265 matches found
[theHarvester v2.2a] Tool for Gathering
theHarvester is a tool for gather emails, subdomains, hosts, employee names, open ports and banners from different public sources like search engines, PGP key servers and SHODAN computer database. This tool is intended to help Penetration testers in the early stages of the penetration test in ord...
CVE-2012-6046
Static code injection vulnerability in admin/banners.php in PHP Enter allows remote attackers to inject arbitrary PHP code into horad.php via the code parameter...
CVE-2012-6046
Static code injection vulnerability in admin/banners.php in PHP Enter allows remote attackers to inject arbitrary PHP code into horad.php via the code parameter...
Auxilium PetRatePro SQL Injection / Shell Upload
Exploit Title: Auxilium PetRatePro Multiple Vulnerabilities Date: 14/09/2012 Author: DaOne @LibyanCA Software Link: http://www.auxiliumsoftware.com Google Dork: "N/A" 1-Remote Add Admin: Create New Administrator Username Password Name Email Address 2-SQL Injection viewcomments.php parameter phid...
TikiWiki unserialize() Function Arbitrary Code Execution
The version of the TikiWiki installed on the remote host contains a flaw that could allow a remote attacker to execute arbitrary code. The 'unserialize' function is not properly sanitized before being used in the 'lib/banners/bannerlib.php', 'tiki-printmultipages.php', 'tiki-sendobjects.php' and...
OS Identification : SMTP
Nessus was able to identify the remote operating system based on the banner reported by the mail server running on it. C Tenable, Inc. include"compat.inc"; if description scriptid57915; scriptversion"2.38"; scriptsetattributeattribute:"pluginmodificationdate", value:"2025/03/31";...
Cisco IOS Software SSH Banner Processing Error Denial of Service Vulnerability
Cisco IOS Software contains a vulnerability that could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper handling of login banners by Cisco IOS Software. An authenticated, remote attacker could exploit this vulnerability by...
ZeeMatri 3.x - Arbitrary File Upload
ZeeMatri 3.x - Arbitrary File Upload 1 1 0 I'm SONiC member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : ZeeMatri v3x- Arbitrary file upload Vulnerability Date : july 23,2010 Critical Level :VERY HIGH vendor URL :?? http://www.zeeways.co...
The webring service SQL Injection Vulnerability
Exploit for php platform in category web applications =============================================== The webring service SQL Injection Vulnerability =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 ...
phpAdsNew / OpenAds / OpenX XSS
Hello Bugtraq! I want to warn you about vulnerability in phpAdsNew, OpenAds and OpenX. Earlier I already wrote to the list about XSS and HTML Injection vulnerabilities in tagcloud.swf in multiple plugins for many engines such as WordPress, Joomla and DLE. About this issue I wrote in details in my...
eZoneScripts Hotornot2 Script (Admin Bypass) Multiple Remote Vulns
No description provided by source. + Hotornot2 Script Remote apload Admin Bypass Vulnerability ===== ++ by sniper code++============================================ Author : sniper code S.C.T-443 website : www.sec-code.com...
Unrestricted file upload
Unrestricted file upload vulnerability in admin/uploadimage.php in eLitius 1.0 allows remote attackers to bypass intended access restrictions and upload and execute arbitrary files via an avatar file with an accepted Content-Type such as image/gif, then requesting the file in admin/banners/...
CVE-2009-1659
Unrestricted file upload vulnerability in admin/uploadimage.php in eLitius 1.0 allows remote attackers to bypass intended access restrictions and upload and execute arbitrary files via an avatar file with an accepted Content-Type such as image/gif, then requesting the file in admin/banners/...
ASPManage Banners File Upload / Disclosure
ASPManage Banners RFU/DD Multiple Remote Vuln Demo: http://demo.merlix.com/adbanner5 ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: TUM iSLAM ALEMiNiN BAYRAMINI KUTLARIM...! N0T: YALNIZLIK, YiTiRDi ANLAMI...
ASPManage Banners (RFU/DD) Multiple Remote Vulnerabilities
No description provided by source. ASPManage Banners RFU/DD Multiple Remote Vuln Demo: http://demo.merlix.com/adbanner5 ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: TUM iSLAM ALEMiNiN BAYRAMINI...
ASPManage Banners (RFU/DD) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ========================================================== ASPManage Banners RFU/DD Multiple Remote Vulnerabilities ========================================================== ASPManage Banners RFU/DD Multiple Remote Vuln Demo:...
aspmanage banners - Arbitrary File Upload / File Disclosure
ASPManage Banners RFU/DD Multiple Remote Vuln Demo: http://demo.merlix.com/adbanner5 ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: TUM iSLAM ALEMiNiN BAYRAMINI KUTLARIM...! N0T: YALNIZLIK, YiTiRDi ANLAMI...
aspmanage banners - Arbitrary File Upload File Disclosure
aspmanage banners - Arbitrary File Upload File Disclosure ASPManage Banners RFU/DD Multiple Remote Vuln Demo: http://demo.merlix.com/adbanner5 ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: TUM iSLAM...
CVE-2008-2761
Multiple cross-site scripting XSS vulnerabilities in Xigla Absolute Banner Manager XE 2.0 allow remote authenticated administrators to inject arbitrary web script or HTML via the text parameter in 1 searchbanners.asp and 2 listadvertisers.asp, and other unspecified fields. NOTE: some of these...
PT-2008-2989 · Phpbp · Phpbp
Name of the Vulnerable Software and Affected Versions: phpBP version 2.204 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in a "banner out" action. The vulnerable file is includes/functions/banners-external.php...