2916 matches found
CVE-2009-2157
Multiple SQL injection vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to execute arbitrary SQL commands via 1 the origmsg parameter to account-inbox.php; the categ parameter to 2 delreq.php and 3 admin-delreq.php; 4 the choice parameter to index.php; 5 the id...
CVE-2009-2156
Multiple cross-site scripting XSS vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to inject arbitrary web script or HTML via 1 the Title field to requests.php, related to viewrequests.php; and 2 the Torrent Name field to torrents-upload.php, related to the logging o...
CVE-2009-2156
CVE-2009-2156 affects TorrentTrader Classic 1.09, with multiple XSS vulnerabilities that allow remote authenticated users to inject arbitrary scripts via numerous parameters and fields (e.g., Title in requests.php; Torrent Name in torrents-upload.php; ttversion, SITENAME, CURUSER[username], today...
PT-2009-4610 · Torrenttrader · Torrenttrader Classic
Name of the Vulnerable Software and Affected Versions: TorrentTrader Classic version 1.09 Description: The issue allows remote attackers to obtain a password via a brute-force attack because the account-recover.php file chooses random passwords from an insufficiently large set. Recommendations: F...
Nokia 6212 classic URI spoofing and DoS advisory (original date: Dec. 2008)
Vulnerability Report --- BEGIN ADVISORY --- Manufacturer: Nokia www.nokia.com Device: Nokia 6212 Classic Firmware: V 05.16, 29-09-08, RM-396 Device Type: mobile phone OS: Nokia Series40 Subsystem: Near Field Communication ----------------------------- Executive Summary: URL Spoofing when displayi...
Blue Collar Productions iGallery 4.1 Plus File Download
Vendor Notified: 05/25/2009 Vulnerability Details: ------------------------------------------- Blue Collar Productions iGallery 4.1 Plus http://www.b-cp.com/igallery/default.asp is a commercial photo gallery script written in Classic ASP. There exists also a free version named iGallery 3.4. The...
TorrentTrader Classic Detection
Detection of TorrentTrader Classic. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Racer 0.5.3b5 Remote Stack Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ================================================== Racer 0.5.3b5 Remote Stack Buffer Overflow Exploit ================================================== / Racer vs 0.5.3 beta 5 Remote Stack Buffer OverflowC exploit by fl0 fl0w...
NXP Semiconductors MIFARE Classic Smartcard - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/31853/info MIFARE Classic is prone to multiple security weaknesses: 1. A security weakness may allow attackers to recover the internal state of the linear feedback shift register. 2. A security weakness may allow attackers to recover the previous state of...
NXP Semiconductors MIFARE Classic Smartcard - Multiple Vulnerabilities
NXP Semiconductors MIFARE Classic Smartcard - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/31853/info MIFARE Classic is prone to multiple security weaknesses: 1. A security weakness may allow attackers to recover the internal state of the linear feedback shift register. 2. A...
MS Windows 2003 Token Kidnapping Local Exploit PoC
No description provided by source. From http://nomoreroot.blogspot.com/2008/10/windows-2003-poc-exploit-for-token.html It has been a long time since Token Kidnapping presentation http://www.argeniss.com/research/TokenKidnapping.pdf was published so I decided to release a PoC exploit for Win2k3 th...
CVE-2008-4494
SQL injection vulnerability in completed-advance.php in TorrentTrader Classic 1.08 and 1.04 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in completed-advance.php in TorrentTrader Classic 1.08 and 1.04 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4494
CVE-2008-4494 is a SQL injection vulnerability affecting TorrentTrader Classic 1.08, 1.04, and earlier, in the completed-advance.php script. The flaw allows remote attackers to execute arbitrary SQL commands by supplying input in the id parameter. The issue originates from improper handling of th...
CVE-2008-4494
SQL injection vulnerability in completed-advance.php in TorrentTrader Classic 1.08 and 1.04 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
torrenttrader-blindsql.txt
====================================================== == TorrentTrader Classic NamE : TorrentTrader Classic == version : 1.04 == Download : www.torrenttrader.org ====================================================== == AuThOr : BazOka-HaCkEr == EmaiL : [email protected] == HomE : WwW.TrYaG.cc/cc...
TorrentTrader Classic <= 1.04 Blind SQL Injection Vulnerability
Exploit for unknown platform in category web applications =============================================================== TorrentTrader Classic TorrentTrader Classic NamE : TorrentTrader Classic == version : 1.04 == Download : www.torrenttrader.org...
TorrentTrader Classic <= 1.04 Blind SQL Injection Vulnerability
No description provided by source. ====================================================== == TorrentTrader Classic = 1.04 Blind SQL Injection Exploit ====================================================== == NamE : TorrentTrader Classic == version : 1.04 == Download : www.torrenttrader.org...
TorrentTrader Classic 1.04 - Blind SQL Injection
====================================================== == TorrentTrader Classic NamE : TorrentTrader Classic == version : 1.04 == Download : www.torrenttrader.org ====================================================== == AuThOr : BazOka-HaCkEr == EmaiL : [email protected] == HomE : WwW.TrYaG.cc/cc...
NXP Semiconductors MIFARE Classic智能卡存在多个未明安全漏洞
BUGTRAQ ID: 30668 CNCAN ID：CNCAN-2008081409 NXP Semiconductors MIFARE是一款一卡通常用的芯片解决方案。 MIFARE智能卡存在多个未明安全问题，攻击者可以利用漏洞克隆卡或伪造未授权卡。 作者将在DEFCON上进行演讲。目前没有详细漏洞细节提供 NXP Semiconductors MiFARE Classic 目前没有解决方案提供： http://www.nxp.com/...