CVE-2008-5524

CAT-QuickHeal 10.00 and possibly 9.50, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg...

CVE-2008-5524

The CVE-2008-5524 entry describes a bypass of malware detection in HTML documents caused by an MZ header placement and altered file extension/filename (no extension, .txt, or .jpg) when using Internet Explorer 6/7. Affected product in the initial entry is CAT-QuickHeal 10.00 (and possibly 9.50); ...

solaris/x86 setuid(0) execve(/bin/cat /etc/shadow) exit(0) 59 bytes

No description provided by source. / ; sm4x 2008 ; /bin/cat /etc/shadow ; 59 bytes ; SunOS sol01 5.11 snv86 i86pc i386 i86pc Solaris ; port to SunOS to pwn a b0x - thank god for that default unix CRYPTDEFAULT!!!! ; this is what happens when ur work takes away root pirv on a SunOS box :-/ global...

solaris/x86 setuid0, execve/bin/cat, /etc/shadow, exit0 59 bytes

solaris/x86 setuid0, execve/bin/cat, /etc/shadow, exit0 59 bytes. Shellcode exploit for solarisx86 platform / ; sm4x 2008 ; /bin/cat /etc/shadow ; 59 bytes ; SunOS sol01 5.11 snv86 i86pc i386 i86pc Solaris ; port to SunOS to pwn a b0x - thank god for that default unix CRYPTDEFAULT!!!! ; this is...

solaris/x86 setuid(0), execve(/bin/cat, /etc/shadow), exit(0) 59 bytes

Exploit for solaris/x86 platform in category shellcode ====================================================================== solaris/x86 setuid0, execve/bin/cat, /etc/shadow, exit0 59 bytes ====================================================================== / ; sm4x 2008 ; /bin/cat /etc/shado...

Unfixed XSS vulnerability at www.amalgama.cat

Security researcher xylitol, has submitted on 11/07/2008 a cross-site-scripting XSS vulnerability affecting www.amalgama.cat, which at the time of submission ranked 8683932 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/07/2008. It is...

Sql injection

SQL injection vulnerability in prod.php in Maran PHP Shop allows remote attackers to execute arbitrary SQL commands via the cat parameter, a different vector than CVE-2008-4880...

Maran PHP Shop (prod.php cat) SQL Injection Vulnerability

No description provided by source. Maran PHP Shop prod.php cat SQL Injection Vulnerability url: http://www.maran.pamil-visions.com/maranshop.php Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose...

Maran PHP Shop (prod.php cat) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= Maran PHP Shop prod.php cat SQL Injection Vulnerability ========================================================= Maran PHP Shop prod.php cat SQL Injection Vulnerability url:...

SFS EZ Webring - 'cat' SQL Injection

SFS EZ Webring cat Remote SQL Injection Vulnerability =============================================================== ---------------------------------------------------------------- script : SFS EZ Webring Risk : High ---------------------------------------------------------------- Discovered by...

Sepal SPBOARD 4.5 (board.cgi) Remote Command Exec Vulnerability

No description provided by source. | | | \ \ \ / / / \ / | / | / | | | | | | \ V / / \ | | | | | | | | | | | / \ | || | | | | | || || \ || // \ | | | Sepal's SPBOARD v4.5 board.cgi Remote Command Execution Vulnerability Script : : POC : |---...

Sql injection

SQL injection vulnerability in the Showroom Joomlearn LMS comlms component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the cat parameter in a showTests task...

CVE-2008-4777

SQL injection vulnerability in the Showroom Joomlearn LMS comlms component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the cat parameter in a showTests task...

DEBIAN-CVE-2008-4769

Directory traversal vulnerability in the getcategorytemplate function in wp-includes/theme.php in WordPress 2.3.3 and earlier, and 2.5, allows remote attackers to include and possibly execute arbitrary PHP files via the cat parameter in index.php. NOTE: some of these details are obtained from thi...

YDC - cat SQL Injection

YDC - cat SQL Injection || | | YDC cat Remote SQL Injection Vulnerability | | |-------------------- Hussin X -------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | script : http://www.ydc.ir/ | | DorK : "Powered by YDC" || Exploit:...

CVE-2008-4570

SQL injection vulnerability in index.php in Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the cat parameter...

Sql injection

SQL injection vulnerability in index.php in Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-4570

SQL injection vulnerability in index.php in Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-4570

CVE-2008-4570 describes an SQL injection in Real Estate Classifieds: index.php vulnerable via the cat parameter, allowing remote SQL commands. Affected software/component: Real Estate Classifieds (index.php). Root cause: improper input handling enabling injected SQL. Impact (per NVD): partial con...

CVE-2008-4570

SQL injection vulnerability in index.php in Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the cat parameter...