6767 matches found
CVE-2007-6458
SQL injection vulnerability in shop/mainfile.php in 123tkShop 0.9.1 allows remote attackers to execute arbitrary SQL commands via a base64-encoded value of the admin parameter to shop/admin.php...
123tkShop 0.9.1 Remote Authentication Bypass Vulnerability
No description provided by source. By Michael Brooks Vulnerability:Sql Injection Software:123tkShop Homepage:http://sourceforge.net/projects/my123tkshop/ Affects Version 0.9.1. An attacker can gain Administrative rights with this authentication bypass exploit:...
123tkShop 0.9.1 - Remote Authentication Bypass
123tkShop 0.9.1 - Remote Authentication Bypass By Michael Brooks Vulnerability:Sql Injection Software:123tkShop Homepage:http://sourceforge.net/projects/my123tkshop/ Affects Version 0.9.1. An attacker can gain Administrative rights with this authentication bypass exploit:...
123tkShop 0.9.1 - Remote Authentication Bypass
By Michael Brooks Vulnerability:Sql Injection Software:123tkShop Homepage:http://sourceforge.net/projects/my123tkshop/ Affects Version 0.9.1. An attacker can gain Administrative rights with this authentication bypass exploit:...
123tkShop 0.9.1 Remote Authentication Bypass Vulnerability
Exploit for unknown platform in category web applications ========================================================== 123tkShop 0.9.1 Remote Authentication Bypass Vulnerability ========================================================== By Michael Brooks Vulnerability:Sql Injection Software:123tkSh...
SuSE 10 Security Update : clamav (ZYPP Patch Number 2390)
This update to ClamAV version 0.88.7 fixes various bugs : - Clam AntiVirus ClamAV allows remote attackers to cause a denial of service crash via a malformed base64-encoded MIME attachment that triggers a NULL pointer dereference. CVE-2006-5874 - Clam AntiVirus ClamAV 0.88.6 allowed remote attacke...
CVE-2007-5777
Blue-Collar Productions i-Gallery 3.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing a base64-encoded password via a direct request for igallery.mdb...
Improper access control
Blue-Collar Productions i-Gallery 3.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing a base64-encoded password via a direct request for igallery.mdb...
CVE-2007-5777
Blue-Collar Productions i-Gallery 3.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing a base64-encoded password via a direct request for igallery.mdb...
Heap overflow
Heap-based buffer overflow in the sampsend function in nuauth/sasl.c in NuFW before 2.2.7 allows remote attackers to cause a denial of service via unspecified input on which base64 encoding is performed. NOTE: some of these details are obtained from third party information...
CVE-2007-5723
Removed by vendor...
CVE-2007-5723
CVE-2007-5723 describes a heap-based buffer overflow in the samp_send function of NuFW (nuauth/sasl.c) prior to version 2.2.7. An attacker could remotely trigger DoS by providing input on which base64 encoding is performed. The vulnerability is exploitable over the network (no authentication requ...
Oracle 10g LT.FINDRICSET Local SQL Injection Exploit (IDS evasion)
No description provided by source. // / Oracle 10g LT.FINDRICSET SQL Injection Exploit / // / sploit grant DBA to scott / / evil cursor injection / / No "create procedure" privileg needed! / / + Funny IDS evasion vith base64 / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT:...
Oracle 10g LT.FINDRICSET Local SQL Injection Exploit (IDS evasion)
Exploit for multiple platform in category local exploits ================================================================== Oracle 10g LT.FINDRICSET Local SQL Injection Exploit IDS evasion ================================================================== // / Oracle 10g LT.FINDRICSET SQL Injecti...
Oracle 10g - LT.FINDRICSET SQL Injection (IDS Evasion)
Oracle 10g - LT.FINDRICSET SQL Injection IDS Evasion // / Oracle 10g LT.FINDRICSET SQL Injection Exploit / // / sploit grant DBA to scott / / evil cursor injection / / No "create procedure" privileg needed! / / + Funny IDS evasion vith base64 / // / tested on oracle 10.1.0.2.0 / // // / Date of...
i-Gallery 3.4 bug crack password!
we can find file mdb of i-Gallery by link: http://www.hkp.com/igallery/database/igallery.mdb and can crack password on file igallery.mdb! because password is Base64! -------------------- with link : http://www.hkp.com/gallery/igallery.asp?d=5c../../5c we can view file on folder of site!...
Jakarta Slide 2.1 RC1 - Remote File Disclosure
!/usr/bin/perl Jakarta Slide Remote File Disclosure Zeroday Xploit eliteb0y / 2007 thanx to the whole team & andi : +++KEEP PRIV8+++ This Bug may reside in different WebDav implementations, Warp your mind! +You will need auth for the exploit to work... use IO::Socket; use MIME::Base64; FIXME! May...
Jakarta Slide 2.1 RC1 - Remote File Disclosure
Jakarta Slide 2.1 RC1 - Remote File Disclosure !/usr/bin/perl Jakarta Slide Remote File Disclosure Zeroday Xploit eliteb0y / 2007 thanx to the whole team & andi : +++KEEP PRIV8+++ This Bug may reside in different WebDav implementations, Warp your mind! +You will need auth for the exploit to work...
Apache Tomcat - WebDAV SSL Remote File Disclosure
Apache Tomcat - WebDAV SSL Remote File Disclosure !/usr/bin/perl ================================================================ Apache Tomcat Remote File Disclosure Zeroday Xploit - With support for SSL MoDiFiEd version by : h3rcul3s ORiGiNaL Version by : kcdarookie aka eliteb0y / 2007...