Micro CMS 1.0 - name HTML Injection (1)

Micro CMS 1.0 - name HTML Injection 1 source: https://www.securityfocus.com/bid/43556/info Micro CMS is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow...

tomcat: information leak vulnerability in the handling of 'Transfer-Encoding' header

Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service application outage or obtain sensitive information via a crafted header that interferes with "recycling...

Dmx Ready v2 lite Database Disclosure Exploit

Exploit for perl platform in category web applications ============================================= Dmx Ready v2 lite Database Disclosure Exploit ============================================= !/usr/bin/perl -w Dmx Ready v2 lite Database Disclosure Exploit Found & Coded: indoushka Date: 25/07/201...

Joomla Biblioteca 1.0 Beta SQL Injection

Biblioteca 1.0 Beta Joomla Component Multiple SQL Injection Vulnerabilities Name Biblioteca Vendor http://www.cielostellato.info Versions Affected 1.0 Beta Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-08-21 X. IND...

Fennec 1.2 Beta 3 Denial of Service

Exploit for windows platform in category dos / poc =================================== Fennec 1.2 Beta 3 Denial of Service =================================== Exploit Title: Fennec 1.2 Beta 3 Denial of Service Vulnerability Author: d4rk-h4ck3r Date: 2010-08-19 Software Link:...

Sonique 2.0 - '.xpl' Remote Stack Buffer Overflow

source: https://www.securityfocus.com/bid/42434/info Sonique is prone to a remote stack-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute arbitrary code in the context of the...

Joomla! Component Golf Course Guide 0.9.6.0 - SQL Injection

Exploit Title: Joomla Component comgolfcourseguide SQL Injection Vulnerability Date: 23.07.2010 Author: Valentin Category: webapps/0day Version: v0.9.6.0 beta, v1 beta Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information...

Hero DVD Buffer Overflow Exploit (meta)

Exploit for windows platform in category remote exploits ======================================= Hero DVD Buffer Overflow Exploit meta ======================================= .-----.--.--.--.----.----.-| | | | | | | | -| | | |||||| || By MadjiX Sec4ever.com Note: Use Backtrack! place httpd.conf i...

Hero DVD - Remote Buffer Overflow (Metasploit)

Hero DVD - Remote Buffer Overflow Metasploit .-----.--.--.--.----.----.-| | | | | | | | -| | | |||||| || By MadjiX Sec4ever.com Note: Use Backtrack! place httpd.conf in /etc/apache2/ and start apache Have Someone Connect to your Server /sploit Credit goes to chap0 for the nice bug! require...

Hero DVD - Remote Buffer Overflow (Metasploit)

.-----.--.--.--.----.----.-| | | | | | | | -| | | |||||| || By MadjiX Sec4ever.com Note: Use Backtrack! place httpd.conf in /etc/apache2/ and start apache Have Someone Connect to your Server /sploit Credit goes to chap0 for the nice bug! require 'msf/core' class Metasploit3 'Hero DVD Remote Buffe...

upload super beta v1.3 Remote Shell Upload Vulnerability

Exploit for php platform in category web applications ======================================================== upload super beta v1.3 Remote Shell Upload Vulnerability ======================================================== Author: ViRuS Qalaa Email: email protected Home Script:...

MoreAmp - Local Buffer Overflow (SEH) (Metasploit)

MoreAmp - Local Buffer Overflow SEH Metasploit MoreAmp Seh Buffer Overflow meta Greetz:His0k4 , Bibi-info , Volc4n0 sec4ever.com require 'msf/core' class Metasploit3 'MoreAmp 0.1.25 Beta Buffer Overflow SEH', 'Description' = %q This module exploits a SEH overflow in 0.1.25 MoreAmp Beta By creatin...

CVE-2010-2618

CVE-2010-2618 describes a remote file inclusion (RFI) in AdaptCMS. The vulnerability is triggered in the PHP file inc/smarty/libs/init.php when register_globals is enabled, allowing an attacker to supply a URL in the sitepath parameter to execute arbitrary PHP code on the server. Multiple connect...

HAVECMS 2.0 Beta <= SQL Injection Vulnerability

Exploit for php platform in category web applications =============================================== HAVECMS 2.0 Beta = SQL Injection Vulnerability =============================================== Author: Aurel 666 Exploit Title: SQL Injection Vendor url:http://havecms.jember.info/ Indonesia...

EZPX Photoblog 1.2 beta remote file inclusion vulnerability-vulnerability warning-the black bar safety net

EZPX Photoblog 1.2 beta commentform.php the page exists remote file include vulnerability EXP:http://127.0.0.1/system/application/views/public/commentform.php?tplbasedir=http://www.hacking.cn/shell.txt? Official website:...

CVE-2010-2341

The CVE-2010-2341 entry concerns EZPX Photoblog 1.2 beta, where a PHP remote file inclusion vulnerability in system/application/views/public/commentform.php allows an attacker to execute arbitrary PHP code by supplying a URL in the tpl_base_dir parameter. The underlying issue is improper handling...

EZPX photoblog 1.2 beta Remote Include Exploit

Exploit for php platform in category web applications ============================================== EZPX photoblog 1.2 beta Remote Include Exploit ============================================== EZPX photoblog 1.2 beta Remote Include Exploit Vendor Url: http://ezpx.org/ Found by sh00t0ut Expl:...

CVE-2009-4891

CS-Cart 2.0.0 Beta 3 is affected by an SQL injection in index.php via the product_id parameter in the products.view action. The vulnerability allows remote attackers to execute arbitrary SQL commands on the backend. The issue is documented across multiple sources (e.g., Exploit-DB exploit 8184 an...

reVou Twiter Clone Beta 2.0 Cross Site Scripting / SQL Injection

Title:reVou twitter clne Beta 2.0 sqli and Xss vulnerability Author: Sid3^effects Published: 2010-06-06 price:$99 email:[email protected] vendor: Revou url : http://www.revou.com/demo/home google dork : Powered by TextAds 2.08 ooooo .oooooo. oooooo oooooo oooo 888' d8P' Y8b 888. 888. .8' 888 888...

CVE-2010-2145

Multiple PHP remote file inclusion vulnerabilities in ClearSite Beta 4.50, and possibly other versions, allow remote attackers to execute arbitrary PHP code via a URL in the csbasepath parameter to 1 docs.php and 2 include/admin/deviceadmin.php. NOTE: the header.php vector is already covered by...