CVE-2008-5954

CVE-2008-5954 describes an SQL injection vulnerability in the KTP Computer Customer Database (KTPCCD) CMS. When magic_quotes_gpc is disabled, remote attackers can inject SQL via the lname parameter in a login action to an unspecified component, potentially compromising data. The available documen...

CVE-2008-5953

CVE-2008-5953 is a directory traversal vulnerability affecting the KTP Computer Customer Database (KTPCCD) CMS. When magic_quotes_gpc is disabled, a remote attacker can include and execute arbitrary local files by supplying a .. (dot dot) path in the p parameter of the default URI. This leads to ...

CVE-2008-5952

The CVE-2008-5952 entry describes an SQL injection in the KTP Computer Customer Database (KTPCCD) CMS. When magic_quotes_gpc is disabled, remote authenticated users can inject arbitrary SQL via the tid parameter in a vtech action to the default URI. Affected software: KTPCCD CMS (KTP Computer Cus...

ZDI-09-007: Apple QuickTime Cinepak Codec MDAT Heap Corruption Vulnerability

ZDI-09-007: Apple QuickTime Cinepak Codec MDAT Heap Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-007 January 21, 2009 -- CVE ID: CVE-2009-2006 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime -- TippingPointTM IPS Customer Protection: TippingPoint IP...

KTP Computer Customer Database CMS 1.0 - Blind SQL Injection

KTP Computer Customer Database CMS 1.0 - Blind SQL Injection ================================================ KTPCCD CMS Blind SQL Injection Vulnerability ================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hackin...

KTP Computer Customer Database CMS Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== KTP Computer Customer Database CMS Blind SQL Injection Vulnerability ====================================================================...

ktpccd-lfi.txt

!/usr/bin/perl -w ====================================== KTPCCD Local File Inclusion Exploit ====================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | / XXXXXX...

KTP Computer Customer Database CMS Blind SQL Injection Vulnerability

No description provided by source. ================================================ KTPCCD CMS Blind SQL Injection Vulnerability ================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

KTP Computer Customer Database CMS Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== KTP Computer Customer Database CMS Local File Inclusion Vulnerability ===================================================================== !/usr/bin/perl -w...

KTP Computer Customer Database CMS 1.0 - Blind SQL Injection

================================================ KTPCCD CMS Blind SQL Injection Vulnerability ================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, ...

KTP Computer Customer Database CMS Local File Inclusion Vulnerability

No description provided by source. !/usr/bin/perl -w ====================================== KTPCCD Local File Inclusion Exploit ====================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

KTP Computer Customer Database CMS 1.0 - Local File Inclusion

!/usr/bin/perl -w ====================================== KTPCCD Local File Inclusion Exploit ====================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | / XXXXXX...

Simple Customer 1.2 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. - Simple Customer 1.2 Remort Auth bypass SQL Injection Vulnerability - Discovered By : d3b4g - Greetz : All my freind Go to www.target.compathlogin.php Use following information to bypass login. Write any email Address as email address.It must to be in email...

Simple Customer 1.2 - Authentication Bypass

Simple Customer 1.2 - Authentication Bypass - Simple Customer 1.2 Remort Auth bypass SQL Injection Vulnerability - Discovered By : d3b4g - Greetz : All my freind Go to www.target.compathlogin.php Use following information to bypass login. Write any email Address as email address.It must to be in...

PHP Live! Helper < 2.1.0 Multiple Vulnerabilities

Binary data 4627.prm...

eSHOP100 - 'SUB' SQL Injection

, .ss$$$$$$$$$$s, - $. s$$$$$$$$$$$$$$$$Ss - "$$$$$$$$$$$$$$$$$$o$$$ , - s$$$$$$$$$$$$$$$$$$$$$$$$s, ,s - s$$$$$$$$$"$$$$$$""""$$$$$$"$$$$$, - s$$$$$$$$$$s""$$$$ssssss"$$$$$$$$" - s$$$$$$$$$$' """ss"$"$s"" - s$$$$$$$$$$, """""$ .s$$s - s$$$$$$$$$$$$s,... s$$' - ssss$$$$$$$$$$$$$$$$$$$$s. .$$"$. ,...

eshop100-sql.txt

, .ss$$$$$$$$$$s, - $. s$$$$$$$$$$$$$$$$Ss - "$$$$$$$$$$$$$$$$$$o$$$ , - s$$$$$$$$$$$$$$$$$$$$$$$$s, ,s - s$$$$$$$$$"$$$$$$""""$$$$$$"$$$$$, - s$$$$$$$$$$s""$$$$ssssss"$$$$$$$$" - s$$$$$$$$$$' """ss"$"$s"" - s$$$$$$$$$$, """""$ .s$$s - s$$$$$$$$$$$$s,... s$$' - ssss$$$$$$$$$$$$$$$$$$$$s. .$$"$. ,...

Virtual Support Office XP 3.0.29 - Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: Virtual Support Office-XP Multiple Vulnerabilities. Vendor: www.vso-xp.com Vulnerable Version: 3.0.29, 3.0.27 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: www.bugreport.ir/?/47 1. Description: Virtual Suppo...

ZDI-08-028: IBM Lotus Sametime Community Services Multiplexer Stack Overflow Vulnerability

ZDI-08-028: IBM Lotus Sametime Community Services Multiplexer Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-028 May 21, 2008 -- Affected Vendors: IBM -- Affected Products: IBM Lotus Sametime -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers ha...

Code injection

Unspecified vulnerability in Cisco Unified Customer Voice Portal CVP 4.0.x before 4.02ES14, 4.1.x before 4.11ES11, and 7.x before 7.01 allows remote authenticated users with administrator role privileges to create, modify, or delete a superuser account...