8798 matches found
SimpleNews <= 1.0.0 FINAL (print.php news_id) SQL Injection Exploit
Exploit for unknown platform in category web applications =================================================================== SimpleNews = 1.0.0 FINAL print.php newsid SQL Injection Exploit =================================================================== !/usr/bin/perl -w SimpleNews = 1.0.0...
phpChess Community Edition 2.0 Multiple RFI Vulnerabilities
No description provided by source. phpChess Community Edition 2.0 Multiple Remote File Inclusion Vulnerabilities D.Script: http://www.phpchess.net/index-3.html Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/skins/phpchess/layoutadmincfg.php?RootPath=Shell...
phpChess Community Edition 2.0 Multiple RFI Vulnerabilities
Exploit for unknown platform in category web applications =========================================================== phpChess Community Edition 2.0 Multiple RFI Vulnerabilities =========================================================== phpChess Community Edition 2.0 Multiple Remote File Inclusi...
BMC Performance Manager unauthorized access
PatrolAgent.exe TCP/3181 allows SNMP community definition modification...
Microsoft Office Word 2007 Multiple Vulnerabilities
Exploit for unknown platform in category dos / poc =================================================== Microsoft Office Word 2007 Multiple Vulnerabilities =================================================== Mati Aharoni muts email protected offensive-security.com http://www.offensive-security.com...
[Full-disclosure] Some 0day Pocs
Mati Aharoni muts .@. offensive-security.com mailto:[email protected] http://www.offensive-security.com My 7 line python fuzzer found several file format bugs in 3 hours. Quite alarming. No deep analysis was done, I leave that to the community. These are some of the results: file789-1.d...
CVE-2007-1786
SQL injection vulnerability in Hitachi Collaboration - Online Community Management 01-00 through 01-30, as used in Groupmax Collaboration Portal, Groupmax Collaboration Web Client, uCosminexus Collaboration Portal, Cosminexus Collaboration Portal, and uCosminexus Content Manager, allows remote...
Sql injection
SQL injection vulnerability in Hitachi Collaboration - Online Community Management 01-00 through 01-30, as used in Groupmax Collaboration Portal, Groupmax Collaboration Web Client, uCosminexus Collaboration Portal, Cosminexus Collaboration Portal, and uCosminexus Content Manager, allows remote...
CVE-2007-1786
CVE-2007-1786 is a SQL injection vulnerability in Hitachi Collaboration products (01-00 through 01-30), used in Groupmax Collaboration Portal, Groupmax Collaboration Web Client, uCosminexus Collaboration Portal, Cosminexus Collaboration Portal, and uCosminexus Content Manager. The underlying issu...
CVE-2007-1786
SQL injection vulnerability in Hitachi Collaboration - Online Community Management 01-00 through 01-30, as used in Groupmax Collaboration Portal, Groupmax Collaboration Web Client, uCosminexus Collaboration Portal, Cosminexus Collaboration Portal, and uCosminexus Content Manager, allows remote...
libero-xss.txt
Libero.it, one of the most important italian ISP www.libero.it is affected from a XSS vulnerability. The vulnerability can be found in the "Community" section of Libero portal, and the affected functionality is "add nick" http://digiland.libero.it/profilo.phtml?nick=. The implementation of this...
MOODLE <= 1.5.2 user password read out
--/ INTRODUCTION -- / Advisory : MOODLE = 1.5.2 user password read out Release Date : 17. March 2007 Application : Moodle.org is a course management system CMS : to help educators create effective online learning communities. Impact : read out user account passwords in md5 hash Googledork :...
Unfixed XSS vulnerability at www.caribbeanbusinesscommunity.com
Security researcher Cyber-Unity, has submitted on 22/03/2007 a cross-site-scripting XSS vulnerability affecting www.caribbeanbusinesscommunity.com, which at the time of submission ranked 3129192 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...
CVE-2006-7152
default.asp in ASP-Nuke Community 1.5 and earlier allows remote attackers to gain privileges by setting certain pseudo cookie values...
CVE-2006-7152
default.asp in ASP-Nuke Community 1.5 and earlier allows remote attackers to gain privileges by setting certain pseudo cookie values...
CVE-2006-7152
CVE-2006-7152 affects ASP-Nuke Community
CVE-2006-7068
PHP remote file inclusion vulnerability in CliServ Web Community 0.65 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the clheaders parameter to 1 menu.php3 and 2 login.php3...
CVE-2006-7068
CVE-2006-7068 is a PHP remote file inclusion vulnerability in CliServ Web Community 0.65 and earlier. The issue allows remote attackers to execute arbitrary PHP code by supplying a URL in the cl_headers parameter to menu.php3 or login.php3, indicating a remote file inclusion flaw in those entry p...