2136 matches found
mxbb233-rfi.txt
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + mxBB Module mxglance 2.3.3 Remote File Include Vulnerability + + + + Discovered by bd0rk || SOH-Crew + + + + www.soh-crew.it.tt + + + + The german Coding and IT-Security Ressource + + +...
mxBB Module mx_glance 2.3.3 - Remote File Inclusion
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + mxBB Module mxglance 2.3.3 Remote File Include Vulnerability + + + + Discovered by bd0rk || SOH-Crew + + + + www.soh-crew.it.tt + + + + The german Coding and IT-Security Ressource + + +...
CVE-2007-5058
Cross-site scripting XSS vulnerability in the Web administration interface in Barracuda Spam Firewall before firmware 3.5.10.016 allows remote attackers to inject arbitrary web script or HTML via the username field in a login attempt, which is not properly handled when the Monitor Web Syslog scre...
Cross site scripting
Cross-site scripting XSS vulnerability in the Web administration interface in Barracuda Spam Firewall before firmware 3.5.10.016 allows remote attackers to inject arbitrary web script or HTML via the username field in a login attempt, which is not properly handled when the Monitor Web Syslog scre...
CVE-2007-3730
The CVE-2007-3730 issue affects HP OpenVMS TCP/IP Services 5.6 (POP server) where the default configuration fails to log the source IP address and attempted username for login attempts. This logging deficiency could help remote attackers remain anonymous or avoid identification when probing or at...
CVE-2007-3551
Buffer overflow in bbs100 before 3.2 allows remote attackers to cause a denial of service crash by attempting to login as the Guest user when another Guest user is already logged in, possibly related to the stateloginprompt function in statelogin.c...
Multiple Symantec antiviral products Reporting Server code execution
It's possible to spoof executable report file. Password hash is leaked during failed logon attempt...
CVE-2007-1681
CVE-2007-1681 relates to a format-string vulnerability in Sun Java Web Console (Lockhart) specifically in libwebconsole_services.so, affecting Sun Java Web Console versions 2.2.2–2.2.5. The issue allows remote attackers to crash the application, potentially disclose sensitive information, and pos...
phpbbxtra20-rfi.txt
----------------------------------------------- PhpbbXtra v2.0 phpbbrootpath Remote File Include Vulnerability ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code: include$phpbbrootpath . 'includes/bbcode.'.$phpEx;...
mxBB Module ErrorDocs 1.0 - common.php Remote File Inclusion
mxBB Module ErrorDocs 1.0 - common.php Remote File Inclusion = mxBB Module mxerrordocs 1.0 Remote File Include Vulnerability = Mod-Download: http://forums.phpmix.org/download.php?id=27 = Bugfounder: bd0rk || SOH-Crew = Vulnerable code in common.php = Greetings: str0ke, broken-error, Martn & m0rph...
PNphpBB.txt
Vendor: http://www.pnphpbb.com/ Vulnerable File: includes/functionsadmin.php Vulnerable Code: //The phpbbrootpath isn't initialize includeonce $phpbbrootpath . 'includes/functions.' . $phpEx ; Method To Use:...
Mambo Component CopperminePhotoGalery - Remote File Inclusion
Mambo Component CopperminePhotoGalery - Remote File Inclusion CopperminePhotoGallery Component Found By k1tk4t Indonesia This bug allows a remote atacker to execute commands via RFI file: cpg.php bug: require $mosConfigabsolutepath."/administrator/components/comcpg/config.cpg.php"; path: add in...
CVE-2006-3914
Cross-site scripting XSS vulnerability in Blackboard Academic Suite 6.2.3.23 allows remote authenticated users to inject arbitrary HTML or web script by bypassing client-side validation through disabling JavaScript when submitting an essay response, which has no server-side validation before bein...
[NT] Microsoft Internet Explorer Drag-and-Drop Redeux
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
Check default community names of the SNMP Agent
The script sends a connection request to the server and attempts to login with default communities. Successful logins are storen in the KB. SPDX-FileCopyrightText: 2005 SecuriTeam SPDX-FileCopyrightText: New code and default communities since 2009 Greenbone AG Some text descriptions might be...
AutoLinks Pro 2.1
NewAngels Advisory 1 AutoLinks Pro 2.1 - Remote File Include Vulnerability ============================================================================= Software: AutoLinks Pro Version: 2.1 Type: Remote PHP File Include Vulnerability Risc: High Date: 16.08.05 Vendor: ScriptsCenter Page:...
Norton Antivirus < 2005 Remote Stack Overflow Exploit
No description provided by source. !-- Tested on Corp Edition and didn't work / str0ke -- head title/title /head body script...
DMS POP3 Server 1.5.3 build 37 - Remote Buffer Overflow
DMS POP3 Server 1.5.3 build 37 - Remote Buffer Overflow ===== Start DMSPOP3Overflow.pl ===== Usage: DMSPOP3Overflow.pl DMSPOP3Overflow.pl 127.0.0.1 110 DMS POP3 Server for Windows 2000/XP 1.5.3 build 37 Download: http://www.digitalmapping.sk.ca/pop3srv/default.asp Patch:...
Microsoft Windows XP - .WAV File Handler Denial of Service
Microsoft Windows XP - .WAV File Handler Denial of Service source: https://www.securityfocus.com/bid/11503/info Microsoft Windows XP is reported prone to a denial of service vulnerability. The issue exists due to a lack of sufficient sanitization performed on WAV file header values before they ar...