1113 matches found
Design/Logic Flaw
CAT-QuickHeal 10.00 and possibly 9.50, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg...
CVE-2008-5524
CAT-QuickHeal 10.00 and possibly 9.50, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg...
CVE-2008-5524
The CVE-2008-5524 entry describes a bypass of malware detection in HTML documents caused by an MZ header placement and altered file extension/filename (no extension, .txt, or .jpg) when using Internet Explorer 6/7. Affected product in the initial entry is CAT-QuickHeal 10.00 (and possibly 9.50); ...
solaris/x86 setuid0, execve/bin/cat, /etc/shadow, exit0 59 bytes
solaris/x86 setuid0, execve/bin/cat, /etc/shadow, exit0 59 bytes. Shellcode exploit for solarisx86 platform / ; sm4x 2008 ; /bin/cat /etc/shadow ; 59 bytes ; SunOS sol01 5.11 snv86 i86pc i386 i86pc Solaris ; port to SunOS to pwn a b0x - thank god for that default unix CRYPTDEFAULT!!!! ; this is...
solaris/x86 setuid(0), execve(/bin/cat, /etc/shadow), exit(0) 59 bytes
Exploit for solaris/x86 platform in category shellcode ====================================================================== solaris/x86 setuid0, execve/bin/cat, /etc/shadow, exit0 59 bytes ====================================================================== / ; sm4x 2008 ; /bin/cat /etc/shado...
solaris/x86 setuid(0) execve(/bin/cat /etc/shadow) exit(0) 59 bytes
No description provided by source. / ; sm4x 2008 ; /bin/cat /etc/shadow ; 59 bytes ; SunOS sol01 5.11 snv86 i86pc i386 i86pc Solaris ; port to SunOS to pwn a b0x - thank god for that default unix CRYPTDEFAULT!!!! ; this is what happens when ur work takes away root pirv on a SunOS box :-/ global...
Unfixed XSS vulnerability at www.amalgama.cat
Security researcher xylitol, has submitted on 11/07/2008 a cross-site-scripting XSS vulnerability affecting www.amalgama.cat, which at the time of submission ranked 8683932 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/07/2008. It is...
Sql injection
SQL injection vulnerability in prod.php in Maran PHP Shop allows remote attackers to execute arbitrary SQL commands via the cat parameter, a different vector than CVE-2008-4880...
Maran PHP Shop (prod.php cat) SQL Injection Vulnerability
No description provided by source. Maran PHP Shop prod.php cat SQL Injection Vulnerability url: http://www.maran.pamil-visions.com/maranshop.php Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose...
Maran PHP Shop (prod.php cat) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================= Maran PHP Shop prod.php cat SQL Injection Vulnerability ========================================================= Maran PHP Shop prod.php cat SQL Injection Vulnerability url:...
SFS EZ Webring - 'cat' SQL Injection
SFS EZ Webring cat Remote SQL Injection Vulnerability =============================================================== ---------------------------------------------------------------- script : SFS EZ Webring Risk : High ---------------------------------------------------------------- Discovered by...
Sepal SPBOARD 4.5 (board.cgi) Remote Command Exec Vulnerability
No description provided by source. | | | \ \ \ / / / \ / | / | / | | | | | | \ V / / \ | | | | | | | | | | | / \ | || | | | | | || || \ || // \ | | | Sepal's SPBOARD v4.5 board.cgi Remote Command Execution Vulnerability Script : : POC : |---...
Sql injection
SQL injection vulnerability in the Showroom Joomlearn LMS comlms component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the cat parameter in a showTests task...
CVE-2008-4777
SQL injection vulnerability in the Showroom Joomlearn LMS comlms component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the cat parameter in a showTests task...
DEBIAN-CVE-2008-4769
Directory traversal vulnerability in the getcategorytemplate function in wp-includes/theme.php in WordPress 2.3.3 and earlier, and 2.5, allows remote attackers to include and possibly execute arbitrary PHP files via the cat parameter in index.php. NOTE: some of these details are obtained from thi...
YDC - cat SQL Injection
YDC - cat SQL Injection || | | YDC cat Remote SQL Injection Vulnerability | | |-------------------- Hussin X -------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | script : http://www.ydc.ir/ | | DorK : "Powered by YDC" || Exploit:...
CVE-2008-4570
SQL injection vulnerability in index.php in Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the cat parameter...
CVE-2008-4570
SQL injection vulnerability in index.php in Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the cat parameter...