NetClassifieds [multiple vulnerabilities]

Application: NetClassifieds version: -Free Edition -Standard Edition -Professional Edition -Premium Edition Web Site: http://www.scriptdevelopers.net/ Versions: all Platform: linux, windows Bug: multiple injection sql , xss , full path Fix Available: Yes...

CVE-2007-3120

Cross-site scripting XSS vulnerability in public/code/cpdpage.php in All In One Control Panel AIOCP before 1.3.017 allows remote attackers to inject arbitrary web script or HTML via the aiocpdp parameter. NOTE: some of these details are obtained from third party information...

CVE-2007-3120: Undefined Security Weakness

Cross-site scripting XSS vulnerability in public/code/cpdpage.php in All In One Control Panel AIOCP before 1.3.017 allows remote attackers to inject arbitrary web script or HTML via the aiocpdp parameter. NOTE: some of these details are obtained from third party information...

Linker index.php - Cross-Site Scripting Vulnerability

Linker index.php - Cross-Site Scripting Vulnerability Vulnerability: http://www.target.com/index.php?cat=3E223E3CScRiPt200a0d3Ealertdocument.cookie3B3C/script3E Vulnerable: All Versions Script : http://enproject.codelib.co.kr ----------------------------------------------- Credits : Vagrant Conta...

vBulletin vBGSiteMap 2.41 - 'root' Remote File Inclusion

============================================= vBulletin Google Site Map Creator base Remote File Include Vulnerability ============================================= Found by : Host4vb.com & Cold z3ro Contact : [email protected] , [email protected] Homepage : Host4vb.com , Hack-Teach.Org...

vBulletin vBGSiteMap 2.41 - root Remote File Inclusion

vBulletin vBGSiteMap 2.41 - root Remote File Inclusion ============================================= vBulletin Google Site Map Creator base Remote File Include Vulnerability ============================================= Found by : Host4vb.com & Cold z3ro Contact : [email protected] ,...

CVE-2007-2630

Removed by vendor...

CVE-2007-2630: Undefined Security Weakness

Incomplete blacklist vulnerability in filemanager/browser/default/connectors/php/config.php in the FCKeditor module, as used in ActiveCampaign 1-2-All aka 12All 4.50 through 4.53.13, and possibly other products, allows remote authenticated administrators to upload and possibly execute .php4 and...

CVE-2007-2625: Undefined Security Weakness

Cross-site scripting XSS vulnerability in shared/code/cpauthorization.php in All In One Control Panel AIOCP before 1.3.016 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. NOTE: some of these details are obtained from third party information...

CVE-2007-2624: Undefined Security Weakness

Dynamic variable evaluation vulnerability in shared/config/cpconfig.php in All In One Control Panel AIOCP before 1.3.016 allows remote attackers to conduct cross-site scripting XSS and possibly other attacks via the SERVER superglobal array. NOTE: some of these details are obtained from third par...

podium-cookie.txt

Podium CMS - Cookie Manipulation Exploit Podium CMS - Cookie Manipulation Exploitdiscovered by John MartinelliGoogle d0rk: inurl:"podium/Default.aspx" "...

Xoops All Version -Articles- Print.PHP (ID) Blind SQL Injection Exploit And PoC

Xoops All Version -Articles- Print.PHP ID Blind SQL Injection Exploit And PoC Type : SQL Injection Release Date : 2007-03-26 Product / Vendor : Xoops Portal http://www.Xoops.Org Bug : http://localhost/script/modules/articles/print.php?id=x AND 1=1 or 1=0 PoC :...

Buffer overflow

Buffer underflow in the header function in PHP 5.2.0 allows context-dependent attackers to execute arbitrary code by passing an all-whitespace string to this function, which causes it to write '\0' characters in whitespace that precedes the string...

security flaw

Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to 1 all of the print functions on 64-bit systems, and 2 the odbcresultall function...

Oracle 9i/10g DBMS_METADATA.GET_DDL SQL Injection Exploit

No description provided by source. !/usr/bin/perl Remote Oracle DBMSMETADAT.GETDDL exploit 9i/10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: http://www.securityfocus.com/bid/16287 AUTHOR: Andrea "bunker"...

security flaw

Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to 1 all of the print functions on 64-bit systems, and 2 the odbcresultall function...

security flaw

Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to 1 all of the print functions on 64-bit systems, and 2 the odbcresultall function...

security flaw

Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to 1 all of the print functions on 64-bit systems, and 2 the odbcresultall function...

security flaw

Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to 1 all of the print functions on 64-bit systems, and 2 the odbcresultall function...

rapidkill.txt

Application : RapidKill Vulnerability Kind : Remote command execute Product Link : http://www.rapidkill.net version : All Versions Affected mail: [email protected] Author : Black-0ut exploit : /usr/bin/perl use URI::Escape; use IO::Socket; $ha=$ARGV0; $pa=$ARGV1; $file="kills.php4"; if !$ARGV1...