CVE-2006-1203

PHP remote file include vulnerability in common.php in txtForum 1.0.4-dev and earlier allows remote attackers to include and execute arbitrary PHP code via a URL in the skin parameter to login.php, and possibly other parameters to other PHP scripts, related to include statements in common.php...

CVE-2006-1203

The CVE-2006-1203 entry concerns a PHP remote file include vulnerability in txtForum 1.0.4-dev and earlier. The issue allows an attacker to cause arbitrary PHP code execution via a URL passed to the skin parameter of login.php (and possibly other parameters) due to include statements in common.ph...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the commentary in Evo-Dev evoBlog allow remote attackers to inject arbitrary web script or HTML via 1 the name parameter and 2 other unspecified parameters...

CVE-2006-1077

Multiple cross-site scripting XSS vulnerabilities in the commentary in Evo-Dev evoBlog allow remote attackers to inject arbitrary web script or HTML via 1 the name parameter and 2 other unspecified parameters...

CVE-2006-1077

Evo-Dev evoBlog is affected by multiple cross-site scripting (XSS) vulnerabilities in the commentary feature. The issue allows remote attackers to inject arbitrary web script or HTML through the name parameter and other unspecified parameters. The reports indicate an XSS risk without specifying a...

CVE-2006-1077: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in the commentary in Evo-Dev evoBlog allow remote attackers to inject arbitrary web script or HTML via 1 the name parameter and 2 other unspecified parameters...

Cross site scripting

Cross-site scripting XSS vulnerability in register.php in DEV web management system 1.5 allows remote attackers to inject arbitrary web script or HTML via the "City/Region" field mesto variable. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2006-0886

The provided sources describe a Cross-site scripting (XSS) vulnerability in DEV web management system 1.5, specifically in register.php, exploitable via the City/Region field (mesto variable). Remote attackers could inject arbitrary web script or HTML. The vulnerability affects the register.php h...

CVE-2006-0886

Cross-site scripting XSS vulnerability in register.php in DEV web management system 1.5 allows remote attackers to inject arbitrary web script or HTML via the "City/Region" field mesto variable. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2006-0886: Undefined Security Weakness

Cross-site scripting XSS vulnerability in register.php in DEV web management system 1.5 allows remote attackers to inject arbitrary web script or HTML via the "City/Region" field mesto variable. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

[SA18714] DEV web management system "City/Region" Script Insertion

TITLE: DEV web management system "City/Region" Script Insertion SECUNIA ADVISORY ID: SA18714 VERIFY ADVISORY: http://secunia.com/advisories/18714/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: DEV web management system 1.x http://secunia.com/product/6685/...

linux/x86 cat /dev/urandom > /dev/console, just for kicks - 63 bytes

Exploit for linux/x86 platform in category shellcode ==================================================================== linux/x86 cat /dev/urandom /dev/console, just for kicks - 63 bytes ==================================================================== / linux/x86 cat /dev/urandom...

linux/x86 eject cd-rom follows /dev/cdrom symlink + exit 40 bytes

linux/x86 eject cd-rom follows /dev/cdrom symlink + exit 40 bytes. Shellcode exploit for linx86 platform / linux/x86 eject cd-rom follows "/dev/cdrom" symlink + exit - 40 bytes - izik / char shellcode = "\x6a\x05" // push $0x5 "\x58" // pop %eax "\x31\xc9" // xor %ecx,%ecx "\x51" // push %ecx...

linux/x86 cat /dev/urandom > /dev/console 63 bytes

linux/x86 cat /dev/urandom /dev/console, just for kicks - 63 bytes. Shellcode exploit for linx86 platform / linux/x86 cat /dev/urandom /dev/console, no real profit just for kicks - 63 bytes - izik / char shellcode = "\x31\xc9" // xor %ecx,%ecx "\x51" // push %ecx "\x68\x6e\x64\x6f\x6d" // push...

linux/x86 24/7 open cd-rom loop (follows /dev/cdrom symlink) 39 bytes

No description provided by source. / linux/x86 24/7 open cd-rom loop follows "/dev/cdrom" symlink - 39 bytes - izik [email protected] / char shellcode = "\x6a\x05" // push $0x5 "\x58" // pop %eax "\x31\xc9" // xor %ecx,%ecx "\x51" // push %ecx "\xb5\x08" // mov $0x8,%ch "\x68\x64\x72\x6f\x6d" // pus...

linux/x86 cat /dev/urandom > /dev/console just for kicks - 63 bytes

No description provided by source. / linux/x86 cat /dev/urandom /dev/console, no real profit just for kicks - 63 bytes - izik [email protected] / char shellcode = "\x31\xc9" // xor %ecx,%ecx "\x51" // push %ecx "\x68\x6e\x64\x6f\x6d" // push $0x6d6f646e "\x68\x2f\x75\x72\x61" // push $0x6172752f...

linux/x86 eject/close cd-rom loop (follows /dev/cdrom symlink) 45 bytes

No description provided by source. / linux/x86 eject & close cd-rom frenzy loop follows "/dev/cdrom" symlink - 45 bytes - izik [email protected] / char shellcode = "\x6a\x05" // push $0x5 "\x58" // pop %eax "\x31\xc9" // xor %ecx,%ecx "\x51" // push %ecx "\xb5\x08" // mov $0x8,%ch...

Unix Command Shell, Reverse TCP (/dev/tcp)

Creates an interactive shell via bash's builtin /dev/tcp. This will not work on circa 2009 and older Debian-based Linux distributions including Ubuntu because they compile bash without the /dev/tcp feature. This module requires Metasploit: https://metasploit.com/download Current source:...

Dev_15_sql_xpl.php.txt

---- Dev web management system ConfLoadDBtoPHP; include "admin/config.php"; echo "...

CVE-2005-4555: Undefined Security Weakness

Cross-site scripting XSS vulnerability in add.php in DEV web management system 1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 ENTERARTICLETITLE, 2 SPECIFYZONE, 3 ENTERARTICLEHEADER, and 4 ENTERARTICLEBODY indices in the language array parameter...