PT-2007-1383 · Smarty · Smarty

Name of the Vulnerable Software and Affected Versions: Smarty version 2.6.9 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter in the libs/Smarty.class.php file. This is a PHP remote file inclusion issue. Note that the original...

BrowseDialog Class (ccrpbds6.dll) Multiple Methods DoS Exploit

No description provided by source. ----------------------------------------------------------------------------- BrowseDialog Class ccrpbds6.dll multiple methods Denial of Service author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org Soundtrack: "Zeta Reticoli"...

BrowseDialog Class (ccrpbds6.dll) Multiple Methods DoS Exploit

Exploit for unknown platform in category dos / poc ============================================================== BrowseDialog Class ccrpbds6.dll Multiple Methods DoS Exploit ==============================================================...

BrowseDialog Class - 'ccrpbds6.dll' Multiple Denial of Service Vulnerabilities

----------------------------------------------------------------------------- BrowseDialog Class ccrpbds6.dll multiple methods Denial of Service author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org Soundtrack: "Zeta Reticoli" Meganoidi Tested on Windows XP Profession...

SUSE-SA:2006:063: Qt

The remote host is missing the patch for the advisory SUSE-SA:2006:063 Qt. Multiple integer overflows have been found in image processing functions within the Qt class library, used for instance by the web browser 'konqueror' and its rendering engine 'khtml'. These problems could potentially lead...

Cross site scripting

Cross-site scripting XSS vulnerability in HLstats before 1.35 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the search class. NOTE: it is possible that this issue overlaps CVE-2006-4543.3 or CVE-2006-4454...

CVE-2007-0840

Cross-site scripting XSS vulnerability in HLstats before 1.35 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the search class. NOTE: it is possible that this issue overlaps CVE-2006-4543.3 or CVE-2006-4454...

PT-2007-1254 · Centipaid · Centipaid

Name of the Vulnerable Software and Affected Versions: CentiPaid version 1.4.3 Description: The issue allows remote attackers to execute arbitrary code via a URL in the class pwd parameter in the centipaid class.php file. However, it has been disputed by multiple parties, who claim that the $clas...

Maian Recipe 1.0 (path_to_folder) Remote File Include Vulnerability

Found by Denven Script: http://www.maianscriptworld.co.uk/freestuff1975recipe.html Google Dork: "Powered by Maian Recipe v1.0" ERROR: classes/classmail.inc.php : include$pathtofolder.'classes/class.phpmailer.php'; RFI: http://www.SITE.com/path/classes/classmail.inc.php?pathtofolder=shell...

Categories hierarchy phpBB Mod 2.1.2 - 'phpbb_root_path' Remote File Inclusion

C xoron Name: Categories hierarchy v2.1.2 phpbbrootpath Remote File Include Exploit Script name: Ptifo mod-CH212installed Author: xoron Exploit coded by xoron Download: http://sourceforge.net/project/showfiles.php?groupid=125710 xoron.biz - xoron.info Thanx: str0ke, kacper, k1tk4t, SHiKA, can bjo...

ARCserve Backup for Laptops & Desktops Server Detection

BrightStor ARCserve Backup for Laptops & Desktops Server / BrightStor Mobile Backup Server, an enterprise class backup solution for remote and mobile Windows-based PCs, is installed on the remote host. And the service listening on this port is used by clients to backup and restore files...

ARCserve Backup for Laptops & Desktops Server Admin Service Detection

BrightStor ARCserve Backup for Laptops & Desktops Server formerly BrightStor Mobile Backup Server, an enterprise class backup solution for remote and mobile Windows-based PCs, is installed on the remote host. And the service listening on this port is used by the application's Server Explorer to...

CVE-2007-0412

BEA WebLogic Server 6.1 through 6.1 SP7, 7.0 through 7.0 SP7, and 8.1 through 8.1 SP5 allows remote attackers to read arbitrary files inside the class-path property via .ear or exploded .ear files that use the manifest class-path property to point to utility jar files...

Design/Logic Flaw

BEA WebLogic Server 6.1 through 6.1 SP7, 7.0 through 7.0 SP7, and 8.1 through 8.1 SP5 allows remote attackers to read arbitrary files inside the class-path property via .ear or exploded .ear files that use the manifest class-path property to point to utility jar files...

Authentication flaw

The LazyUser class in the AuthenticationMiddleware for Django 0.95 does not properly cache the user name across requests, which allows remote authenticated users to gain the privileges of a different user...

DEBIAN-CVE-2007-0405

The LazyUser class in the AuthenticationMiddleware for Django 0.95 does not properly cache the user name across requests, which allows remote authenticated users to gain the privileges of a different user...

CVE-2007-0405

CVE-2007-0405 affects Django 0.95: the LazyUser class in AuthenticationMiddleware does not properly cache the username across requests, allowing remote authenticated users to gain the privileges of a different user. Impact and exploit details are not provided beyond this description in the suppli...

CVE-2007-0412

BEA WebLogic Server 6.1 through 6.1 SP7, 7.0 through 7.0 SP7, and 8.1 through 8.1 SP5 allows remote attackers to read arbitrary files inside the class-path property via .ear or exploded .ear files that use the manifest class-path property to point to utility jar files...

webSPELL 4.01.02 - 'gallery.php' Blind SQL Injection

allowredirection1; $xpl-cookiejar1; function istrue$xpl,$host,$path,$prefix,$gid,$pid,$uid,$i,$h $xpl-get"http://".$host.$path."gallery.php?action=window&galleryID=".$gid."&picID=".$pid."%20AND%20MIDSELECT%20password%20FROM%20".$prefix."user%20WHERE%20userID=".$uid.",".$i.",1=CHAR".$h."";...

BrowseDialog Class (ccrpbds6.dll) Internet Explorer Denial of Service

No description provided by source. !-- ----------------------------------------------------------------------------------------------------------- BrowseDialog Class ccrpbds6.dll Internet Explorer Denial of Service author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org...