2899 matches found
Format string bug in Foundstone Fscan
Format string bug during server banner analisys...
ADManager 1.1 - Content Manipulation
ADManager 1.1 - Content Manipulation source: https://www.securityfocus.com/bid/4615/info Admanager is banner advertisement management software. It is written in PHP and will run on most Unix and Linux variants, in addition to Microsoft Windows operating systems. Access to the 'add.php3' script do...
ADManager 1.1 - Content Manipulation
source: https://www.securityfocus.com/bid/4615/info Admanager is banner advertisement management software. It is written in PHP and will run on most Unix and Linux variants, in addition to Microsoft Windows operating systems. Access to the 'add.php3' script does not require authentication. It is...
Boozt 0.9.8 - Remote Buffer Overflow
Boozt 0.9.8 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/3787/info Boozt! is a free open source banner management software for Linux hosts. An issue has been reported which could allow for a user to execute arbitrary code on a Boozt! host. This is acheivable when a Boozt!...
GOBBLES CGI MARATHON #003
PRODUCT AdStreamer http://www.sha-la-la.com/adstreamer/ DESCRIPTION This software have many an open call that can exploited with Perl tricks like ../, 00, |, etc. bash-2.05$ egrep 'open|system|exec|eval' .cgi addbanner.cgi: This script is apart of the Banner Manager system. It will add banners...
CVE-2001-0383
CVE-2001-0383 affects PHP-Nuke up to version 4.4 and earlier. The banners.php Change operation can be invoked remotely without authentication, allowing modification of banner ad URLs. NVD lists a Network attack vector, low complexity, with no confidentiality impact, partial integrity impact, and ...
CVE-2001-0383
banners.php in PHP-Nuke 4.4 and earlier allows remote attackers to modify banner ad URLs by directly calling the Change operation, which does not require authentication...
Raptor Firewall 6.5 HTTP Proxy Detection
Raptor FW 6.5 appears to be running in front of the remote web server. By sending an invalid HTTP request to a web server behind the Raptor firewall, the HTTP proxy itself will respond. The server banner of Raptor FW version 6.5 is always 'Simple, Secure Web Server 1.1'. A remote attacker could u...
Проблема с баннерами в php-nuke (banner spoofing)
Можно удаленно поменять URL на которую ссылается баннер...
Re: Microsoft Media Player ASX Parser buffer overflow vulnerability
I found yet another bof condition in the ASX VERSION tag : an .ASX file with the contents : ASX VERSION="AAAAAAAAAAA ... AAAAAAA" crashes MPLAYER 6.4 in dxmasf.dll... greetz, ByteRage [email protected] http://elf.box.sk/byterage REVELATION: HREF attribute of BANNER tag can be abused to smash our...
Php-nuke exploit...
Hi people... This went public today... there are a bug in the banner section of php-nuke http://www.phpnuke.org which is web engine... the problem is you can change the url banners form anywhere, to anywhere example, to change the url of the first banner yo should enter un your browser...
PHP-Nuke 1.02.53.04.x - Remote Ad Banner URL Change
PHP-Nuke 1.02.53.04.x - Remote Ad Banner URL Change source: https://www.securityfocus.com/bid/2544/info PHP-Nuke is a website creation/maintainence tool written in PHP3. A PHP-Nuke feature supporting cycling ad banners is subject to interference from a remote user. A querystring can be submitted ...
PHP-Nuke 1.0/2.5/3.0/4.x - Remote Ad Banner URL Change
source: https://www.securityfocus.com/bid/2544/info PHP-Nuke is a website creation/maintainence tool written in PHP3. A PHP-Nuke feature supporting cycling ad banners is subject to interference from a remote user. A querystring can be submitted to an unpatched server which allows the remote user ...
Adcycle 0.78b Authentication
|---------------------------------------------------------------------------------| / Product: Adcycle Banner Rotation. Vendor URL: www.adcycle.com / Tested on: v0.77 - 0.78b Freeware Linux Vendor Contact: Mailed on 15th January i think Twice with NO reply / Other: Commericial version NOT tested...
CVE-2000-1161
CVE-2000-1161 concerns AdCycle banner management: the build.cgi CGI is left in a web-accessible directory, enabling remote attackers to execute the program and access or delete the AdCycle databases. Connected sources corroborate the issue and describe a remediation: remove build.cgi from /cgi-bi...
Дырка в Banner Rotation 01
Файл adpassword.txt открытый на чтение содаржит шифрованный DES пароль администрирования. Кроме того по-умолчанию используется пароль admin...
Banner Rotation 01
-- Banner rotating 01 -- -- Description: "Banner rotating 01" is a cgi script distributed for free on several site builder sites, including Hot Area. The script is available on http://www.hotarea.net/web/scripts/banner01/ The cgi script offers numerous functions for those wishing to manage rotati...
FTP Server Detection
It is possible to obtain the banner of the remote FTP server by connecting to a remote port. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10092; scriptversion"1.57"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/08/17";...
CVE-1999-0655
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is not about any specific product, protocol, or design, so it is out of scope of CVE. Notes: the former description is: "A service may include useful information in its banner or help function such as the...