3428 matches found
CVE-2006-5508
The CVE-2006-5508 entry relates to WoltLab Burning Book 1.1.2, where multiple SQL injection vulnerabilities exist in addentry.php. The root cause is improper handling of input in the addentry functionality, allowing attackers to craft requests via the n parameter and the User-Agent HTTP header to...
PHP-Nuke Book Catalog模块upload.php任意文件上传漏洞
PHP-Nuke的Book Catalog模块是基于Web的软件，允许用户归档整理电子图书。 PHP-Nuke在处理文件上传时存在漏洞，远程攻击者可以利用Book Catalog模块的upload.php文件中的输入验证错误上传任意文件。 SAP Basis Community Book Catalog 1.0 厂商补丁： SAP Basis Community ------------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
WoltLab-bb-1.1.2.txt
Hello bugtraq, ShAnKaR sec at shankar.antichat.ru reports multiple vulnerabilities in WoltLab Burning Book. Original message in Russian is available from http://www.security.nnov.ru/Odocument711.html Short translation: Author: ShAnKaR sec at shankar.antichat.ru Vendor: woltlab.de Tested version:...
[ECHO_ADV_46$2006] P-Book <= 1.17 (pb_lang) Remote File Inclusion
ECHOADV56$2006 ------------------------------------------------------------------------ ----- ECHOADV46$2006 P-Book = 1.17 pblang Remote File Inclusion ------------------------------------------------------------------------ ------ Author : Ahmad Maulana a.k.a Matdhule Date Found : October, 18th...
WoltLab Burning Book <= 1.1.2 Remote SQL Injection Exploit PoC
Exploit for unknown platform in category web applications ============================================================== WoltLab Burning Book new; $ua-post$ARGV0.'/addentry.php',regimage=0,send='send',name=1,message=1, n=$ARGV1.'templates templateid,templatename,template VALUES...
WoltLab Burning Book <= 1.1.2 Remote SQL Injection Exploit PoC
No description provided by source. !/usr/bin/perl woltlab.de burning book =1.1.2 SQL and PHP injection PoC use /index.php?q=phpinfo;exit; ShAnKaR secAshankar.antichat.ru http://antichat.ru/ use LWP; die"use ./burn-book.pl http://localhost/wbbook/ 1number book db, default 1\n" if !$ARGV0;$ARGV1=''...
многочисленные уязвимости в WoltLab Burning Book <=1.1.2
сайт прозводителя: woltlab.de уязвима версия 1.1.2 и возможно более раннии уязвимость носит критический характер файл addentry.php движка содержит код: whilelist$key,$val=each$POST $$key=$val; данные переданные методом POST не проверяются, в результате чего имеется возможность подменить глобальны...
WoltLab Burning Book 1.1.2 - SQL Injection
WoltLab Burning Book 1.1.2 - SQL Injection !/usr/bin/perl woltlab.de burning book new; $ua-post$ARGV0.'/addentry.php',regimage=0,send='send',name=1,message=1, n=$ARGV1.'templates templateid,templatename,template VALUES...
WoltLab Burning Book 1.1.2 - SQL Injection
!/usr/bin/perl woltlab.de burning book new; $ua-post$ARGV0.'/addentry.php',regimage=0,send='send',name=1,message=1, n=$ARGV1.'templates templateid,templatename,template VALUES...
CVE-2006-4654
Format string vulnerability in Easy Address Book Web Server 1.2 allows remote attackers to cause a denial of service crash or "compromise the server" via encoded format string specifiers in the query string...
CVE-2006-4654
CVE-2006-4654 affects Easy Address Book Web Server 1.2. The issue is a remote format-string vulnerability in the query string, allowing an attacker to cause a crash (DoS) or potentially compromise the server. The vulnerability is documented in multiple sources (NVD/NVD listing, CVE listing); expl...
CVE-2006-4654
Format string vulnerability in Easy Address Book Web Server 1.2 allows remote attackers to cause a denial of service crash or "compromise the server" via encoded format string specifiers in the query string...
Canon ImageRunner reveals SMB, IPX, and FTP username/passwords
The Canon ImageRunner multi-function device’s Remote UI web interface software will reveal username and password pairs contained in address book entries when the address book is exported. These address book entries are used for scanning to SMB, FTP, or IPX shares. In addition, passwords for...
eabweb.txt
Easy Address Book Web Server Format String Vulnerability Software: Easy Address Book Web Server Version: 1.2 Website: http://www.efssoft.com/ Description: Easy Address Book Web Server is a Web Address Book software that allows users to view, search, add, edit, or administer address books easily...
PHP-Nuke Book Catalog Module 1.0 - 'upload.php' Arbitrary File Upload
source: https://www.securityfocus.com/bid/19890/info The Book Catalog module for PHP-Nuke is prone to a vulnerability that lets attackers upload arbitrary files. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible...
PHP-Nuke Book Catalog Module 1.0 - upload.php Arbitrary File Upload
PHP-Nuke Book Catalog Module 1.0 - upload.php Arbitrary File Upload source: https://www.securityfocus.com/bid/19890/info The Book Catalog module for PHP-Nuke is prone to a vulnerability that lets attackers upload arbitrary files. Exploiting this issue may allow an attacker to compromise the...
Easy Address Book Web Server Format String Vulnerability
Easy Address Book Web Server Format String Vulnerability Software: Easy Address Book Web Server Version: 1.2 Website: http://www.efssoft.com/ Description: Easy Address Book Web Server is a Web Address Book software that allows users to view, search, add, edit, or administer address books easily...
Easy Address Book Web Server format string vulnerability
Format string vulnerability on URI request parsing...
Easy Address Book Web Server 1.2 - Remote Format String
Easy Address Book Web Server 1.2 - Remote Format String source: https://www.securityfocus.com/bid/19842/info Easy Address Book Web Server is prone to a remote format-string vulnerability because the application fails to properly sanitize user-supplied data before including it in the...
CVE-2006-4056
Multiple SQL injection vulnerabilities in the authentication process in katzlbt a The Address Book 1.04e and earlier and b The Address Book Reloaded before 2.0-rc4 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters. NOTE: portions of these details...