1300 matches found
CVE-2006-0251: Undefined Security Weakness
Cross-site scripting XSS vulnerability in fom.cgi in Faq-O-Matic 2.711 allows remote attackers to inject arbitrary web script or HTML via the 1 duration, 2 file, and 3 cmd parameters...
Use msn to control the broiler msnbot robot-vulnerability warning-the black bar safety net
msnbot2. 0 instructions for use Program description: msnbot is a msn robot Control Service, the user can through this msnbot remote control is to run the program machine. It is a msn client tool, no need to msnMessager support. Through which a user can open a cmd shell. You can upload, download,...
cijfer-vsczpl.pl.txt
!/usr/bin/perl cijfer-vscxpl - Valdersoft Shopping Cart All rights reserved. 1. example cijfer@kalma:/research$ ./cijfer-vscxpl.pl -h www.valdersoft.com -d /store [email protected] /$ id;uname -a uid=2526apache gid=2524apache groups=2524apache, 10004psaserv FreeBSD valdersoft.com...
CVE-2005-3948: Undefined Security Weakness
Directory traversal vulnerability in main.php in PHPAlbum 0.2.3 and earlier allows remote attackers to read arbitrary files via the 1 cmd and 2 var1 parameters...
AWStats configdir parameter arbitrary cmd exec
The remote host is running AWStats, a free real-time logfile analyzer. The remote version of this software is prone to an input validation vulnerability. The issue is reported to exist because user supplied OpenVAS Vulnerability Test $Id: awstatsconfigdir.nasl 6056 2017-05-02 09:02:50Z teissa $...
[Full-disclosure] xss in php koala script v1.2
xss /info.php?user=xss and an upload vulnerability if you upload a file named file.gif.php /upload/file.gif.php?cmd=ls file.gif.php is attached...
Want to learn real hacking techniques? Come in and see-vulnerability warning-the black bar safety net
SkyPerson Although I am a Diamondback bird! But still to advise to want to learn network technology people 1, Do not research QQ, after all, QQ is not the technology, stolen a few number? The program is not write yourself, there is nothing to be proud of. 2, Do not study how to crack the cafe,...
CVE-2004-2318: Undefined Security Weakness
The administrative interface surgeftpmgr.cgi for SurgeFTP Server 1.0b through 2.2k1 allows remote attackers to cause a temporary denial of service crash via requests with two percent % signs in the CMD parameter...
VoteBox 2.0 - Votebox.php Remote File Inclusion
VoteBox 2.0 - Votebox.php Remote File Inclusion source: https://www.securityfocus.com/bid/12806/info It is reported that VoteBox is affected by a remote PHP file include vulnerability. This issue is due in part to the application failing to properly sanitize user-supplied input to the 'votebox.ph...
CVE-2004-2318
The administrative interface surgeftpmgr.cgi for SurgeFTP Server 1.0b through 2.2k1 allows remote attackers to cause a temporary denial of service crash via requests with two percent % signs in the CMD parameter...
Microsoft Windows Server 2000 - Utility Manager All-in-One (MS04-019)
/ COROMPUTER2004 Crpt Utility Manager exploit v2.666 modified by kralor Crpt It gets system language and sets windows names to work on any win2k :P Feel free to add other languages : v2.666: added autonomous allinone remote exploitation system ; It can be executed through poor cmd.exe shells like...
CVE-2003-0731: Undefined Security Weakness
CiscoWorks Common Management Foundation CMF 2.1 and earlier allows the guest user to gain administrative privileges via a certain POST request to com.cisco.nm.cmf.servlet.CsAuthServlet, possibly involving the "cmd" parameter with a modifyUser value and a modified "priviledges" parameter...
CVE-2002-0230: Undefined Security Weakness
Cross-site scripting vulnerability in fom.cgi of Faq-O-Matic 2.712 allows remote attackers to execute arbitrary Javascript on other clients via the cmd parameter, which causes the script to be inserted into an error message...
DoS через специальные устройства в Domino (DOS DoS)
Обращение к CGI-файлу с именем содержащим название DOS-устройства и длинным расширением приводит к запуску cmd.exe...
CVE-2001-0440
The connected document (MDKSA-2001:032-1) confirms a vulnerability in Licq pre-1.0.3 where received URLs are parsed without sufficient checks and passed to the system() call. This allows remote attackers to cause arbitrary commands to be executed on the client, via crafted URLs, and can lead to d...
CVE-2000-0541: Undefined Security Weakness
The Panda Antivirus console on port 2001 allows local users to execute arbitrary commands without authentication via the CMD command...
CVE-2000-0423: Undefined Security Weakness
Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd, and utag...
CMD.EXE overflow (CISADV000420)
Cerberus Information Security Advisory CISADV000420 http://www.cerberus-infosec.co.uk/advisories.html Released : 20th April 2000 Name : CMD.EXE overflow Affected Systems : Windows NT/2000 Issue : See details Author : David Litchfield [email protected] Description The Cerberus Security Team...