722 matches found
paidversion-sql.txt
|| | | paidversion tr.php id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | WwW.Hussin-X.CoM | WwW.TrYaG.CC | | email: darkangelg85atYahooDoTcom | | | | | | | | script : http://www.downlinegoldmine.com/ ...
WebChamado 1.1 (tsk_id) Remote SQL Injection Vulnerability
No description provided by source. ...:::::WebChamado 1.1 SQL Injection Vulnerability ::::.... Virangar Security Team www.virangar.net www.virangar.ir -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz...
Sql injection
SQL injection vulnerability in inc/datahandlers/pm.php in MyBB before 1.2.12 allows remote authenticated users to execute arbitrary SQL commands via the optionsdisablesmilies parameter to private.php...
Moderate: Red Hat Security Advisory: java-1.4.2-bea security update
Updated java-1.4.2-bea packages that correct several security issues and add enhancements are now available for Red Hat Enterprise Linux 4 Extras. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The BEA WebLogic JRockit 1.4.215 JRE and SDK...
CVE-2007-5741
Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the 1 statusmessages or 2 linkintegrity module, which the module unpickles and executes...
CVE-2003-1516
The CVE-2003-1516 entry concerns the org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.2_01. The flaw allows signed and unsigned applets to share variables, violating the Java security model and potentially enabling remote attackers to read or write data belonging to a sign...
CVE-2007-1167
CVE-2007-1167 affects deV!L`z Clanportal (DZCP) prior to or including 1.4.5. The issue resides in inc/filebrowser/browser.php, where an attacker can trigger information disclosure by using the inc/mysql.php value of the file parameter, allowing remote retrieval of MySQL data. This is a remote, un...
Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/manageTagmins.php?configpath' Remote File Inclusion
source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...
Uploader <= (userdata/user_1.txt) Password Disclosure Vulnerability
Uploader = userdata/user1.txt Password Disclosure Vulnerability Script: Uploader Version: 6 Beta 1 Dork: "Uploader Version 6 Beta 1" Found By : BorN To K!LL Explo!T:. ^^^^^ www.site.com/upload-path/userdata/user1.txt as We see Admin name & Hash ..... crack the password .... : GreeTz To : Dr.2 ,...
ackerTodo42.txt
ackerTodo 4.2 SQL Injection vendor: http://ackertodo.sourceforge.net/site2/index.html File: gadget/login.php Exploiting this issue could allow an attacker to access sensible data. Vuln code: $userlogin = trim$REQUEST'uplogin'; $userpass = trim$REQUEST'uppass'; $numtasks = trim$REQUEST'upnumtasks'...
CVE-2006-3740
The CVE-2006-3740 entry concerns an integer overflow in X.Org 6.8.2’s scan_cidfont handling and the XFree86 X server, triggered by crafted CMap/CIDFont font data with manipulated item counts in begincodespacerange, cidrange, or notdefrange sections. Impact is local code execution or denial of ser...
Mailman < 2.1.9rc1 Spoofed Log Entry Injection
Binary data 3737.prm...
[Full-disclosure] Session data pollution vulnerabilities in web applications
In web applications I've tested recently I have stumbled upon something that seems to be new class of bugs. Quick googling did not turn up any reference to this kind of vulnerabilities, so I thought I should describe it. The problem boils down to the application reusing the same session variable...
phpBB < 2.0.16 viewtopic.php Arbitrary Code Execution
Binary data 3038.prm...
Freeciv Server 2.0.0beta8 - Denial of Service
!/usr/bin/perl Freeciv Server \n"; exit1; system "clear"; $server = $ARGV0; print "- Freeciv DoS Exploit\n\n"; print "- Server IP: "; print $server; print "\n- Connecting to IP ...\n"; $socket = IO::Socket::INET-new Proto = "tcp", PeerAddr = "$server", PeerPort = "5555"; unless $socket die "-...
ArGoSoft FTP Server DELE Buffer Overflow
Binary data 2684.prm...
RealPlayer < 6.0.12.1059 Multiple Remote Overflows
Binary data 2666.prm...
Avaya IP Office Phone Manager - Local Password Disclosure
Avaya IP Office Phone Manager - Local Password Disclosure include include include / Filename: exploit.c Title: Avaya IP Office Phone Manager - Cleartext Sensitive Data Vulnerability Exploit v0.01 Author: pagvac Adrian Pastor Date: 24th Feb, 2005 Other info: tested on version 2.013. Compile as a...