103 matches found
WordPress Plugin timthumb.php Shell Upload
Exploit Title: Multiple Wordpress timthumb.php reuse vulnerabilities Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing --- Description --- The following Wordpress plugins reuse a vulnerable version of the timthumb.php library. By hosting a malicious GIF file...
Opera < 10.62 Path Subversion Arbitrary DLL Injection Code Execution
Binary data 800864.prm...
EFS Easy Chat server Universal BOF-SEH (Meta)
Exploit for unknown platform in category remote exploits ============================================= EFS Easy Chat server Universal BOF-SEH Meta ============================================= $Id: caigatewaydebug.rb 6568 2009-05-19 13:20:32Z hdm $ This file is part of the Metasploit Framework an...
CVE-2009-2037
Multiple directory traversal vulnerabilities in Online Grades & Attendance 3.2.5 and earlier, and possibly 3.2.6, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 GLOBALSSKIN parameter to index.php and the 2 skin...
Gentoo Security Advisory GLSA 200706-08 (emul-linux-x86-java)
The remote host is missing updates announced in advisory GLSA 200706-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2008-3354
Multiple PHP remote file inclusion vulnerabilities in the Newbb Plus newbbplus module 0.93 in RunCMS 1.6.1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 bbPathpath parameter to votepolls.php and the 2 bbPathroottheme parameter to config.php, different vectors than...
CVE-2008-3354
CVE-2008-3354 concerns RunCMS 1.6.1 with the Newbb Plus 0.93 module, where multiple PHP remote file inclusion vulnerabilities allow an attacker to execute arbitrary PHP code. Specifically, the flaw is triggered by supplying a URL in the bbPath[path] parameter to votepolls.php and in the bbPath[ro...
CVE-2008-2964
SQL injection vulnerability in guide.php in ResearchGuide 0.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-2389
opensuse-updater in openSUSE 10.2 allows local users to access arbitrary files via a symlink attack...
[SECURITY] [DSA 1309-1] New libexif packages fix integer overflow
------------------------------------------------------------------------ Debian Security Advisory DSA-1309-1 [email protected] http://www.debian.org/security/ Steve Kemp June 16, 2007 - ------------------------------------------------------------------------ Package : libexif 0.6.9-6sarge1...
CVE-2007-2641
SQL injection vulnerability in W1L3D4bolum.asp in W1L3D4 Philboard 0.2 allows remote attackers to execute arbitrary SQL commands via the forumid parameter, a different vector than CVE-2007-0920...
CVE-2007-2538
SQL injection vulnerability in class/debug/debugshow.php in RunCms 1.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the executedqueries array parameter...
SiteSchool2.4.02.txt
Title: Site@School 2.4.02 and below Multiple remote Command Execution Vulnerabilities Vendor: Site@School webiste : http://siteatschool.sourceforge.net/ Version : Exploit writting by: Simo Ben youssef Discovered: 05 Aout 2006 Published : 15 September 2006 MorX Security Research Team...
Site@School 2.4.02 and below Multiple remote Command Execution Vulnerabilities
Title: Site@School 2.4.02 and below Multiple remote Command Execution Vulnerabilities Vendor: Site@School webiste : http://siteatschool.sourceforge.net/ Version : = 2.4.02 Severity: Critical Discovered by: Simo64 simo64atmorxorg Exploit writting by: Simo Ben youssef simoatmorxorg Discovered: 05...
[SECURITY] [DSA 1166-1] New cheesetraceker packages fix buffer overflow
-------------------------------------------------------------------------- Debian Security Advisory DSA 1166-1 [email protected] http://www.debian.org/security/ Steve Kemp September 3rd, 2006 http://www.debian.org/security/faq -...
FreeBSD : horde -- Phishing and XSS Vulnerabilities (e2e8d374-2e40-11db-b683-0008743bf21a)
Secunia reports : Some vulnerabilities have been reported in Horde, which can be exploited by malicious people to conduct phishing and cross-site scripting attacks. - Input passed to the 'url' parameter in index.php isn't properly verified before it is being used to include an arbitrary website i...
CVE-2005-4190
Multiple cross-site scripting XSS vulnerabilities in Horde Application Framework before 3.0.8 allow remote authenticated users to inject arbitrary web script or HTML via multiple vectors, as demonstrated by 1 the identity field, 2 Category and 3 Label search fields, 4 the Mobile Phone field, and ...
osCommerce update.php readme_file Parameter Arbitrary File Disclosure
The osCommerce installation on the remote host has a supplementary script, 'extras/update.php', that fails to validate user-supplied input to the 'readmefile' parameter before using that to display a file. An attacker can exploit this flaw to read arbitrary files on the remote host, such as the...