Dokeos Multiple Remote Input Validation Vulnerabilities

Dokeos is prone to multiple input-validation vulnerabilities, including SQL-injection, HTML-injection, cross-site scripting, and cross-site request-forgery issues. Attackers can exploit these issues to execute arbitrary script code in the context of the webserver, compromise the application, obta...

Dokeos <= 1.8.5 Multiple Remote Input Validation Vulnerabilities

Dokeos is prone to multiple input-validation vulnerabilities, including SQL-injection, HTML-injection, cross-site scripting, and cross-site request-forgery issues. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Zervit 0.4 Traversal / Memory Corruption

Zervit webserver 0.4 Directory Traversal & Memory Corruption By: e.wiZz! & shinnai Site: shinnai.net & balcansecurity.com Memory Corruption import socket host = "127.0.0.1" port = 8080 try: for i in range1,10: buff = "a" 3330 request = "POST " + buff + " HTTP/1.0" connection =...

Zervit Webserver 0.4 Directory Traversal / Memory Corruption PoC

Exploit for windows platform in category remote exploits ================================================================ Zervit Webserver 0.4 Directory Traversal / Memory Corruption PoC ================================================================ Zervit webserver 0.4 Directory Traversal &...

Dacios Image Gallery 1.6 - Multiple Remote Vulnerabilities

Dacios Image Gallery 1.6 - Multiple Remote Vulnerabilities source: https://www.securityfocus.com/bid/34906/info Dacio's Image Gallery is prone to multiple remote vulnerabilities: - An arbitrary-file-upload vulnerability - An authentication-bypass vulnerability - A directory-traversal vulnerabilit...

Dacio's Image Gallery 1.6 - Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/34906/info Dacio's Image Gallery is prone to multiple remote vulnerabilities: - An arbitrary-file-upload vulnerability - An authentication-bypass vulnerability - A directory-traversal vulnerability An attacker can exploit these issues to upload and execut...

TinyWebGallery/QuiXplorer Local File Include Vulnerability

TinyWebGallery and QuiXplorer are prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts in the context of the webserver process. This may aid in further attacks...

OpenCart 'index.php' Local File Include Vulnerability

OpenCart is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts in the context of the webserver process. This may aid in further attacks. OpenCart 1.1.8 is...

Mod_Perl Path_Info Remote Denial Of Service Vulnerability

According to its version number, the remote version of the Apache modperl module is prone to a remote denial-of-service vulnerability. Successful exploits may allow remote attackers to cause denial-of-service conditions on the webserver running the modperl module. OpenVAS Vulnerability Test $Id:...

NotFTP 'config.php' Local File Include Vulnerability

NotFTP is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view and execute arbitrary local files in the context of the webserver process. This may aid in further attacks. NotFTP 1.3.1 is vulnerabl...

Mandriva Linux Security Advisory : ruby (MDVSA-2008:141)

Multiple vulnerabilities have been found in the Ruby interpreter and in Webrick, the webserver bundled with Ruby. Directory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1.9 through 1.9.0-1, when running on systems that support backslash path separators or...

Mandriva Linux Security Advisory : ruby (MDVSA-2008:140)

Multiple vulnerabilities have been found in the Ruby interpreter and in Webrick, the webserver bundled with Ruby. Directory traversal vulnerability in WEBrick in Ruby 1.9.0 and earlier, when using NTFS or FAT filesystems, allows remote attackers to read arbitrary CGI files via a trailing 1 + plus...

CVE-2009-1353

Buffer overflow in the httpparsehex function in libz/misc.c in Zervit Webserver 0.02 allows remote attackers to cause a denial of service daemon crash via a long URI, related to http.c...

Buffer overflow

Buffer overflow in the httpparsehex function in libz/misc.c in Zervit Webserver 0.02 allows remote attackers to cause a denial of service daemon crash via a long URI, related to http.c...

CVE-2009-1353

Buffer overflow in the httpparsehex function in libz/misc.c in Zervit Webserver 0.02 allows remote attackers to cause a denial of service daemon crash via a long URI, related to http.c...

CVE-2009-1353

Affected software: Zervit Webserver (0.2–0.4 per OpenVAS entries; CVE-2009-1353). Vulnerability: remote buffer overflow in the function http_parse_hex (libz/misc.c) when processing long URIs. Impact: denial of service via daemon crash; remote attacker could exploit it. Notes from sources: OpenVAS...

Zervit Webserver 0.3 Remote Denial Of Service Exploit

Exploit for unknown platform in category dos / poc ===================================================== Zervit Webserver 0.3 Remote Denial Of Service Exploit ===================================================== import socket import sys print...

Zervit Webserver 0.3 Remote Denial Of Service Exploit

No description provided by source. import socket import sys print "------------------------------------------------------" print " Zervit Webserver 0.3 Remote Denial Of Service " print " url: http://zervit.sourceforge.net " print " " print " author: shinnai " print " mail: shinnaiatautisticidotor...

CVE-2009-1353: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the httpparsehex function in libz/misc.c in Zervit Webserver 0.02 allows remote attackers to cause a denial of service daemon crash via a long URI, related to http.c...

Zervit 0.3 Denial Of Service

import socket import sys print "------------------------------------------------------" print " Zervit Webserver 0.3 Remote Denial Of Service " print " url: http://zervit.sourceforge.net " print " " print " author: shinnai " print " mail: shinnaiatautisticidotorg " print " site:...