3360 matches found
CVE-2008-7066
OpenForum 0.66 Beta is impacted by CVE-2008-7066. The vulnerability allows remote attackers to bypass authentication and reset passwords of other users by sending a direct request with update=1 and modified user/password parameters. The NVD entry reports a base score of 7.5 (HIGH) with network ac...
CVE-2008-7060
Multiple cross-site scripting XSS vulnerabilities in One-News Beta 2 allow remote attackers to inject arbitrary HTML and web script via the 1 title or 2 content parameters in a news item to add.php, and the 3 itemnum, 4 author, or 5 comment parameters in a comment to index.php. NOTE: vectors 1 an...
Sql injection
SQL injection vulnerability in index.php in One-News Beta 2 allows remote attackers to execute arbitrary SQL commands via the q parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in One-News Beta 2 allow remote attackers to inject arbitrary HTML and web script via the 1 title or 2 content parameters in a news item to add.php, and the 3 itemnum, 4 author, or 5 comment parameters in a comment to index.php. NOTE: vectors 1 an...
CVE-2008-7059
CVE-2008-7059 describes an SQL injection vulnerability in the index.php of One-News Beta 2, exploitable via the q parameter. This allows remote attackers to execute arbitrary SQL commands. The issue is classified with a CVSS v2 base score of 7.5 (HIGH) with network access, low complexity, and no ...
CVE-2008-7059
SQL injection vulnerability in index.php in One-News Beta 2 allows remote attackers to execute arbitrary SQL commands via the q parameter...
CVE-2008-7060
CVE-2008-7060 concerns One-News Beta 2 and involves multiple cross-site scripting (XSS) vulnerabilities. The XSS can be triggered via the title or content fields of a news item (add.php) and via itemnum, author, or comment fields of a comment (index.php). Vectors 1 and 2 require user authenticati...
Unrestricted file upload
Unrestricted file upload vulnerability in usercp.php in AlilG Application AliBoard Beta allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as an avatar, then accessing it via a direct request to the file in uploads/avatars/...
CVE-2008-7029
The CVE-2008-7029 entry concerns an unrestricted file upload in AlilG Application AliBoard Beta, specifically in usercp.php. A remote authenticated user could upload a file with an executable extension as an avatar via uploads/avatars/ and access it directly to execute arbitrary code. The vulnera...
CVE-2008-6996
Google Chrome BETA 0.2.149.27 does not prompt the user before saving an executable file, which makes it easier for remote attackers or malware to cause a denial of service disk consumption or exploit other vulnerabilities via a URL that references an executable file, possibly related to the "ask...
Code injection
Google Chrome BETA 0.2.149.27 does not prompt the user before saving an executable file, which makes it easier for remote attackers or malware to cause a denial of service disk consumption or exploit other vulnerabilities via a URL that references an executable file, possibly related to the "ask...
CVE-2008-6996
CVE-2008-6996 affects Google Chrome BETA 0.2.149.27. The vulnerability is that Chrome does not prompt the user before saving an executable file, potentially enabling a remote attacker or malware to cause disk-based DoS or exploit other vulnerabilities via a URL referencing an executable (possibly...
CVE-2008-6996
Removed by vendor...
broid 1.0 Beta 3a (.mp3 File) Local Buffer Overflow PoC
Exploit for unknown platform in category dos / poc ======================================================= broid 1.0 Beta 3a .mp3 File Local Buffer Overflow PoC ======================================================= !/usr/bin/perl Found By :: HACK4LOVE broid 1.0 Beta 3a .mp3 File Local Stack...
broid 1.0 Beta 3a - .mp3 Local Buffer Overflow (PoC)
broid 1.0 Beta 3a - .mp3 Local Buffer Overflow PoC !/usr/bin/perl Found By :: HACK4LOVE broid 1.0 Beta 3a .mp3 File Local Stack Overflow PoC http://s1.freedownloadsplace.com/download-soft1/broid-1.0-Beta-3a.zip EAX 8C8C8C7D ECX 41414141 EDX C3C3C3C3 EBX 00FE28B8 ASCII "C:\Documents and...
broid 1.0 Beta 3a (.mp3 File) Local Buffer Overflow PoC
No description provided by source. !/usr/bin/perl Found By :: HACK4LOVE broid 1.0 Beta 3a .mp3 File Local Stack Overflow PoC http://s1.freedownloadsplace.com/download-soft1/broid-1.0-Beta-3a.zip EAX 8C8C8C7D ECX 41414141 EDX C3C3C3C3 EBX 00FE28B8 ASCII "C:\Documents and...
broid 1.0 Beta 3a - '.mp3' Local Buffer Overflow (PoC)
!/usr/bin/perl Found By :: HACK4LOVE broid 1.0 Beta 3a .mp3 File Local Stack Overflow PoC http://s1.freedownloadsplace.com/download-soft1/broid-1.0-Beta-3a.zip EAX 8C8C8C7D ECX 41414141 EDX C3C3C3C3 EBX 00FE28B8 ASCII "C:\Documents and Settings\ahmed\Desktop\hack4love.mp3" ESP 0012EF74 EBP 00FFE1...
broid 1.0 Beta 3a Buffer Overflow
!/usr/bin/perl Found By :: HACK4LOVE broid 1.0 Beta 3a .mp3 File Local Stack Overflow PoC http://s1.freedownloadsplace.com/download-soft1/broid-1.0-Beta-3a.zip EAX 8C8C8C7D ECX 41414141 EDX C3C3C3C3 EBX 00FE28B8 ASCII "C:\Documents and Settings\ahmed\Desktop\hack4love.mp3" ESP 0012EF74 EBP 00FFE1...
CVE-2008-6971
The password reset functionality in Simple Machines Forum SMF 1.0.x before 1.0.14, 1.1.x before 1.1.6, and 2.0 before 2.0 beta 4 includes clues about the random number generator state within a hidden form field and generates predictable validation codes, which allows remote attackers to modify...
Shorty 0.7.1b Insecure Cookie
Vulnerable Software -------------------------------------------------------------------------------- Script: Shorty v0.7.1 Beta maybe other versions URL:http://get-shorty.com/ Download:http://get-shorty.com/beta?force=download Google dork: intitle:"Shorty Beta" Bug...