5825 matches found
CVE-2006-0238
SQL injection vulnerability in wp-stats.php in GaMerZ WP-Stats 2.0 allows remote attackers to execute arbitrary SQL commands via the author parameter...
Ubuntu 4.10 / 5.04 : cvs vulnerability (USN-117-1)
Alen Zukich discovered a buffer overflow in the processing of version and author information in the CVS client. By tricking an user to connect to a malicious CVS server, an attacker could exploit this to execute arbitrary code with the privileges of the connecting user. Note that Tenable Network...
CVE-2005-4785
Cross-site scripting XSS vulnerability in QuickBlogger 1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 author "your name" and 2 "comment" section...
[Full-disclosure] ZRCSA-200504 - dotclear SQL Injection
Zone-H Research Center Security Advisory 200504 http://www.zone-h.fr Date of release: 30/11/2005 Software: dotclear http://www.dotclear.net Affected versions: = 1.2.2 Risk: Medium Discovered by: Kevin Fernandez "Siegfried" from the Zone-H Research Team Background ---------- dotclear is a weblog...
MS Windows Metafile (mtNoObjects) Denial of Service Exploit (MS05-053)
Exploit for unknown platform in category dos / poc ====================================================================== MS Windows Metafile mtNoObjects Denial of Service Exploit MS05-053 ====================================================================== / Author: Winny Thomas Pune, INDIA Th...
midicartInject.txt
Hello All, I have discovered a number of remote vulnerabilities in: MidiCart ASP Shopping Cart, Evaluation Version 7 & Standard & Pro Authors Site: http://www.midicart.com/ +-Examples:--------------------------------------------------+ 1------------------------------------------------------------...
ECWshop.txt
Hello All, I have discovered a number of remote vulnerabilities in: ECW Shop 6.0.2 Authors Site: http://www.soft4e.com/ ECW Shop is described by its authors as: ECW-Shop - simple for use featured shopping cart with ability to use Excel or Access format for database...
f3r4.txt
Escrito por: F3R4R4PP3R [email protected] Brasil 2005 Data: 22/05/2005 + ............. Sala 14 .................. + + + + Produto: INMOLUXE Premium + + versão: 2.0 + + VULNERABILIDADE TIPO: SQL injection + + Url vendedor: http://www.inmoluxe.com + + + + ........................................ +...
naxtorShop.txt
Hello All, I have discovered a couple of remote vulnerabilities in: Naxtor Shopping Cart 1.0 Authors Site: http://www.naxtor.com.au/ Naxtor is described by its authors as: Naxtor Shopping Cart is one stop solution for companies' interested in selling merchandise online...
Windows Command Shell, Reverse Ordinal TCP Stager (No NX or Win7)
Spawn a piped command shell staged. Connect back to the attacker This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 93 include Msf::Payload::Stager include Msf::Payload::Windows def...
e107617.txt
Software: http://www.e107.org Author: Heintz Advisory origin: http://www.waraxe.us Software bugtracker: http://e107.org/e107plugins/bugtracker2/bugtracker2.php?0.bug.558 e107 v 0.617 search.php line 142 if$POST'searchquery' echo ""; unset$text; extract$POST; here extract registeres and overwrites...
whoiscartInsert.txt
Subject: Saeven.net's WhoisCart all versions released prior to this disclosure is vulnerable in that it allows an attacker to insert Javascript into user viewed pages, and also to view any world readable file on the server hosting the WhoisCart software. Severity: Severe; These vulnerabilities ca...
ZH2005-03SA.txt
ZH2005-03SA -- multiple vulnerabilities in NukeBookmarks .6 Author: Gerardo 'Astharot' Di Giacomo Date: 26 March 2005 Product: NukeBookmarks .6 URL: http://nukebookmarks.sourceforge.net/ About the product ----------------- From the home page: "Nuke Bookmarks is a module for PHP-Nuke that allows...
formmail23.txt
-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: Form Mail Script FS Version: Location: Poland Email: groszynskif gmail com HP: http://shell.homeunix.org -- == -- == -- == -- == -- == -- == -- == -- == -- == --...
dcl15.txt
-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: Download Center Lite DCL Version: Location: Poland Email: groszynskif gmail com HP: http://shell.homeunix.org -- == -- == -- == -- == -- == -- == -- == -- == -- == --...
phpnews124.txt
-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: PHP News Version: 1.2.4 and possibly 1.2.3 Homepage: http://newsphp.sourceforge.net/ Author: Filip Groszynski VXSfx Date: 23 February 2005 -- == -- == -- == -- == -- == -- == -- == -- == -- == -- Vulnerable code in auth.php: if...
iGeneric12.txt
Hello All, I have discovered multiple vulnerabilities in: iGeneric eShop 1.2 Authors Site: http://www.igeneric.co.uk +-Examples:--------------------------------------------------+ Information Disclosure & Possible SQL Injection:...
osCommerceXSS.txt
Hello All, I have discovered XSS vulnerability in: osCommerce 2.2-MS2 Authors Site: http://www.oscommerce.com/ +-Example:--------------------------------------------------+ XSS: http://www.victimsite.com/contactus.php?&name=1&email=1&enquiry=%3C/textare a%3E%3Cscript%3Ealert'w00t';%3C/script%3E...
[NOBYTES.COM: #5] iGeneric eShop 1.2 - Information Disclosure & Possible SQL Injection
Hello All, I have discovered multiple vulnerabilities in: iGeneric eShop 1.2 Authors Site: http://www.igeneric.co.uk +-Examples:--------------------------------------------------+ Information Disclosure & Possible SQL Injection:...