9328 matches found
Horde <= 3.3.5 Administration Interface admin/phpshell.php PATH_INFO Parameter XSS
No description provided by source...
Windows NTLM Weak Nonce Vulnerability
No description provided by source. Windows SMB NTLM Authentication Weak Nonce Vulnerability Security Advisory Hernan Ochoa [email protected] - Agustin Azubel [email protected] Title: Windows SMB NTLM Authentication Weak Nonce Vulnerability Advisory ID: OCHOA-2010-0209 Advisory UR...
Alt-N MDaemon 2.8.5 0 WebConfig Overflow DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/820/info The Mdaemon mail server for Windows includes a small web server for web-based remote administration. This webserver is vulnerable due to an unchecked buffer that handles incoming GET requests. An abnormally large...
Kerio Firewall 2.1.4 Authentication Packet Overflow
No description provided by source. $Id: kerioauth.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
PowerScripts PlusMail WebConsole 1.0 Poor Authentication Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/2653/info PowerScripts PlusMail Web Control Panel is a web-based administration suite for maintaining mailing lists, mail aliases, and web sites. It is reportedly possible to change the administrative username and passwor...
ReloadCMS <= 1.2.5 Cross Site Scripting / Remote Code Execution Exploit
No description provided by source. ?php / ReloadCMS = 1.2.5stable Cross site scripting / remote command execution software site: http://reloadcms.com/ description: ReloadCMS is a free CMS written on PHP and based on flat files. vulnerability: ReloadCMS do not properly sanitize User-Agent request...
AShop Deluxe 4.5 ashop/search.php searchstring Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21845/info AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data. An attacker may leverage these issues ...
G.CMS Generator SQL Injection Vulnerability
No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Gcms generator SQLi Vulnerability Date : june, 21 2010 Critical Level : HIGH Vendor Url : http://www.laubrotel.com/gcms/demo/...
Commentics 2.0 - Multiple Vulnerabilities
No description provided by source. Commentics 2.0 = Multiple Vulnerabilities Discovered by: Jean Pascal Pereira [email protected] Vendor information: Commentics is a free, advanced PHP comment script with many features. Professionally written and with open source code, its main aims are to be...
WingFTP Server 3.2.4 - CSRF Vulnerability
No description provided by source. Application: WingFTP Server 3.2.4 maybe earlier versions too Link: http://www.wftpserver.com/ Vulnerability: CSRF Author: Ams Contact: mail: ax330d at gmail dot com site: http://www.0x416d73.name/ 1. About software Wing FTP server is not only a FTP server. It's ...
Integard Pro 2.2.0.9026 - (Win7 ROP-Code Metasploit Module)
No description provided by source. Exploit Title: Integard Pro 2.2.0.9026 Win7 ROP-Code Metasploit Module Date: 2010-09-15 Author: Node Software Link: http://www.exploit-db.com/application/14941 Version: Race River Integard Pro 2.2.0.9026, integard32.dllv.2.0.0.306 Tested on: Windows 7 x64 Eng CV...
Electronic Arts Battlefield 1942 1.2/1.3 - Remote Administration Authentication Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/6967/info It has been reported that Battlefield 1942 does not properly check input sent to the administration port of a game server. By sending a string of excessive length, a remote attacker could crash the server,...
ProductCart 1.5/1.6/2.0 Login.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8105/info ProductCart has been reported prone to an SQL injection vulnerability that may be exploited to bypass the ProductCart authentication system and access the ProductCart administration panel; other attacks may also...
Microsoft Zero Administration Kit (ZAK) 1.0 and Office97 Backdoor Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/181/info Zero Administration Kit ZAK was designed to allow administrators to among other things lock down the NT environment and restrict the user's access to certain applications and system functions. In an instance wher...
Sun AnswerBook2 1.4.2/1.4.3/1.4.4 Administration Interface Access
No description provided by source. source: http://www.securityfocus.com/bid/1554/info A lack of authentication checks for certain scripts within the administration interface of AnswerBook2 versions 1.4.2 and prior, for Solaris, allows remote users to create administration accounts. By directly...
IDEAL Administration 2010 10.2 - Local Buffer Overflow Exploit
No description provided by source. !/usr/bin/env python IDEAL Administration 2010 v10.2 Local Buffer Overflow Exploit Found By: DrIDE Usage: Migrate - Open Migration Project - Bind Shell Download: www.pointdev.com Tested On: Windows XPSP3 windows/shellbindtcp - 696 bytes Encoder: x86/alphamixed...
PointDev IDEAL Migration Buffer Overflow
No description provided by source. $Id: idealmigrationipj.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Multiple Linksys Router CSRF Vulnerabilities
No description provided by source. It seems to be fairly well known that there are multiple unpatched CSRF vulnerabilities in the administration interfaces for various Linksys routers. Since the initial reports of these are from a few years ago, and since some exploits are available, I have writt...
Sambar 5.x Open Proxy and Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10256/info Sambar improperly validates the IP address of an originating connection and can be used to gain access the administration interface without authorization. Once the remote attacker has gained access to the...
Solaris 2.5/2.5.1/2.6/7.0 sadmind Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/866/info Certain versions of Solaris ship with a version of sadmind which is vulnerable to a remotely exploitable buffer overflow attack. sadmind is the daemon used by Solstice AdminSuite applications to perform distribut...