Black Knight Forum 4.0 - Member.asp SQL Injection

Black Knight Forum 4.0 - Member.asp SQL Injection source: https://www.securityfocus.com/bid/13327/info Black Knight Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input prior to utilizing the data in an SQL...

Black Knight Forum 4.0 - 'Member.asp' SQL Injection

source: https://www.securityfocus.com/bid/13327/info Black Knight Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input prior to utilizing the data in an SQL query. Successful exploitation could result in a...

My-forum.org cookies vulnerability - data bug

I discovered a security issue that affects the following my-forum.org release: FOROS v.3.2 - http://my-forum.org/index.php?id=Ingles When you are logged in with an account, you need edit the cookie of the site and change the value where your username is and replace it for the victim's username...

CVE-2004-1207

The Serious engine, as used in 1 Alpha Black Zero Intrepid Protocol 1.04 and earlier, 2 Nitro family, and 3 Serious Sam Second Encounter 1.07 allows remote attackers to cause a denial of service server crash via a large number of UDP join requests that exceeds the maximum player limit, as...

CVE-2004-1207: Undefined Security Weakness

The Serious engine, as used in 1 Alpha Black Zero Intrepid Protocol 1.04 and earlier, 2 Nitro family, and 3 Serious Sam Second Encounter 1.07 allows remote attackers to cause a denial of service server crash via a large number of UDP join requests that exceeds the maximum player limit, as...

Crash in Alpha Black Zero 1.04

Luigi Auriemma Application: Alpha Black Zero: Intrepid Protocol http://www.playlogicgames.nl/abz/ Versions: = 1.04 Platforms: Windows Bug: crash Risk: medium Exploitation: remote, versus server Date: 29 September 2004 Author: Luigi Auriemma e-mail: [email protected] web:...

Alpha Black Zero <= 1.04 Remote Denial of Service Exploit

No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h ifdef WIN32 include winsock.h include string.h include errno.h void stderrvoid char error; switchWSAGetLastError case 10004: error = "Interrupted system call"; break; case 10009: error = "Ba...

Alpha Black Zero <= 1.04 Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================================= Alpha Black Zero include include ifdef WIN32 include include include void stderrvoid char error; switchWSAGetLastError case 10004: error = "Interrupted system call"; break; case 10009: err...

Web Wiz Site News realease v3.06 administration access.

Date: 14.04.2003 Subject: Web Wiz Site News realease v3.06 administration access. Description: Free asp news management system. Includes, simple intergration, short news item with link to full story, insert images, links, text formatting, user commentsoptional with email notification, anti-spam...

Sakki&#39;s guestbook V.1.01 script injection vulnerability.

This advisory can be found at www.blacktigerz.org. Description: Easy to manage and configure asp powered guestbook. Works with MS Access database or without it. Vendor: http://www.sakki.net Vulnerability: gb.asp neglects filtering user input allowing for script injection to the guestbook via "nam...

CVE-2002-0446

categorie.php3 in Black Tie Project BTP 0.4b through 0.5b allows remote attackers to determine the absolute path of the web server via an invalid category ID cid parameter, which leaks the pathname in an error message...

CVE-2002-0446

The CVE-2002-0446 entry describes a path disclosure vulnerability in Black Tie Project (BTP) versions 0.4b through 0.5b. Specifically, categorie.php3 exposes the server’s absolute path to remote attackers via an invalid category ID (cid) parameter, leaking the pathname in an error message. Affect...

CVE-2002-0446

categorie.php3 in Black Tie Project BTP 0.4b through 0.5b allows remote attackers to determine the absolute path of the web server via an invalid category ID cid parameter, which leaks the pathname in an error message...

CVE-2002-0446: Undefined Security Weakness

categorie.php3 in Black Tie Project BTP 0.4b through 0.5b allows remote attackers to determine the absolute path of the web server via an invalid category ID cid parameter, which leaks the pathname in an error message...

[ARL02-A06] Black Tie Project System Information Path Disclosure Vulnerability

+/--------------- ALPER Research Labs -----/--------/+ +/--------------- Security Advisory ----/---------/+ +/--------------- ID: ARL02-A06 ---/----------/+ +/--------------- [email protected] --/-----------/+ Advisory Information -------------------- Name : Black Tie Project System Information...

Vulnerability in Black ICE Defender

The current version of BlackICE Defender 2.9.caq and 2.9.cap running on a Windows 2000 machine can be remotely crashed using a very basic ping flood. This has been tested with Divine Intervention 2 & 3, Sisoft Sandra Network LAN benchmark. Setting the packet size to about 10,000 bytes causes a Bl...

SapporoWorks Black JumboDog 2.6.42.6.5 - HTTP Proxy Buffer Overflow

SapporoWorks Black JumboDog 2.6.42.6.5 - HTTP Proxy Buffer Overflow // source: https://www.securityfocus.com/bid/3858/info Black JumboDog 2.6.4 and 2.6.5 HTTP proxy is vulnerable to an exploitable buffer overflow. The buffer overflow can be exploited by sending excessively long "expires",...

anonymous SMBwriteX DoS

a new concept had to be invented for this one: "the BSOD". a problem that causes an nt5 server's screen to go black. here is a harmless SMB request, prepared earlier from a netmon capture: SMB C write & X, FID = 0x1801, Write 0x73 at 0x00000000 SMB: C write & X, FID = 0x1801, Write 0x73 at...

Black Watch Labs Vulnerability Alert

Dear Security Professional, The following vulnerability: "Lotus Domino Server Misconfiguration – Documents Can Be Modified over the Web" is in the text of the message below and has just been posted to the Black Watch Labs Web site at http://www.perfectotech.com/blackwatchlabs/ Thank you, Black...

RFP2K05.txt

---------- Forwarded message ---------- Date: Thu, 18 May 2000 22:31:58 -0500 CDT From: rain forest puppy To: [email protected] Subject: RFP2K05: NetProwler vs. RFProwler ---/ RFP2K05 /----------------------------/ rfp.labs / wiretrip /--------- NetProwler vs. RFProwler Remote denial of...