snmp-brute NSE Script

Attempts to find an SNMP community string by brute force guessing. This script opens a sending socket and a sniffing pcap socket in parallel threads. The sending socket sends the SNMP probes with the community strings, while the pcap socket sniffs the network for an answer to the probes. If valid...

CVE-2009-0406

SQL injection vulnerability in index.php in Community CMS 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in index.php in Community CMS 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-0406

CVE-2009-0406 affects Community CMS 0.4 and earlier. The vulnerability is an SQL injection in index.php via the id parameter that allows remote attackers to execute arbitrary SQL commands. Impact is described as partial confidentiality, integrity, and availability. CVSSv2 base score is 7.5 (HIGH)...

CVE-2009-0406

SQL injection vulnerability in index.php in Community CMS 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

Community CMS <= 0.4 (/index.php id) Blind SQL Injection Exploit

No description provided by source. --+++==============================================================+++-- --+++====== Community CMS = 0.4 Blind SQL Injection Exploit ======+++-- --+++==============================================================+++-- ?php function query $user, $pos, $chr $query...

Community CMS <= 0.4 (/index.php id) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ Community CMS = 0.4 /index.php id Blind SQL Injection Exploit ================================================================...

Community CMS 0.4 - id Blind SQL Injection

Community CMS 0.4 - id Blind SQL Injection --+++==============================================================+++-- --+++====== Community CMS ". "\n+ Ex. : php xpl.php localhost /CommunityCMS admin". "\n+ Greetz : certaindeath". "\n\n"; if $argc != 4 usage ; $hostname = $argv 1; $path = $argv 2;...

Community CMS 0.4 Blind SQL Injection

--+++==============================================================+++-- --+++====== Community CMS ". "\n+ Ex. : php xpl.php localhost /CommunityCMS admin". "\n+ Greetz : certaindeath". "\n\n"; if $argc != 4 usage ; $hostname = $argv 1; $path = $argv...

Community CMS 0.4 - 'id' Blind SQL Injection

--+++==============================================================+++-- --+++====== Community CMS ". "\n+ Ex. : php xpl.php localhost /CommunityCMS admin". "\n+ Greetz : certaindeath". "\n\n"; if $argc != 4 usage ; $hostname = $argv 1; $path = $argv 2; $user = $argv 3; $key = "abcdef0123456789";...

CVE-2008-5960

SQL injection vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to execute arbitrary SQL commands via the cID parameter in a document action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to inject arbitrary web script or HTML via the cID parameter in a document action. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...

CVE-2008-5960

Affected software: Tribiq CMS Community 5.0.10B and 5.0.11E. Vulnerability: SQL injection in index.php via the cID parameter in a document action. This allows remote attackers to execute arbitrary SQL commands. Root cause/impact: Not further detailed beyond the injection via cID; impacts confiden...

CVE-2008-5961

CVE-2008-5961 is a cross-site scripting (XSS) vulnerability in Tribiq CMS Community versions 5.0.10B and 5.0.11E, exploitable via the cID parameter in a document action on index.php. The issue arises from inadequate input handling that allows an attacker to inject arbitrary script/HTML. Reported ...

GLSA-200901-15 : Net-SNMP: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200901-15 Net-SNMP: Denial of Service Oscar Mira-Sanchez reported an integer overflow in the netsnmpcreatesubtreecache function in agent/snmpagent.c when processing GETBULK requests. Impact : A remote attacker could send a special...

Net-SNMP: Denial of service

Background Net-SNMP is a collection of tools for generating and retrieving SNMP data. Description Oscar Mira-Sanchez reported an integer overflow in the netsnmpcreatesubtreecache function in agent/snmpagent.c when processing GETBULK requests. Impact A remote attacker could send a specially crafte...

NETGEAR WG102 wireless router SNMP information leak

It's possible to retrieve write community with read community...

Design/Logic Flaw

The Proxim Wireless Tsunami MP.11 2411 with firmware 3.0.3 has public as its default SNMP read/write community, which makes it easier for remote attackers to obtain sensitive information or modify SNMP variables...

CVE-2008-5845

Multiple cross-site scripting XSS vulnerabilities in Six Apart Movable Type MT before 4.23 allow remote attackers to inject arbitrary web script or HTML via a 1 MTEntryAuthorUsername, 2 MTAuthorDisplayName, 3 MTEntryAuthorDisplayName, or 4 MTCommenterName field in a Profile View template; a 5...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Six Apart Movable Type MT before 4.23 allow remote attackers to inject arbitrary web script or HTML via a 1 MTEntryAuthorUsername, 2 MTAuthorDisplayName, 3 MTEntryAuthorDisplayName, or 4 MTCommenterName field in a Profile View template; a 5...