6347 matches found
Directory traversal
Directory traversal vulnerability in the IMAP service in EServ/3 3.25 allows remote authenticated users to read other user's email messages, create/rename arbitrary directories on the system, and delete empty directories via directory traversal sequences in the 1 CREATE, 2 SELECT, 3 DELETE, 4...
PHP-Nuke <= All Version Administrator SQL Injection Exploit / By WiLdBoY
PHP-Nuke = All Version Administrator SQL Injection Exploit / By WiLdBoY Credit : WiLdBoY Server Adress: Example : http://www.sitename.com Admin Name: Example : Admin Password MD5: Example : 1ea52f26e7e0ce08e462f87f5e35096c ------------------------------ User Information.... Name: Example : Michal...
DbbS<=2.0-alpha Multiple Vulnerabilities
Special thanks to rgod for his help!!! Full path disclosure http://www.site.com/DbbS/topics.php?fcategoryid=' http://www.site.com/DbbS/script.php?unavariabile= http://www.site.com/DbbS/script.php?GLOBALS= http://www.site.com/DbbS/script.php?SERVER= MD5 Password...
JiRos Banner Experience 1.0 (Create Admin Bypass) Remote Exploit
Exploit for unknown platform in category web applications ================================================================ JiRos Banner Experience 1.0 Create Admin Bypass Remote Exploit ================================================================ Jiros Banner Experience Pro Unauthorized Admin...
DEBIAN-CVE-2006-1063
Unspecified vulnerability in Lurker 2.0 and earlier allows remote attackers to create or overwrite files in any writable directory that is named "mbox"...
Code injection
Thomson SpeedTouch modem running firmware 5.3.2.6.0 allows remote attackers to create users that cannot be deleted via scripting code in the "31" parameter in a NewUser function, which is not filtered by the modem when creating the account, but cannot be deleted by the administrator, possibly due...
Directory traversal
Directory traversal vulnerability in the IMAP server in ArGoSoft Mail Server Pro 1.8.8.1 allows remote authenticated users to create arbitrary folders via a .. dot dot in the RENAME command...
Directory traversal
Multiple directory traversal vulnerabilities in the IMAP service in Macallan Mail Solution before 4.8.05.004 allow remote authenticated users to read e-mails of other users or create, modify, or delete directories via a .. dot dot in the argument to the 1 CREATE, 2 SELECT, 3 DELETE, or 4 RENAME...
CVE-2006-0782
Unspecified vulnerability in weblog.pl in PerlBlog 1.09b and earlier allows remote attackers to create arbitrary files and possibly execute arbitrary code via unspecified attack vectors related to improper handling of 1 the reply parameter, possibly involving injection of 2 the name parameter and...
CVE-2006-0680
Unspecified vulnerability in WebGUI before 6.8.6-gamma allows remote attackers to create an account, when anonymous registration is disabled, via a certain URL...
Design/Logic Flaw
The genrandstring function in phpBB 2.0.19 uses insufficiently random data small value space to create the activation key "validation ID" that is sent by e-mail when establishing a password, which makes it easier for remote attackers to obtain the key and modify passwords for existing accounts or...
Ubuntu 5.10 : mysql-dfsg-4.1 vulnerability (USN-180-2)
USN-180-1 fixed a vulnerability in the mysql-server package which ships version 4.0. Version 4.1 is vulnerable against the same flaw. Please note that this package is not officially supported in Ubuntu 5.10. Origial advisory : 'AppSecInc Team SHATTER discovered a buffer overflow in the 'CREATE...
PT-2006-1385 · Aoblogger · Aoblogger
Name of the Vulnerable Software and Affected Versions: aoblogger version 2.3 Description: The issue allows remote attackers to bypass authentication and create new blog entries. This is achieved by setting the uza parameter to 1 in the create.php file. Recommendations: For aoblogger version 2.3,...
Ubuntu 4.10 / 5.04 : mysql-dfsg vulnerability (USN-180-1)
AppSecInc Team SHATTER discovered a buffer overflow in the 'CREATE FUNCTION' statement. By specifying a specially crafted long function name, a local or remote attacker with function creation privileges could crash the server or execute arbitrary code with server privileges. However, the right to...
CVE-2006-0168
Cross-site scripting XSS vulnerability in MyPhPim 01.05 allows remote attackers to inject arbitrary web script or HTML via the description field on the "Create New todo" page...
Cross site scripting
Cross-site scripting XSS vulnerability in MyPhPim 01.05 allows remote attackers to inject arbitrary web script or HTML via the description field on the "Create New todo" page...
CVE-2006-0168
Cross-site scripting XSS vulnerability in MyPhPim 01.05 allows remote attackers to inject arbitrary web script or HTML via the description field on the "Create New todo" page...
Microsoft Windows Server 2000 Kernel - APC Data-Free Local Escalation (MS05-055)
Microsoft Windows Server 2000 Kernel - APC Data-Free Local Escalation MS05-055 / helper.c commented out below ms05-055.c /str0ke / / MS05-055 Windows Kernel APC Data-Free Local Privilege Escalation Vulnerability Exploit Created by SoBeIt 12.25.2005 Main file of exploit Tested on: Windows 2000 PRO...
USN-180-2: MySQL 4.1 vulnerability
USN-180-1 fixed a vulnerability in the mysql-server package which ships version 4.0. Version 4.1 is vulnerable against the same flaw. Please note that this package is not officially supported in Ubuntu 5.10. Origial advisory: "AppSecInc Team SHATTER discovered a buffer overflow in the "CREATE...