iFoto 1.0 - index.php Directory Traversal

iFoto 1.0 - index.php Directory Traversal source: https://www.securityfocus.com/bid/25065/info iFoto is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. A remote attacker can exploit this issue to view the directory structure of the affected...

iFoto 1.0 - 'index.php' Directory Traversal

source: https://www.securityfocus.com/bid/25065/info iFoto is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. A remote attacker can exploit this issue to view the directory structure of the affected computer within the context of the...

CVE-2007-3956

TeamSpeak WebServer 2.0 for Windows does not validate parameter value lengths and does not expire TCP sessions, which allows remote attackers to cause a denial of service CPU and memory consumption via long username and password parameters in a request to login.tscmd on TCP port 14534...

CVE-2007-3956

TeamSpeak WebServer 2.0 for Windows does not validate parameter value lengths and does not expire TCP sessions, which allows remote attackers to cause a denial of service CPU and memory consumption via long username and password parameters in a request to login.tscmd on TCP port 14534...

Cross site request forgery (csrf)

TeamSpeak WebServer 2.0 for Windows does not validate parameter value lengths and does not expire TCP sessions, which allows remote attackers to cause a denial of service CPU and memory consumption via long username and password parameters in a request to login.tscmd on TCP port 14534...

CVE-2007-3956

TeamSpeak WebServer 2.0 for Windows does not validate parameter value lengths and does not expire TCP sessions, which allows remote attackers to cause a denial of service CPU and memory consumption via long username and password parameters in a request to login.tscmd on TCP port 14534...

CVE-2007-3956

TeamSpeak WebServer 2.0 for Windows is affected by a denial-of-service vulnerability where input parameter length is not validated and TCP sessions are not expired. An attacker can trigger high CPU/memory usage by sending overly long username/password values to login.tscmd on TCP port 14534. The ...

CVE-2007-3956: Undefined Security Weakness

TeamSpeak WebServer 2.0 for Windows does not validate parameter value lengths and does not expire TCP sessions, which allows remote attackers to cause a denial of service CPU and memory consumption via long username and password parameters in a request to login.tscmd on TCP port 14534...

Alstrasoft Affiliate Network Pro 8.0 - pgmid SQL Injection

Alstrasoft Affiliate Network Pro 8.0 - pgmid SQL Injection source: https://www.securityfocus.com/bid/25026/info AlstraSoft Affiliate Network Pro is affected by multiple input-validation vulnerabilities. These issues include multiple cross-site scripting isues and SQL-injection issues. A successfu...

Dora Emlak 1.0 Script - Multiple Input Validation Vulnerabilities

Dora Emlak 1.0 Script - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/25004/info Dora Emlak Script is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize...

Alstrasoft Affiliate Network Pro 8.0 - index.php Cross-Site Scripting

Alstrasoft Affiliate Network Pro 8.0 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/25026/info AlstraSoft Affiliate Network Pro is affected by multiple input-validation vulnerabilities. These issues include multiple cross-site scripting isues and SQL-injection issues. ...

Alstrasoft Video Share Enterprise 4.x - Multiple Input Validation Vulnerabilities

Alstrasoft Video Share Enterprise 4.x - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/25019/info AlstraSoft Video Share Enterprise is affected by multiple input-validation vulnerabilities. These issues include multiple cross-site scripting vulnerabilities and...

Alstrasoft Affiliate Network Pro 8.0 - temp.php Cross-Site Scripting

Alstrasoft Affiliate Network Pro 8.0 - temp.php Cross-Site Scripting source: https://www.securityfocus.com/bid/25026/info AlstraSoft Affiliate Network Pro is affected by multiple input-validation vulnerabilities. These issues include multiple cross-site scripting isues and SQL-injection issues. A...

Alstrasoft Affiliate Network Pro 8.0 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25026/info AlstraSoft Affiliate Network Pro is affected by multiple input-validation vulnerabilities. These issues include multiple cross-site scripting isues and SQL-injection issues. A successful exploit could allow an attacker to compromise the...

Alstrasoft Video Share Enterprise 4.x - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/25019/info AlstraSoft Video Share Enterprise is affected by multiple input-validation vulnerabilities. These issues include multiple cross-site scripting vulnerabilities and multiple SQL-injection vulnerabilities. Exploiting these issues could allow an...

Dora Emlak 1.0 Script - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/25004/info Dora Emlak Script is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input. Exploiting these issues could allow an attacker ...

Alstrasoft Affiliate Network Pro 8.0 - 'pgmid' SQL Injection

source: https://www.securityfocus.com/bid/25026/info AlstraSoft Affiliate Network Pro is affected by multiple input-validation vulnerabilities. These issues include multiple cross-site scripting isues and SQL-injection issues. A successful exploit could allow an attacker to compromise the...

Alstrasoft Affiliate Network Pro 8.0 - 'temp.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25026/info AlstraSoft Affiliate Network Pro is affected by multiple input-validation vulnerabilities. These issues include multiple cross-site scripting isues and SQL-injection issues. A successful exploit could allow an attacker to compromise the...

TeamSpeak 2.0 (Windows Release) Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ================================================================ TeamSpeak 2.0 Windows Release Remote Denial of Service Exploit ================================================================ !/usr/bin/perl TeamSpeak 2.0 Windows Release Remote D...

TeamSpeak 2.0 (Windows Release) - Remote Denial of Service

!/usr/bin/perl TeamSpeak 2.0 Windows Release Remote D0S Exploit by Yag Kohha skyhole at gmail.com Vendor URL: http://www.goteamspeak.com/ TeamSpeak WebServer has no tcp session expire and no checks for incoming values length. TODO: Edit $target value Run script CPU 100%, Memory up for 1.2 Gb per...