EUVD-2008-5999

Malware in sbrugna...

EUVD-2008-4739

Malware in sbrugna...

BuzzyWall <= 1.3.1 (search.php search) SQL Injection Vulnerability

No description provided by source. BuzzyWall = 1.3.1 SQL Injection Vulnerability Author: !DoktOR! Date found: 31.08.08 Product: BuzzyWall Version: 1.3.1 Price: 40$ URL: www.buzzscripts.com Download script: http://nullstore.net/Reaper/4ptp1chdeais/BuzzyWall.v1.3.1.Nulled.rar.html Vulnerability...

BuzzyWall 1.3.2 File Disclosure

BuzzyWall 1.3.2 resolute.php Local File Disclosure Exploit Found by cr4wl3r @hackb0x d0rk: no d0rk f0r kiddi0ts Script: http://sourceforge.net/projects/buzzywall/files/buzzywall/ err0r c0de resolute.php ?PHP header "Content-type: image/jpeg"; $img = $GET'img'; header'Content-Disposition:...

BuzzyWall 1.3.2 - resolute.php Information Disclosure

BuzzyWall 1.3.2 - resolute.php Information Disclosure source: https://www.securityfocus.com/bid/50018/info BuzzScripts BuzzyWall is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data. An attacker can exploit this issue to download local...

BuzzyWall 1.3.2 - 'resolute.php' Information Disclosure

source: https://www.securityfocus.com/bid/50018/info BuzzScripts BuzzyWall is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data. An attacker can exploit this issue to download local files in the context of the webserver process. This may...

Sql injection

SQL injection vulnerability in search.php in BuzzyWall 1.3.1 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search parameter...

CVE-2008-6029

SQL injection vulnerability in search.php in BuzzyWall 1.3.1 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search parameter...

CVE-2008-6029

CVE-2008-6029 affects BuzzyWall (1.3.1 and earlier). The issue is an SQL injection in search.php when magic_quotes_gpc is disabled, allowing remote attackers to inject arbitrary SQL via the search parameter. Documented impact indicates partial confidentiality, integrity, and availability (CVSS ba...

CVE-2008-6029

SQL injection vulnerability in search.php in BuzzyWall 1.3.1 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search parameter...

CVE-2008-6029: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in search.php in BuzzyWall 1.3.1 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search parameter...

buzzywall-xss.txt

--------------------------------------------------------- Portal Name: BuzzyWall Vendor : http://www.buzzywall.com Author : PouyaServer , [email protected] Vulnerability : XSS --------------------------------------------------------- XSS:...

CVE-2008-4759

Directory traversal vulnerability in download.php in BuzzyWall 1.3.1 allows remote attackers to read arbitrary local files via a .. dot dot in the id parameter...

Directory traversal

Directory traversal vulnerability in download.php in BuzzyWall 1.3.1 allows remote attackers to read arbitrary local files via a .. dot dot in the id parameter...

CVE-2008-4759

CVE-2008-4759 is a directory traversal vulnerability affecting BuzzyWall 1.3.1. The flaw occurs in download.php where the id parameter can be manipulated with .. to read arbitrary local files. This is a remote issue with a network attack vector and partial confidentiality impact, as described in ...

CVE-2008-4759: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in download.php in BuzzyWall 1.3.1 allows remote attackers to read arbitrary local files via a .. dot dot in the id parameter...

CVE-2008-4759

Directory traversal vulnerability in download.php in BuzzyWall 1.3.1 allows remote attackers to read arbitrary local files via a .. dot dot in the id parameter...

buzzywall-disclose.txt

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + BuzzyWall Remote File Disclosure Vulnerability + + + + Discovered by b3hz4d + + + + WwW.DeltaHacking.Net + + + + + + + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ AUTHOR : b3hz4d DATE : 25 oct...

BuzzyWall 1.3.1 (download id) Remote File Disclosure Vulnerability

No description provided by source. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + BuzzyWall Remote File Disclosure Vulnerability + + + + Discovered by b3hz4d + + + + WwW.DeltaHacking.Net + + + + + + +...

BuzzyWall 1.3.1 (download id) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================== BuzzyWall 1.3.1 download id Remote File Disclosure Vulnerability ==================================================================...