CVE-2008-6287

Multiple PHP remote file inclusion vulnerabilities in Broadcast Machine 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the baseDir parameter to 1 MySQLController.php, 2 SQLController.php, 3 SetupController.php, 4 VideoController.php, and 5 ViewController.php in controllers/...

CVE-2008-6287

Multiple PHP remote file inclusion vulnerabilities in Broadcast Machine 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the baseDir parameter to 1 MySQLController.php, 2 SQLController.php, 3 SetupController.php, 4 VideoController.php, and 5 ViewController.php in controllers/...

CVE-2008-6287

Broadcast Machine 0.1 is vulnerable to multiple PHP remote file inclusion (RFI) flaws in controllers/. The baseDir parameter in (1) MySQLController.php, (2) SQLController.php, (3) SetupController.php, (4) VideoController.php, and (5) ViewController.php can be abused to execute arbitrary PHP code ...

BlazeVideo HDTV Player <= 3.5 PLF Playlist File Remote Overflow Exploit

Exploit for unknown platform in category local exploits ======================================================================= BlazeVideo HDTV Player = 3.5 PLF Playlist File Remote Overflow Exploit ======================================================================= !/usr/bin/python Title:...

NCTVideoStudio ActiveX DLLs 1.6 Insecure Method File Creation Exploit

No description provided by source. HTML b NCTVideoStudio ActiveX DLLs Version 1.6 Insecure Method File Creation /b b br/br/ Author : Mountassif Moad a.k.a Stack br/ br/ br/ b/ RegKey Safe for Script: Falsebr/ RegKey Safe for Init: Falsebr/ Implements IObjectSafety: Truebr/ IDisp Safe: Safe for...

NCTVideoStudio ActiveX DLLs 1.6 Insecure Method File Creation Exploit

Exploit for unknown platform in category remote exploits ===================================================================== NCTVideoStudio ActiveX DLLs 1.6 Insecure Method File Creation Exploit ===================================================================== NCTVideoStudio ActiveX DLLs...

CVE-2008-5882

SQL injection vulnerability in login.asp in Citrix Application Gateway - Broadcast Server BCS before 6.1, as used by Avaya AG250 - Broadcast Server before 2.0 and possibly other products, allows remote attackers to execute arbitrary SQL commands via the txtUID parameter...

Sql injection

SQL injection vulnerability in login.asp in Citrix Application Gateway - Broadcast Server BCS before 6.1, as used by Avaya AG250 - Broadcast Server before 2.0 and possibly other products, allows remote attackers to execute arbitrary SQL commands via the txtUID parameter...

CVE-2008-5882

SQL injection vulnerability in login.asp in Citrix Application Gateway - Broadcast Server BCS before 6.1, as used by Avaya AG250 - Broadcast Server before 2.0 and possibly other products, allows remote attackers to execute arbitrary SQL commands via the txtUID parameter...

Citrix Broadcast Server login.asp页面SQL注入漏洞

BUGTRAQ ID: 32832 Citrix Broadcast Server是Citrix应用网关中的一个组件，能够以文本、图形和音频信息方式向IP电话交付诸如紧急情况、IT和天气报警等高优先级消息。 Citrix Broadcast Server的管理登录页面存在SQL注入漏洞，远程攻击者可以通过带有txtUID HTTP POST参数的恶意请求来利用这个漏洞非授权访问Web接口或从数据库获得数据。 Citrix Broadcast Server 6.0 厂商补丁： Citrix ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Citrix Broadcast Server SQL injection

login.asp SQL injection...

DDIVRT-2008-16 Citrix Broadcast Server 6.0 login.asp SQL Injection --- Update for BID 32832

Title ----- DDIVRT-2008-16 Citrix Broadcast Server 6.0 login.asp SQL Injection Severity -------- High Date Discovered --------------- October 14, 2008 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: Corey LeBleu and r@b13$ Vulnerability Description...

broadcast-rfi.txt

================================================================================================================= o Broadcast Machine 0.1 Multiple Remote File Inclusion Vulnerability Software : Broadcast Machine version 0.1 Vendor : http://code.google.com/p/broadcastmachine/ View Source :...

Broadcast Machine 0.1 Multiple Remote File Inclusion Vulnerabilities

No description provided by source. ================================================================================================================= o Broadcast Machine 0.1 Multiple Remote File Inclusion Vulnerability Software : Broadcast Machine version 0.1 Vendor :...

Broadcast Machine 0.1 Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ==================================================================== Broadcast Machine 0.1 Multiple Remote File Inclusion Vulnerabilities ====================================================================...

Broadcast Machine 0.1 - Multiple Remote File Inclusions

Broadcast Machine 0.1 - Multiple Remote File Inclusions ================================================================================================================= o Broadcast Machine 0.1 Multiple Remote File Inclusion Vulnerability Software : Broadcast Machine version 0.1 Vendor :...

Broadcast Machine 0.1 - Multiple Remote File Inclusions

================================================================================================================= o Broadcast Machine 0.1 Multiple Remote File Inclusion Vulnerability Software : Broadcast Machine version 0.1 Vendor : http://code.google.com/p/broadcastmachine/ View Source :...

Sybase ASA Ping

The remote Sybase SQL Anywhere / Adaptive Server Anywhere database is configured to listen for client connection broadcasts, which allows an attacker to see the name and port that the Sybase SQL Anywhere / Adaptive Server Anywhere server is running on. SPDX-FileCopyrightText: 2008 David Lodge Som...

Chatman 1.5.1 RC1 Broadcast Denial of Service Exploit

No description provided by source. ////////////// chatmanx.c ///////////// / by Luigi Auriemma / include stdio.h include stdlib.h include string.h ifdef WIN32 include winsock.h include "winerr.h" define close closesocket define ONESEC 1000 define TWAIT 30000 DWORD tid1; HANDLE thandle; define...

SQL Anywhere Broadcast Repeater Detection

The remote service is a SQL Anywhere Broadcast Repeater, which allows SQL Anywhere clients to find SQL Anywhere database servers running on other subnets and through firewalls. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid31717; scriptversion"1.8";...