AB Banner Exchange CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: AB Banner Exchange CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/ab-banner-exchange/20795/ Category:: webapps Demo : http://www.scripts-demo.com/ab-banner-exchange/administration/ Greetz:...

Easy Banner Manager Pro [CSRF] / (change admin password)

Exploit for php platform in category web applications Exploit Title: Easy Banner Manager Pro CSRF / change admin password Author: Jonturk75 Vendor or Software Link: www.scripts.com/viewscript/easy-banner-manager-pro/32281/ Category:: webapps Demo site: http://demo.scriptsez.net/ebm/demo.html :...

Easy Banner Manager Pro Cross Site Request Forgery

Exploit Title: Easy Banner Manager Pro CSRF / change admin password Author: Jonturk75 Vendor or Software Link: www.scripts.com/viewscript/easy-banner-manager-pro/32281/ Category:: webapps Demo site: http://demo.scriptsez.net/ebm/demo.html...

EasyFTP Server 1.7.0.11 - APPE Remote Buffer Overflow

EasyFTP Server 1.7.0.11 - APPE Remote Buffer Overflow !/usr/bin/env python -- coding: latin-1 -- / / / / / / // / / -/ - / // / / / / // / ////,//////,// ///, / // nullsecurity team Easy FTP server remote exploit DATE 03/03/2012 DESCRIPTION Easy FTP Server - "APPE" command buffer overflow -...

Lantronix Telnet Service Banner Detection

Detect Lantronix telnet services This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Lantronix Telnet Service Banner Detection', 'Description' = 'Detect Lantronix telnet services', 'Author' =...

Service Detection : SMTP Server on a Well-Known Port

This plugin attempts to collect the banner from services listening on well-known SMTP ports. It is not expected to report anything. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid57914; scriptversion"$Revision: 2.4 $"; scriptcvsdate"$Date: 2013/02/17 01:24:57 $";...

BASE 'base_qry_main.php' SQL Injection Vulnerability

BASE is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...

BASE 'base_qry_main.php' SQLi Vulnerability

BASE is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Oracle GlassFish Server Multiple Unspecified Vulnerabilities

The host is running GlassFish Server and is prone to multiple unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: gboracleglassfishservermultunspecifiedvuln.nasl 5999 2017-04-21 09:02:32Z teissa $ Oracle GlassFish Server Multiple Unspecified Vulnerabilities Authors: Antu Sanadi Copyright...

OpenSSL Version Detection

Nessus was able to extract the OpenSSL version from the web server's banner. Note that security patches in many cases are backported and the displayed version number does not show the patch level. Using it to identify vulnerable software is likely to lead to false detections. C Tenable, Inc...

SePortal 2.5 SQL Injection

Exploit Title: SePortal 2.5 SQL Injection Google Dork: Powered by SePortal 2.5 Date: Decembar/08/2011 Author: Don BalcanCrew & BalcanHack Software Link: http://seportal.org Version: 2.5 Tested on: LiteSpeed Vulnerability: http://server/redirect.php?action=banner&goto= SQL How to fix this...

SePortal 2.5 - SQL Injection (1)

Exploit Title: SePortal 2.5 SQL Injection Google Dork: Powered by SePortal 2.5 Date: Decembar/08/2011 Author: Don BalcanCrew & BalcanHack Software Link: http://seportal.org Version: 2.5 Tested on: LiteSpeed Vulnerability: http://server/redirect.php?action=banner&goto= SQL How to fix this...

Codesys CmpWebServer Multiple Vulnerabilities

Codesys is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Herberlin Bremsserver <= 3.0 Directory Traversal Vulnerability - Active Check

Herberlin Bremsserver is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Dell KACE K2000 Detection

The web interface for the Dell KACE K2000 is running at this Host. OpenVAS Vulnerability Test $Id: gbdellkace2000webdetect.nasl 6701 2017-07-12 13:04:06Z cfischer $ Dell KACE K2000 Detection Authors: Michael Meyer Copyright: Copyright c 2011 Greenbone Networks GmbH This program is free software;...

CVE-2010-4981

SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-4981

SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-4981

The CVE-2010-4981 entry describes a SQL injection in YourFreeWorld Banner Management, via trackads.php, where the id parameter is not properly sanitized, allowing remote attackers to execute arbitrary SQL commands. Affected component/file: trackads.php in YourFreeWorld Banner Management. Impact: ...

PT-2011-1916

Name of the Vulnerable Software and Affected Versions YourFreeWorld Banner Management affected versions not specified Description A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the id parameter in the trackads.php file...