CVE-2010-5260

CVE-2010-5260 describes an untrusted search path (DLL hijacking) vulnerability in Agrin All DVD Ripper 4.0. A local attacker can gain privileges by placing a malicious wnaspi32.dll in the current working directory, demonstrated using a directory containing an .ifo file. Affected component/file: w...

CVE-2010-5260

Untrusted search path vulnerability in Agrin All DVD Ripper 4.0 allows local users to gain privileges via a Trojan horse wnaspi32.dll file in the current working directory, as demonstrated by a directory that contains a .ifo file. NOTE: some of these details are obtained from third party...

web@all - Local File Inclusion Multiple Arbitrary File Upload Vulnerabilities

web@all - Local File Inclusion Multiple Arbitrary File Upload Vulnerabilities source: https://www.securityfocus.com/bid/55426/info web@all is prone to a local file-include vulnerability and multiple arbitrary file-upload vulnerabilities. An attacker can exploit these issues to upload arbitrary...

Fire Belly Design CMS SQL Injection

Exploit Title : firebellydesign Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://firebellydesign.com Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : intext:"Design &...

Web@All CMS 2.0 Shell Upload / Local File Inclusion

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

web@all - Local File Inclusion / Multiple Arbitrary File Upload Vulnerabilities

source: https://www.securityfocus.com/bid/55426/info web@all is prone to a local file-include vulnerability and multiple arbitrary file-upload vulnerabilities. An attacker can exploit these issues to upload arbitrary files onto the web server, execute arbitrary local files within the context of t...

Thoughtmedia CMS SQL Injection

Exploit Title : thoughtmedia Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.thoughtmedia.us/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : intext:"Developed by...

WEBSKINZ CMS SQL Injection

Exploit Title : WEBSKINZ Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.www.webskinz.com Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : intext:"DESIGNED &...

Drop CMS SQL Injection

Exploit Title : drop Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.drop.it/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : intext:"Webdev: www.drop.it" Expl0iTs...

Symbion Productions CMS SQL Injection

Exploit Title : Symbion Productions Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.symbionproductions.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork :...

FreeBSD : moinmoin -- wrong processing of group membership (4f99e2ef-f725-11e1-8bd8-0022156e8794)

MoinMoin developers report : If you have group NAMES containing 'All' or 'Known' or 'Trusted', they behaved wrong until now they erroneously included All/Known/Trusted users even if you did not list them as members, but will start working correctly with this changeset. E.g. AllFriendsGroup : -...

Wordpress (chenpress Plugin) Arbitrary File Upload Vulnerability

a bug in Wordpress chenpress Plugin that allows to us to occur a File Upload on a Remote machin. Exploit Title : Wordpress chenpress Plugin Arbitrary File Upload Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://wordpress.org Security Risk :...

EasyWeb SQL Injection

Exploit Title: easyweb SQLi Vulnerability Date: 09/03/2012 Author: Persia Security Group - Prince & mafia1990 Vendor Homepage: http://www.easy-web.it/ Version: All Version Google Dork: intext:"powered by easyweb" site:it Tested on: win 2003 & 2008 server , Vista , 7 & IIS 6.0, 7.0, 7.5...

moinmoin -- wrong processing of group membership

MoinMoin developers report: If you have group NAMES containing "All" or "Known" or "Trusted", they behaved wrong until now they erroneously included All/Known/Trusted users even if you did not list them as members, but will start working correctly with this changeset. E.g. AllFriendsGroup: JoeDoe...

Mu Perspectives CMS Cross Site Scripting

?? Exploit Title : Mu Perspectives Cms Cross-Site Scripting Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.muperspectives.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork :...

web@all CMS 2.0 - Multiple Vulnerabilities

web@all CMS 2.0 - Multiple Vulnerabilities web@all CMS 2.0 order SQL Injection Vulnerability Vendor: web@all Product web page: http://www.webatall.org Affected version: 2.0 Summary: web@all is a PHP content management system CMS. If you know about it,you nearly can use it to do anything. Desc: Th...

Paliz CMS Path Disclosure

Title: Paliz CMS Full Path Disclosure Vulnerability Vulnerable Version: all versions Vendor URL: http://palizct.com Impact: Low =========================== Vulnerability Description: =========================== Full Path Disclosure Vulnerability, enable the attacker to see the root path...

web@all CMS 2.0 - Multiple Vulnerabilities

web@all CMS 2.0 order SQL Injection Vulnerability Vendor: web@all Product web page: http://www.webatall.org Affected version: 2.0 Summary: web@all is a PHP content management system CMS. If you know about it,you nearly can use it to do anything. Desc: The application suffers from an SQL Injection...

web@all CMS 2.0 SQL Injection

web@all CMS 2.0 order SQL Injection Vulnerability Vendor: web@all Product web page: http://www.webatall.org Affected version: 2.0 Summary: web@all is a PHP content management system CMS. If you know about it,you nearly can use it to do anything. Desc: The application suffers from an SQL Injection...

web@all CMS 2.0 Cross Site Scripting

web@all CMS 2.0 Multiple Remote XSS Vulnerabilities Vendor: web@all Product web page: http://www.webatall.org Affected version: 2.0 Summary: web@all is a PHP content management system CMS. If you know about it,you nearly can use it to do anything. Desc: web@all CMS suffers from multiple stored an...