geeklog xss vulnerability

Geeklog reports: MustLive pointed out a possible XSS in the form to email an article to a friend that we're fixing with this release. Please note that this problem only exists in Geeklog 1.4.0 - neither Geeklog 1.4.1 nor any older versions 1.3.x series have that problem...

Sql injection

Multiple SQL injection vulnerabilities in index.php in zBlog 1.2 allow remote attackers to execute arbitrary SQL commands via 1 the categ parameter in a categ action or 2 the article parameter in an articles action...

applesmb-overflow.txt

/ Copyright C 2007-2008 Subreption LLC. All rights reserved. Visit http://blog.subreption.com for exploit development notes. References: CVE-2007-3876 http://docs.info.apple.com/article.html?artnum=307179 http://seclists.org/fulldisclosure/2007/Dec/0445.html...

Apple Mac OS X mount_smbfs Stack Based Buffer Overflow Exploit

No description provided by source. / Copyright C 2007-2008 Subreption LLC. All rights reserved. Visit http://blog.subreption.com for exploit development notes. References: CVE-2007-3876 http://docs.info.apple.com/article.html?artnum=307179...

Apple Mac OSX - mount_smbfs Local Stack Buffer Overflow

Apple Mac OSX - mountsmbfs Local Stack Buffer Overflow / Copyright C 2007-2008 Subreption LLC. All rights reserved. Visit http://blog.subreption.com for exploit development notes. References: CVE-2007-3876 http://docs.info.apple.com/article.html?artnum=307179...

CVE-2007-5647

Multiple cross-site scripting XSS vulnerabilities in SocketKB 1.1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 artid or 2 node parameter in an article action to the default URI...

CVE-2007-5647

Multiple cross-site scripting XSS vulnerabilities in SocketKB 1.1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 artid or 2 node parameter in an article action to the default URI...

socketkb-xss.txt

+==================================================================+ + SocketKB it is number of "artid" and "node" NULL CODE SERVICES www.nullcode.com.ar Hunting Security Bugs! +==================================================================+ + SocketKB =1.1.5 XSS Multiple Remote Vulnerabiliti...

cmscream-rfi.txt

!/usr/bin/php -q -d shortopentag=on / / site: http://www.soqor.net /'; if $argc3 printr' / -- / / Usage: php '.$argv0.' host / Example: / / php '.$argv0.' http://localhost/ id // '; die; errorreporting0; iniset"maxexecutiontime",0; $url=$argv1; $cmd=$argv2;...

Content Builder 0.7.5 RFI Bug

Content Builder 0.7.5 RFI Bug Script Home Page : http://www.content-builder.de/ Source Forge Script Link : http://sourceforge.net/projects/content-builder/ Script Download URL : http://www.content-builder.de/modules/download/download.php?id=821 The Content Builder is a powerful German...

Sql injection

SQL injection vulnerability in article.php in OmniStar Article Manager allows remote attackers to execute arbitrary SQL commands via the pageid parameter in a favorite op action, a different vector than CVE-2006-5917...

CVE-2007-4952

SQL injection vulnerability in article.php in OmniStar Article Manager allows remote attackers to execute arbitrary SQL commands via the pageid parameter in a favorite op action, a different vector than CVE-2006-5917...

CVE-2007-4952

Affected software: OmniStar Article Manager. Vulnerability (CVE-2007-4952): SQL injection in article.php via the page_id parameter in a favorite op action, a different vector than CVE-2006-5917; remote attackers may execute arbitrary SQL commands. Related entry CVE-2006-5917 describes multiple SQ...

CVE-2007-4952

SQL injection vulnerability in article.php in OmniStar Article Manager allows remote attackers to execute arbitrary SQL commands via the pageid parameter in a favorite op action, a different vector than CVE-2006-5917...

omnistar-sql.txt

/bin/bash Omnistar Article Manager Software article.php Remote SQL Injection Exploit Exploit Coded By : Cold z3ro http://Hackteach.org Exploit : /article.php?op=favorite&articleid=4&pageid=-1'//union//select//name,1//from//user/...

Omnistar Article Manager Software (article.php) SQL Injection Exploit

No description provided by source. /bin/bash Omnistar Article Manager Software article.php Remote SQL Injection Exploit &nb...

Omnistar Article Manager Software - article.php SQL Injection

Omnistar Article Manager Software - article.php SQL Injection /bin/bash Omnistar Article Manager Software article.php Remote SQL Injection Exploit Exploit Coded By : Cold z3ro http://Hackteach.org Exploit : /article.php?op=favorite&articleid=4&pageid=-1'//union//select//name,1//from//user/...

Omnistar Article Manager Software (article.php) SQL Injection Exploit

Exploit for unknown platform in category web applications ===================================================================== Omnistar Article Manager Software article.php SQL Injection Exploit ===================================================================== /bin/bash Omnistar Article...

CVE-2007-4332

SQL injection vulnerability in article.php in Article Dashboard, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a print action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in signup.php in Article Dashboard allow remote attackers to inject arbitrary web script or HTML via the 1 femailaddress, 2 freemailaddress, and other unspecified parameters. NOTE: the provenance of this information is unknown; the details are...