E-Cart <= 1.1 (index.cgi) Remote Command Execution Exploit

Exploit for cgi platform in category web applications ========================================================== E-Cart ; print "port: default: 80\n"; chomp$port=; $port=80 if $port =/\D/ ; $port=80 if $port eq "" ; print "path: /cgi-bin/ecart/\n"; chomp$path=; print "your ip for reverse connect:...

miranda_popupplus_overflow.txt

Title: PopUp Plus plugin for Miranda Instant Messenger Buffer Overflow Risk: High Date: 06-04-2005 Publisher: m0fo editor at sec.org.il Vendor: zazoo zazoo at ua.fm URL: http://miranda-im.org/download/details.php?action=viewfile&id=1170. Miranda Instant Messenger is application that provides...

Zoom Media Gallery 2.1.2 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/13094/info zOOm Media Gallery is reportedly affected by a remote SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result ...

[Full-disclosure] PopUp Plus plugin for Miranda Instant Messenger Buffer Overflow

Title: PopUp Plus plugin for Miranda Instant Messenger Buffer Overflow Risk: High Date: 06-04-2005 Publisher: m0fo editor at sec.org.il Vendor: zazoo zazoo at ua.fm URL: http://miranda-im.org/download/details.php?action=viewfile&id=1170. Miranda Instant Messenger is application that provides...

CA License Server (GETCONFIG) Remote Buffer Overflow Exploit (c)

No description provided by source. / Computer-Associates, License Service Stack Overflow Homepage: ca.com Affected version: v1.61 and below in eTrust, Unicenter, BrightStor, etc.. Patched version: hotfix Link: ca.com Date: 04 March 2005 Application Risk: Tsunami Internet Risk: High Dicovery...

CA License Server - 'GETCONFIG' Remote Buffer Overflow

/ Computer-Associates, License Service Stack Overflow Homepage: ca.com Affected version: v1.61 and below in eTrust, Unicenter, BrightStor, etc.. Patched version: hotfix Link: ca.com Date: 04 March 2005 Application Risk: Tsunami Internet Risk: High Dicovery Credits: Barnaby Jack eeye.com Exploit...

PHPNews 1.2.31.2.4 - auth.php Remote File Inclusion

PHPNews 1.2.31.2.4 - auth.php Remote File Inclusion source: https://www.securityfocus.com/bid/12696/info It is reported that PHPNews is affected by a remote PHP file include vulnerability. This issue is due in part to the application failing to properly sanitize user-supplied input. This issue...

Gaim 1.1.3 - File Download Denial of Service

Gaim 1.1.3 - File Download Denial of Service source: https://www.securityfocus.com/bid/12667/info Gaim is affected by a denial of service vulnerability during the download of a file. This issue can allow remote attackers to cause an affected client to fail. A vulnerablity in the client arises whe...

BibORB.txt

= Advisory: Multiple Vulnerabilities in BibORB = ================================================ Multiple vulnerabilities were found in BibORB which result in SQL injection, XSS, directory traversal and arbitrary file upload. == Details == ============= Product: BibORB Affected Version: 1.3.2,...

[ SCL-2005.001 ] - WebCalendar: SQL Injection from encoded cookie

=====BEGIN-SCL-REPORT===== Scovetta Labs Security Advisory Title: WebCalendar: SQL Injection from encoded cookie Status: Public Release Date: 2005-02-16 Package: WebCalendar Vendor: k5n.us - http://www.k5n.us/webcalendar.php Priority: High Vulnerability: SQL Injection Affected Versions:...

[Full-Disclosure] Advisory: Upload Authorization bypass in CitrusDB

Advisory: Upload Authorization bypass in CitrusDB A group of students at our lab called RedTeam found an authorization bypass vulnerability in CitrusDB which results in upload of fake credit card data, SQL-Injection and disclosure of credit card data. Details ======= Product: CitrusDB Affected...

[Full-Disclosure] Credit Card data disclosure in CitrusDB

Credit Card data disclosure in CitrusDB A group of students at our lab called RedTeam found an information disclosure vulnerability in CitrusDB which can result in disclosure of credit card information. Details ======= Product: CitrusDB Affected Version: = 0.3.5 Immune Version: =0.3.6 OS affected...

KorWeblog.txt

KorWeblog php injection Vulnerability Release Date : 2004/12/31 KST Author : Mins mins at fsu.or.kr Product : KorWeblog http://weblog.kldp.org Vendor-Status: Vendor was contacted but I could not receive reply message. Vendor-Patches: None Impact: Attacker can execute arbitrary php code. Summary...

Netcat 1.1 - -e Switch Remote Buffer Overflow

Netcat 1.1 - -e Switch Remote Buffer Overflow / Netcat v1.1, "-e" Switch, Remote Buffer Overflow Exploit v0.1 Homepage..........: http://www.securityfocus.com/tools/139/scoreit Affected versions.: v1.1 Fix...............: Actually none, Hobbit is warned 1 month+ ago, and looks like to not act, we...

[Full-Disclosure] sacred &#40;pcgame&#41; server flaw

Program: Sacred pc game http://sacred-game.com type: simple DoS, no client-auth affected version: 1.0.6.2 note: -fixed in later versions 1.0.7.0 dated:31.08.2004 -this security-lag exits for nearly half a year. although ascaron was informed at the date of release 02.03.2004, nothing happens long...

SudoEdit 1.6.8 - Local Change Permission

SudoEdit 1.6.8 - Local Change Permission / Copyright © Rosiello Security 2004 http://www.rosiello.org sudoedit Exploit SOFTWARE : sudoedit REFERENCE: http://www.sudo.ws/sudo/alerts/sudoedit.html DATE: 18/09/2004 Summary: A flaw in exists in sudo's -u option aka sudoedit in sudo version 1.6.8 that...

[vulnwatch] Titan FTP Server Long Command Heap Overflow Vulnerability

vulnwatch Titan FTP Server Long Command Heap Overflow Vulnerability www.cnhonker.com Security Advisory Advisory Name: Titan FTP Server Long Command Heap Overflow Vulnerability Release Date: 08/30/2004 Affected version: Titan FTP Server = 3.21 Author: lion [email protected] Overview: A vulnerabili...

Fusionphp Fusion News 3.33.6 - Administrator Command Execution

Fusionphp Fusion News 3.33.6 - Administrator Command Execution source: https://www.securityfocus.com/bid/10836/info It is reported that Fusion News is affected by an administrator command execution vulnerability. This issue is due to a failure of the application to properly validate access to...

MyServer 0.6.2 - math_sum.mscgi Multiple Cross-Site Scripting Vulnerabilities

MyServer 0.6.2 - mathsum.mscgi Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/10831/info Reportedly MyServer is affected by multiple remote vulnerabilities in the 'mathsum.mscgi' example script. These issues are due to a boundary condition error and a...

EasyWeb FileManager Directory Traversal

Product: EasyWeb FileManager Module - http://home.postnuke.ru/index.php Description: EasyWeb FileManager Module for PostNuke is vulnerable to a directory traversal problem which allows retrieval of arbitrary files from the remote system. Systems Affected: EasyWeb FileManager 1.0 RC-1 Technical...