Agavi 1.0.0 beta 5 (cmplang) Remote File Disclosure Vulnerability

No description provided by source. AGAVI =Agavi 1.0.0 beta 5 Directory Transversal Exploit vendor : http://www.agavi.org/ affected versions : =Agavi 1.0.0 beta 5 latest found by t0fx // http://forum.europasecurity.org white hat crew // exploit :...

bloggielite-cookie.txt

Bloggie Lite 0.0.2 Beta SQl Injection by Insecure Cookie Handling url: http://mywebland.com/download.php?id=20 Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk. Author...

Bloggie Lite 0.0.2 Beta SQL Injection by Insecure Cookie Handling

No description provided by source. Bloggie Lite 0.0.2 Beta SQl Injection by Insecure Cookie Handling url: http://mywebland.com/download.php?id=20 Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpos...

MatPo Link 1.2b - SQL Injection

MatPo Link 1.2b - SQL Injection MatPo Link Version 1.2 Beta Remote Sql inj. view.php id ---------------------------------------------------------- Discovered By: ZoRLu Date: 03.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : N0T:...

Apoll 0.7b - Authentication Bypass

Apoll version Remote Auth Bypass Vulnerability version: beta 0.7 script dwonload: http://www.miticdjd.com/download/3/ ---------------------------------------------------------- Discovered By: ZoRLu Date: 03.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi...

txtshop - beta 1.0 / Local File Inclusion Vulnerability

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- txtshop - beta 1.0 / Local File Inclusion Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- $ Program: txtshop $ Version: = 1.0 $ File affected: ADMIN/header.php $ Download: http://sourceforge.net/projects/txtshop/ Found ...

txtshop-lfi.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- txtshop - beta 1.0 / Local File Inclusion Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- $ Program: txtshop $ Version: eNYe-Sec - www.enye-sec.org --Bug -- 4. if !$language$language="ch"; 5...

CVE-2008-4585

Belong Software Site Builder 0.1 beta allows remote attackers to bypass intended access restrictions and perform administrative actions via a direct request to admin/home.php...

Skype extension for Firefox BETA 2.2.0.95 Clipboard Writing Vulnerability

No description provided by source. !--------------------------------------------------------------------------- Skype extension for Firefox BETA 2.2.0.95 Clipboard Writing Vulnerability PoC download: https://developer.skype.com/SkypeToolbars Author: irk4zatyahoo.pl homepage:...

Skype extension for Firefox BETA 2.2.0.95 Clipboard Writing Vulnerability

Exploit for unknown platform in category remote exploits ========================================================================= Skype extension for Firefox BETA 2.2.0.95 Clipboard Writing Vulnerability ========================================================================= test it! function...

Skype Extension for Firefox Beta 2.2.0.95 - Clipboard Writing

test it! function copytoclipboard text if skypetool var copyit = text + '\0+'; //use null byte to copy value, because '+' char must be in string skypetool.copynum copyit ; function checkit //copytoclipboard'malicious text!!!!!!!!!!!\n\n\n!!'; //copytoclipboard'http://irk4z.wordpress.com/';...

buxto-cookie.txt

Bux.to Clone script Insecure Cookie Handling Vulnerability + Discovered By SirGod + wWw.MorTal-TeaM.OrG + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke,Codex + Download : http://depositfiles.com/files/6633532 + Dork : c SriptBux 2008 | Powered By ScriptBux...

JVN#99916563 EC-CUBE cross-site scripting vulnerability

EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a cross-site scripting vulnerability. This vulnerability is different from JVN61543834, JVN26621646, and JVN36085487. Impact An arbitrary script could be executed on the user's web browser...

JVN#26621646 EC-CUBE cross-site scripting vulnerability

EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a cross-site scripting vulnerability. This vulnerability is different from JVN61543834, JVN36085487, and JVN99916563. Impact An arbitrary script could be executed on the user's web browser...

[SECURITY] Fedora 9 Update: Miro-1.2.4-3.fc9

Miro is a free application that turns your computer into an internet TV video player. This release is still a beta version, which means that there are some bugs, but we're moving quickly to fix them and will be releasing bug fixes on a regular basis...

Mozilla Firefox/SeaMonkey UTF-8基于栈的缓冲区溢出漏洞

BUGTRAQ ID: 31397 CVE ID：CVE-2008-0016 CNCVE ID：CNCVE-20080016 Mozilla Firefox/SeaMonkey是一款开放源代码的WEB浏览器和WEB应用套件。 Mozilla Firefox/SeaMonkey处理UTF-8 URL存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 Mozilla...

Vikingboard 0.2 Beta - register.php SQL Column Truncation Unauthorized Access

Vikingboard 0.2 Beta - register.php SQL Column Truncation Unauthorized Access source: https://www.securityfocus.com/bid/31408/info Vikingboard is prone to an unauthorized-access vulnerability. Successfully exploiting this issue can allow attackers to register and log in as existing users...

lansuite-lfi.txt

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl lansuite success $stats = new stats; // Boxes if !$IsAboutToInstall and !$GET'contentonly' and $GET'design' != 'base'...

CVE-2008-4176

SQL injection vulnerability in izle.asp in FoT Video scripti 1.1 beta allows remote attackers to execute arbitrary SQL commands via the oyun parameter...

CVE-2008-4145

SQL injection vulnerability in userreadlinks.php in Addalink 1.0 beta 4 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the categoryid parameter...