EUVD-2008-4739

Malware in sbrugna...

EUVD-2008-5999

Malware in sbrugna...

BuzzyWall <= 1.3.1 (search.php search) SQL Injection Vulnerability

No description provided by source. BuzzyWall = 1.3.1 SQL Injection Vulnerability Author: !DoktOR! Date found: 31.08.08 Product: BuzzyWall Version: 1.3.1 Price: 40$ URL: www.buzzscripts.com Download script: http://nullstore.net/Reaper/4ptp1chdeais/BuzzyWall.v1.3.1.Nulled.rar.html Vulnerability...

BuzzyWall 1.3.2 - 'resolute.php' Information Disclosure

source: https://www.securityfocus.com/bid/50018/info BuzzScripts BuzzyWall is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data. An attacker can exploit this issue to download local files in the context of the webserver process. This may...

BuzzyWall 1.3.2 - resolute.php Information Disclosure

BuzzyWall 1.3.2 - resolute.php Information Disclosure source: https://www.securityfocus.com/bid/50018/info BuzzScripts BuzzyWall is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data. An attacker can exploit this issue to download local...

BuzzyWall 1.3.2 File Disclosure

BuzzyWall 1.3.2 resolute.php Local File Disclosure Exploit Found by cr4wl3r @hackb0x d0rk: no d0rk f0r kiddi0ts Script: http://sourceforge.net/projects/buzzywall/files/buzzywall/ err0r c0de resolute.php ?PHP header "Content-type: image/jpeg"; $img = $GET'img'; header'Content-Disposition:...

Sql injection

SQL injection vulnerability in search.php in BuzzyWall 1.3.1 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search parameter...

CVE-2008-6029

SQL injection vulnerability in search.php in BuzzyWall 1.3.1 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search parameter...

CVE-2008-6029

CVE-2008-6029 affects BuzzyWall (1.3.1 and earlier). The issue is an SQL injection in search.php when magic_quotes_gpc is disabled, allowing remote attackers to inject arbitrary SQL via the search parameter. Documented impact indicates partial confidentiality, integrity, and availability (CVSS ba...

CVE-2008-6029

SQL injection vulnerability in search.php in BuzzyWall 1.3.1 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search parameter...

buzzywall-xss.txt

--------------------------------------------------------- Portal Name: BuzzyWall Vendor : http://www.buzzywall.com Author : PouyaServer , [email protected] Vulnerability : XSS --------------------------------------------------------- XSS:...

CVE-2008-4759

Directory traversal vulnerability in download.php in BuzzyWall 1.3.1 allows remote attackers to read arbitrary local files via a .. dot dot in the id parameter...

Directory traversal

Directory traversal vulnerability in download.php in BuzzyWall 1.3.1 allows remote attackers to read arbitrary local files via a .. dot dot in the id parameter...

CVE-2008-4759

CVE-2008-4759 is a directory traversal vulnerability affecting BuzzyWall 1.3.1. The flaw occurs in download.php where the id parameter can be manipulated with .. to read arbitrary local files. This is a remote issue with a network attack vector and partial confidentiality impact, as described in ...

CVE-2008-4759

Directory traversal vulnerability in download.php in BuzzyWall 1.3.1 allows remote attackers to read arbitrary local files via a .. dot dot in the id parameter...

buzzywall-disclose.txt

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + BuzzyWall Remote File Disclosure Vulnerability + + + + Discovered by b3hz4d + + + + WwW.DeltaHacking.Net + + + + + + + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ AUTHOR : b3hz4d DATE : 25 oct...

BuzzyWall 1.3.1 (download id) Remote File Disclosure Vulnerability

No description provided by source. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + BuzzyWall Remote File Disclosure Vulnerability + + + + Discovered by b3hz4d + + + + WwW.DeltaHacking.Net + + + + + + +...

BuzzyWall 1.3.1 - 'id' Remote File Disclosure

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + BuzzyWall Remote File Disclosure Vulnerability + + + + Discovered by b3hz4d + + + + WwW.DeltaHacking.Net + + + + + + + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ AUTHOR : b3hz4d DATE : 25 oct...

BuzzyWall 1.3.1 - id Remote File Disclosure

BuzzyWall 1.3.1 - id Remote File Disclosure ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + BuzzyWall Remote File Disclosure Vulnerability + + + + Discovered by b3hz4d + + + + WwW.DeltaHacking.Net + + + + + + +...

BuzzyWall 1.3.1 (download id) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================== BuzzyWall 1.3.1 download id Remote File Disclosure Vulnerability ==================================================================...