4077 matches found
CVE-2006-5508: Undefined Security Weakness
Multiple SQL injection vulnerabilities in addentry.php in WoltLab Burning Book 1.1.2 allow remote attackers to execute arbitrary SQL commands via 1 the n parameter and 2 the User-Agent HTTP header...
PHP-Nuke Book Catalog模块upload.php任意文件上传漏洞
PHP-Nuke的Book Catalog模块是基于Web的软件，允许用户归档整理电子图书。 PHP-Nuke在处理文件上传时存在漏洞，远程攻击者可以利用Book Catalog模块的upload.php文件中的输入验证错误上传任意文件。 SAP Basis Community Book Catalog 1.0 厂商补丁： SAP Basis Community ------------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
CVE-2006-5509: Undefined Security Weakness
Eval injection vulnerability in addentry.php in WoltLab Burning Book 1.1.2 allows remote attackers to execute arbitrary PHP code via crafted POST requests that store PHP code in a database that is later processed by eval, as demonstrated using SQL injection via the n parameter...
WoltLab-bb-1.1.2.txt
Hello bugtraq, ShAnKaR sec at shankar.antichat.ru reports multiple vulnerabilities in WoltLab Burning Book. Original message in Russian is available from http://www.security.nnov.ru/Odocument711.html Short translation: Author: ShAnKaR sec at shankar.antichat.ru Vendor: woltlab.de Tested version:...
[ECHO_ADV_46$2006] P-Book <= 1.17 (pb_lang) Remote File Inclusion
ECHOADV56$2006 ------------------------------------------------------------------------ ----- ECHOADV46$2006 P-Book = 1.17 pblang Remote File Inclusion ------------------------------------------------------------------------ ------ Author : Ahmad Maulana a.k.a Matdhule Date Found : October, 18th...
многочисленные уязвимости в WoltLab Burning Book <=1.1.2
сайт прозводителя: woltlab.de уязвима версия 1.1.2 и возможно более раннии уязвимость носит критический характер файл addentry.php движка содержит код: whilelist$key,$val=each$POST $$key=$val; данные переданные методом POST не проверяются, в результате чего имеется возможность подменить глобальны...
WoltLab Burning Book 1.1.2 - SQL Injection
!/usr/bin/perl woltlab.de burning book new; $ua-post$ARGV0.'/addentry.php',regimage=0,send='send',name=1,message=1, n=$ARGV1.'templates templateid,templatename,template VALUES...
WoltLab Burning Book <= 1.1.2 Remote SQL Injection Exploit PoC
Exploit for unknown platform in category web applications ============================================================== WoltLab Burning Book new; $ua-post$ARGV0.'/addentry.php',regimage=0,send='send',name=1,message=1, n=$ARGV1.'templates templateid,templatename,template VALUES...
WoltLab Burning Book 1.1.2 - SQL Injection
WoltLab Burning Book 1.1.2 - SQL Injection !/usr/bin/perl woltlab.de burning book new; $ua-post$ARGV0.'/addentry.php',regimage=0,send='send',name=1,message=1, n=$ARGV1.'templates templateid,templatename,template VALUES...
WoltLab Burning Book <= 1.1.2 Remote SQL Injection Exploit PoC
No description provided by source. !/usr/bin/perl woltlab.de burning book =1.1.2 SQL and PHP injection PoC use /index.php?q=phpinfo;exit; ShAnKaR secAshankar.antichat.ru http://antichat.ru/ use LWP; die"use ./burn-book.pl http://localhost/wbbook/ 1number book db, default 1\n" if !$ARGV0;$ARGV1=''...
CVE-2006-4680: Undefined Security Weakness
The Remote UI in Canon imageRUNNER includes usernames and passwords when exporting an address book, which allows context-dependent attackers to obtain sensitive information...
CVE-2006-4654
Format string vulnerability in Easy Address Book Web Server 1.2 allows remote attackers to cause a denial of service crash or "compromise the server" via encoded format string specifiers in the query string...
CVE-2006-4654
Format string vulnerability in Easy Address Book Web Server 1.2 allows remote attackers to cause a denial of service crash or "compromise the server" via encoded format string specifiers in the query string...
CVE-2006-4654: Undefined Security Weakness
Format string vulnerability in Easy Address Book Web Server 1.2 allows remote attackers to cause a denial of service crash or "compromise the server" via encoded format string specifiers in the query string...
CVE-2006-4654
CVE-2006-4654 affects Easy Address Book Web Server 1.2. The issue is a remote format-string vulnerability in the query string, allowing an attacker to cause a crash (DoS) or potentially compromise the server. The vulnerability is documented in multiple sources (NVD/NVD listing, CVE listing); expl...
eabweb.txt
Easy Address Book Web Server Format String Vulnerability Software: Easy Address Book Web Server Version: 1.2 Website: http://www.efssoft.com/ Description: Easy Address Book Web Server is a Web Address Book software that allows users to view, search, add, edit, or administer address books easily...
Canon ImageRunner reveals SMB, IPX, and FTP username/passwords
The Canon ImageRunner multi-function device’s Remote UI web interface software will reveal username and password pairs contained in address book entries when the address book is exported. These address book entries are used for scanning to SMB, FTP, or IPX shares. In addition, passwords for...
PHP-Nuke Book Catalog Module 1.0 - 'upload.php' Arbitrary File Upload
source: https://www.securityfocus.com/bid/19890/info The Book Catalog module for PHP-Nuke is prone to a vulnerability that lets attackers upload arbitrary files. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible...
PHP-Nuke Book Catalog Module 1.0 - upload.php Arbitrary File Upload
PHP-Nuke Book Catalog Module 1.0 - upload.php Arbitrary File Upload source: https://www.securityfocus.com/bid/19890/info The Book Catalog module for PHP-Nuke is prone to a vulnerability that lets attackers upload arbitrary files. Exploiting this issue may allow an attacker to compromise the...
Easy Address Book Web Server Format String Vulnerability
Easy Address Book Web Server Format String Vulnerability Software: Easy Address Book Web Server Version: 1.2 Website: http://www.efssoft.com/ Description: Easy Address Book Web Server is a Web Address Book software that allows users to view, search, add, edit, or administer address books easily...