8798 matches found
CliServ Web Community远程文件包含漏洞
CliServ Web Community是一款基于PHP的WEB应用程序。 CliServ Web Community不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于多个脚本对用户提交的WEB参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 CliServ Web Community CliServ Web Community 0.65 http://sourceforge.net/projects/cliserv/ !/usr/bin/env python coding: utf-8 from...
Net-SNMP security protection bypass
Under some conditions write access may be obtained to read-only community...
CVE-2006-6369
SQL injection vulnerability in lib/entryreplyentry.php in Invision Community Blog Mod 1.2.4 allows remote attackers to execute arbitrary SQL commands via the eid parameter, when accessed through the "Preview message" functionality...
CVE-2006-6369
SQL injection vulnerability in lib/entryreplyentry.php in Invision Community Blog Mod 1.2.4 allows remote attackers to execute arbitrary SQL commands via the eid parameter, when accessed through the "Preview message" functionality...
CVE-2006-6369
CVE-2006-6369 is an SQL injection in the Invision Community Blog Mod 1.2.4. The flaw is in the file lib/entry_reply_entry.php and is exploitable via the eid parameter when the message is previewed, allowing remote attackers to execute arbitrary SQL commands. The connected documents provide the af...
Seir Anphin V666 Community Management System多个SQL注入漏洞
Seir Anphin Community Management System是一款基于PHP的社区程序。 Seir Anphin Community Management System不正确处理用户提交的WEB数据，远程攻击者可以利用漏洞进行SQL注入获得敏感信息。 问题存在于'index.php'脚本中，由于对用户提交的URI参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 Seir Anphin Community Management System v666 http://www.comeplaydying.com/...
Invision Community Blog EID SQL注入漏洞
Invision Community Blog是一款基于Invision的一个日记模块。 Invision Community Blog不充分过滤用户提交的URI输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是脚本对用户提交的'EID'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 Invision Power Services Invision Community Blog 1.2.4 目前没有解决方案提供： http://www.invisionblog.com/...
Invision Community Blog Mod 1.2.4 SQL Injection Vulnerability
No description provided by source. 1. Open any blog entry 2. Try to reply to any message 3. Push "Preview message" button Do not post your reply 4. Save source code of opened page to your PC 5. Find this string input type='hidden' name='eid' value='BLOGENTRYID' / 6. Change BLOGENTRYID with this S...
Invision Community Blog Mod 1.2.4 - SQL Injection
Invision Community Blog Mod 1.2.4 - SQL Injection 1. Open any blog entry 2. Try to reply to any message 3. Push "Preview message" button Do not post your reply 4. Save source code of opened page to your PC 5. Find this string ' / 6. Change with this SQL Injection: UNION SELECT b.entryid, b.blogid...
Invision Community Blog Mod 1.2.4 .PHP SQL Injection Vulnerability
Open any blog entry 2. Try to reply to any message 3. Push "Preview message" button Do not post your reply 4. Save source code of opened page to your PC 5. Find this string input type='hidden' name='eid' value='BLOGENTRYID' / 6. Change BLOGENTRYID with this SQL Injection: BLOGENTRYID UNION...
Invision Community Blog Mod 1.2.4 - SQL Injection
Open any blog entry 2. Try to reply to any message 3. Push "Preview message" button Do not post your reply 4. Save source code of opened page to your PC 5. Find this string ' / 6. Change with this SQL Injection: UNION SELECT b.entryid, b.blogid, b.categoryid, b.entryauthorid, b.entryauthorname,...
Invision Community Blog Mod 1.2.4 SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================= Invision Community Blog Mod 1.2.4 SQL Injection Vulnerability ============================================================= 1. Open any blog entry 2. Try to reply to any message...
ASP-Nuke Community <= 1.5 Cookie Privilege Escalation Vulnerability
Exploit for unknown platform in category web applications =================================================================== ASP-Nuke Community Find cookie informations. Change Informations= Cookie Informations: ASPNUKE14%5Fpseudoname , pseudoname = "Welcome USERNAME" see for ASPNUKE14%5Fpseudo ...
Sisfo Kampus 0.8 - Remote File Inclusion / Download
Source Code = Sisfokampus 0.8 Website = www.Sisfokampus.net Author = E. Setio Dewo [email protected] Dorkz : Allinurl: /index.php?exec= File Vuln : index.php print.php download.php Local File Include Found by : Wawan Firmansyah a.k.a Ang|n [email protected] Source of index.php...
ASP-Nuke Community 1.5 - Cookie Privilege Escalation
Title : ASP-Nuke Community Find cookie informations. Change Informations= Cookie Informations: ASPNUKE14%5Fpseudoname , pseudoname = "Welcome USERNAME" see for ASPNUKE14%5Fpseudo , pseudo = Login UserName ASPNUKE14%5Fpseudoid , pseudoid = UserId ASPNUKE14%5Femail , email = User Email Save and go ...
3Com SuperStack 3 switch SNMP information leak
It's possible to get SNMP community string with management packets...
Jinzora <= 2.1 (media.php) Remote File Include Vulnerability
No description provided by source. Jinzora = 2.1 Remote File Inclusion Download Source : http://www.jinzora.com/downloads/j2.1.tar.gz Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg file ; media.php bugs ; // include classes for extending. requireonce$includepath...
CVE-2006-5382
3Com Switch SS3 4400 switches, firmware 5.11, 6.00 and 6.10 and earlier, allow remote attackers to read the SNMP Read-Write Community string and conduct unauthorized actions via unspecified "normally restricted management packets on the device" that cause the community string to be returned...
CVE-2006-5382
The CVE-2006-5382 entry affects 3Com Switch SS3 4400 switches, specifically firmware 5.11, 6.00, 6.10 and earlier. Affects remote confidentiality/integrity/availability by allowing remote attackers to read the SNMP Read-Write Community string and perform unauthorized actions via normally restrict...
CVE-2006-5367
Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.7 up to 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln 1 APPS03 in Oracle Applications Framework, 2 APPS04 in Oracle Applications Technology Stack, and 3 APPS05 in Oracle Balanced Scorecard, 4...