securedownload-xsscm.txt

--------------------------------------------------------- Portal Name: Secure Download Version : Alpha 0.2.1 Vendor : http://relative.nl/projects.php?subMnuItem=2 Author : PouyaServer , [email protected] Vulnerability : XSS,CM --------------------------------------------------------- XSS:...

lcxbbportal 0.1 alpha 2 - Remote File Inclusion

============================================================================================================= o lcxBBportal 0.1 Alpha 2 Remote File Inclusion Vulnerability Software : lcxBBportal version 0.1 Alpha 2 Vendor : http://code.google.com/p/lcxbbportal/ Download :...

lcxbbportal 0.1 alpha 2 - Remote File Inclusion

lcxbbportal 0.1 alpha 2 - Remote File Inclusion ============================================================================================================= o lcxBBportal 0.1 Alpha 2 Remote File Inclusion Vulnerability Software : lcxBBportal version 0.1 Alpha 2 Vendor :...

txtblog-lfi.txt

============================================================ TxtBlog index.php m Local File Inclusion Vulnerability ============================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

CVE-2008-5269

SQL injection vulnerability in index.php in pSys 0.7.0 alpha allows remote attackers to execute arbitrary SQL commands via the shownews parameter...

CVE-2008-5269

The connected records confirm a concrete vulnerability: in pSys 0.7.0 alpha, SQL injection permits remote attackers to execute arbitrary SQL via the shownews parameter in index.php. The root cause is unsanitized input leading to database command execution. Impact is partial confidentiality/integr...

TxtBlog (index.php m) Local File Inclusion Vulnerability

No description provided by source. ============================================================ TxtBlog index.php m Local File Inclusion Vulnerability ============================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Undergroun...

TxtBlog (index.php m) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================== TxtBlog index.php m Local File Inclusion Vulnerability ======================================================== ============================================================ TxtBlog...

Remote file inclusion

PHP remote file inclusion vulnerability in modules/modmainmenu.php in MosXML 1 Alpha allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-5206

PHP remote file inclusion vulnerability in modules/modmainmenu.php in MosXML 1 Alpha allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-5206

CVE-2008-5206 affects MosXML 1 Alpha, specifically the modules/mod_mainmenu.php component. The vulnerability is a PHP remote file inclusion that allows an attacker to supply a URL via the mosConfig_absolute_path parameter and execute arbitrary PHP code on the server. This is a network-exposed fla...

CVE-2008-5206

PHP remote file inclusion vulnerability in modules/modmainmenu.php in MosXML 1 Alpha allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-5206: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in modules/modmainmenu.php in MosXML 1 Alpha allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Sql injection

Multiple SQL injection vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 viewarticle.php and 2 viewarticle2.php...

CVE-2008-5163

The Rat CMS Pre-Alpha 2 contains SQL injection vulnerabilities in the viewarticle.php and viewarticle2.php scripts. The root cause is unsafe handling of the id parameter, enabling remote attackers to execute arbitrary SQL commands. Affected component: The Rat CMS Pre-Alpha 2 (web application). Im...

CVE-2008-5164

The CVE-2008-5164 entry describes multiple cross-site scripting (XSS) vulnerabilities in The Rat CMS Pre-Alpha 2. The issues allow remote attackers to inject arbitrary web scripts or HTML via the (1) id parameter to viewarticle.php and viewarticle2.php and the (2) PATH_INFO to viewarticle.php. Th...

CVE-2008-5164: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to a viewarticle.php and b viewarticle2.php and the 2 PATHINFO to viewarticle.php...

Linux Kernel i915驱动drivers/char/drm/i915_dma.c内存破坏漏洞

BUGTRAQ ID: 31792 CVECAN ID: CVE-2008-3831 Linux Kernel是开放源码操作系统Linux所使用的内核。 在使用Intel G33系列芯片组的机器上，非root用户可以通过ioctl调用只有root用户才可以使用的i915内核驱动的i915setstatuspage函数。本地攻击者可以通过向驱动发送特制的IOCTL清零并重新映射内存位置。 Linux kernel 2.6.x Debian ------ Debian已经为此发布了一个安全公告（DSA-1655-1）以及相应补丁: DSA-1655-1：New Linux 2.6.24...

Sql injection

SQL injection vulnerability in search.php in iGaming CMS 2.0 Alpha 1 allows remote attackers to execute arbitrary SQL commands via the keywords parameter in a searchgames action...

iGaming CMS 2.0 Alpha 1 - 'search.php' SQL Injection

!/usr/bin/perl ----------------------------------------------------- iGaming CMS 2.0 Alpha 1 Remote SQL Injection Exploit By StAkeR aka athos - StAkeRathotmaildotit On 16/10/2008 http://www.igamingcms.com/iGaming2Alpha.zip ----------------------------------------------------- use strict; use...