Mambo Component mambads 1.0 RC1 Beta - SQL Injection

!/usr/bin/perl -w Mambo Component mambads 1.0 RC1 Beta & 1.0 RC1 Remote SQL Injection Found by : Houssamix From H-T Team H-T Team HouSSaMix + ToXiC350 from MoroCCo Greetz : Stack & CoNaN & HaCkeREgY & room-hacker & Hak3r-b0y & All friends & All muslims HaCkeRs : ScriptName: "Mambo" ComponentName:...

Mambo Component mambads <= 1.0 RC1 Beta SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Mambo Component mambads ; $uname="username"; $passwd="password"; $magic="mosusers"; $pass1="imambo"; $pass2="aspen"; $pass3="ligio"; $pass4="qwally"; $b = LWP::UserAgent-n...

CVE-2008-2395

The CVE-2008-2395 entry describes a SQL injection in the AlkalinePHP project (version 0.80.00 beta and earlier) via the id parameter in thread.php. The underlying issue is a vulnerability in the thread.php component that allows remote attackers to execute arbitrary SQL commands, implying possible...

Shader TV (Beta) Multiple Remote SQL Injection Vulnerabilities

No description provided by source. 1...

Shader TV (Beta) - Multiple SQL Injections

Shader TV Beta Multiple Remote SQL Ä°njection Vulnerable Script : http://www.aspindir.com/indir.asp?ID=5441 Script : http://rapidshare.de/files/39341463/ShaderTV.zip.html Coded : Asp Lnguae : Acces Discovered By U238 | Friends : ka0x - TheBekiR - Marco Almeida - Erhan Bulut - Caborz : Web -...

Ourgame 'GLIEDown2.dll' ActiveX Control - Remote Code Execution

source: https://www.securityfocus.com/bid/29118/info Ourgame 'GLIEDown2.dll' ActiveX control is prone to a remote code-execution vulnerability because it fails to sufficiently verify user-supplied input. An attacker can exploit this issue to run arbitrary attacker-supplied code in the context of...

Ourgame GLIEDown2.dll ActiveX Control - Remote Code Execution

Ourgame GLIEDown2.dll ActiveX Control - Remote Code Execution source: https://www.securityfocus.com/bid/29118/info Ourgame 'GLIEDown2.dll' ActiveX control is prone to a remote code-execution vulnerability because it fails to sufficiently verify user-supplied input. An attacker can exploit this...

CVE-2008-2088

SQL injection vulnerability in admin/news.php in PHP Forge 3.0 beta 2 allows remote attackers to execute arbitrary SQL commands via the id parameter in the news module to admin.php...

CVE-2008-2084

SQL injection vulnerability in topics.php in the MyArticles 0.6 beta-1 module for RunCMS allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a listarticles action...

CVE-2008-2014

Mozilla Firefox 3.0 beta 5 allows remote attackers to cause a denial of service application crash via JavaScript code that calls document.write in an infinite loop...

PHP Forge 3 Beta 2 - id SQL Injection

PHP Forge 3 Beta 2 - id SQL Injection ========================================================= =============== JIKI TEAM Maroc And YameN =============== ========================================================= Author : jiko email : [email protected] Home : www.no-back.org Script : Forge 3.0...

PHP Forge 3 Beta 2 - 'id' SQL Injection

========================================================= =============== JIKI TEAM Maroc And YameN =============== ========================================================= Author : jiko email : [email protected] Home : www.no-back.org Script : Forge 3.0 bêta Bug : Remote SQL Injection...

[SECURITY] Fedora 8 Update: Miro-1.2-2.fc8

Miro is a free application that turns your computer into an internet TV video player. This release is still a beta version, which means that there are some bugs, but we're moving quickly to fix them and will be releasing bug fixes on a regular basis...

[SECURITY] Fedora 7 Update: Miro-1.2-2.fc7

Miro is a free application that turns your computer into an internet TV video player. This release is still a beta version, which means that there are some bugs, but we're moving quickly to fix them and will be releasing bug fixes on a regular basis...

Remote file inclusion

PHP remote file inclusion vulnerability in includes/functionsweblog.php in mxBB mxblogs 2.0.0 beta allows remote attackers to execute arbitrary PHP code via a URL in the mxrootpath parameter...

CVE-2008-1712

PHP remote file inclusion vulnerability in includes/functionsweblog.php in mxBB mxblogs 2.0.0 beta allows remote attackers to execute arbitrary PHP code via a URL in the mxrootpath parameter...

mxbbmxblogs-rfi.txt

mxBB Module mxblogs 2.0.0-beta Remote File Include Exploit Vendor: http://www.mx-system.com Download: http://www.mx-system.com/index.php?page=4&action=file&fileid=405 Vulncode in: /includes/functionsweblog.php line 24 Greetz: str0ke, TheJT, rgod, Vallani, DNX, NBBN use Getopt::Long; use...

phpspamman-disclose.txt

phpSpamManager 0.53 beta body.php Remote File Disclosure Vulnerability D.Script : http://sourceforge.net/project/showfiles.php?groupid=141000 Vuln Code Ln 38 - 47 : //get filename $okprint=false; $filename = $REQUEST'filename'; --- XxX if $filename!='FILENAME' debugprint"analysing " .$filename;...

CVE-2008-1570

Race condition in the createlockpath function in policyd-weight 0.1.14 beta-16 allows local users to modify or delete arbitrary files by creating the LOCKPATH directory, then modifying it after the symbolic link check occurs. NOTE: this is due to an incomplete fix for CVE-2008-1569...

CVE-2008-0070

CVE-2008-0070 affects Orb Networks Orb 2.00.1014 and Winamp Remote BETA. Root cause: integer overflow causing a heap-based buffer overflow when an RPC request specifies a very large number of array dimensions. Impact: remote code execution potential. Exploitation details are not provided in the d...