directory traversal vulnerability in Oracle Database Server 8i and 9i allows remote attackers to read or rename arbitrary files via "\.\.." modified dot dot backslash sequences to UTLFILE functions such as 1 UTLFILE.FOPEN or 2 UTLFILE.frename...

CVE-2005-0653

phpMyAdmin 2.6.1 does not properly grant permissions on tables with an underscore in the name, which grants remote authenticated users more privileges than intended...

AWStats 5.7 < 6.2 - Multiple Remote s

/ Awstats exploit "shell" code by omin0us omin0us208 at gmail dot com dtors security group .: http://dtors.ath.cx :. Vulnerability reported by iDEFENSE pluginmode bug has been found by GHC team. The awstats exploit that was discovered allows a user to execute arbitrary commands on the remote serv...

CVE-2004-0992

Format string vulnerability in the -a option daemon mode in Proxytunnel before 1.2.3 allows remote attackers to execute arbitrary code via format string specifiers in an invalid proxy answer...

PHPNews 1.2.3/1.2.4 - 'auth.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/12696/info It is reported that PHPNews is affected by a remote PHP file include vulnerability. This issue is due in part to the application failing to properly sanitize user-supplied input. This issue reportedly affects PHPNews version 1.2.4, previous...

CVE-2005-0588

Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags in XSLT stylesheets to the current domain, which allows remote attackers to determine the existence of files on the local system...

CVE-2005-0571

adminloader.php in PunBB 1.2.1 allows remote attackers to read arbitrary files via the plugin parameter...

CVE-2004-1703

Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is logged in, via a comment that contains an img bbcode tag that calls index.php with the signup action, which is executed when the administrator's browser loads the page with the img tag...