1024 CMS 1.4.4 - Multiple LocalRemote File Inclusions

1024 CMS 1.4.4 - Multiple LocalRemote File Inclusions Digital Security Research Group DSecRG Advisory DSECRG-08-027 Application: 1024 CMS Versions Affected: 1.4.3, 1.4.4 RFC Vendor URL: http://www.1024cms.com/ Bug: Multiple Remote/Local File Include Exploits: YES Reported: 18.06.2008 Second repor...

1024 CMS 1.4.4 - Multiple Local/Remote File Inclusions

Digital Security Research Group DSecRG Advisory DSECRG-08-027 Application: 1024 CMS Versions Affected: 1.4.3, 1.4.4 RFC Vendor URL: http://www.1024cms.com/ Bug: Multiple Remote/Local File Include Exploits: YES Reported: 18.06.2008 Second report: 27.06.2008 Vendor Response: NONE Solution: NONE Dat...

DSECRG-08-026.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-026 Application: Open Azimyt CMS Versions Affected: 0.22 minimal, 0.21 stable Vendor URL: http://azimyt.net/ Bug: Local File Include Exploits: YES Reported: 07.06.2008 Vendor Response: 08.06.2008 Solution: YES Date of Public Advisory:...

Open Azimyt CMS <= 0.22 (lang) Local File Inclusion Vulnerability

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-026 Application: Open Azimyt CMS Versions Affected: 0.22 minimal, 0.21 stable Vendor URL: http://azimyt.net/ Bug: Local File Include Exploits: YES Reported: 07.06.2008 Vendor Response: 08.06.2008 Solution...

Open Azimyt CMS <= 0.22 (lang) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= Open Azimyt CMS adminfolder."/lang/lang-system-".$SESSION'lang'.".php"; if!fileexists$SystemLangFile exitErrorLang::LangFilenotload; require$SystemLangFile; Example:...

Open Azimyt CMS 0.22 - 'lang' Local File Inclusion

Digital Security Research Group DSecRG Advisory DSECRG-08-026 Application: Open Azimyt CMS Versions Affected: 0.22 minimal, 0.21 stable Vendor URL: http://azimyt.net/ Bug: Local File Include Exploits: YES Reported: 07.06.2008 Vendor Response: 08.06.2008 Solution: YES Date of Public Advisory:...

CA-ArcServe

CA ArcServe is prone to a remote buffer overflow because it fails to perform adequate boundary-checks on user-supplied data. Successfully exploiting will allow an attacker to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a...

MS Windows JPEG GDI+ Overflow Download Shellcode Exploit (MS04-028)

No description provided by source. / =============================================================== Windows JPEG GDI+ Overflow Download Shellcoded Exploit MS04-028 Coded By ATmaCA Credit to eEye Digital Security,K-OTik Security,FoToZ,pathetic. E-Mail:[email protected] Web:www.prohack.net...

Creative Software AutoUpdate Engine ActiveX Stack Overflow Exploit

No description provided by source. html !-- !!!NOT PRIVATE PLEASE DISTRIBUTE!!! Zer0Day Creative Software AutoUpdate Engine ActiveX Stack-Overflow CacheFolder Exploit by BitKrush BitKrush +A.T.+ G.M.A.I.L.D.0.T.C.0.M. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ CacheFolder...

creative-overflow.txt

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ CacheFolder property is vulnerable to stack-based buffer overflow after 260 bytes, @ 512 bytes overwrites SEH and allows code execution reliably. Original Advisory @ http://www.kb.cert.org/vuls/id/501843 and Vulnerability...

OneCMS 2.5 (install_mod.php) Local File Inclusion Vulnerability

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-034 Application: OneCMS Versions Affected: 2.5 Vendor URL: http://www.insanevisions.com/ Bug: Local File Include Exploits: YES Reported: 26.03.2008 Vendor Response: NONE Solution: NONE Date of Public...

[DSECRG-08-025] Local File Include in OneCMS 2.5

Digital Security Research Group DSecRG Advisory DSECRG-08-025 Application: OneCMS Versions Affected: 2.5 Vendor URL: http://www.insanevisions.com/ Bug: Local File Include Exploits: YES Reported: 26.03.2008 Vendor Response: NONE Solution: NONE Date of Public Advisory: 23.05.2008 Author: Digital...

OneCMS 2.5 (install_mod.php) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications =============================================================== OneCMS 2.5 installmod.php Local File Inclusion Vulnerability =============================================================== Digital Security Research Group DSecRG Advisory...

Quate CMS 0.3.4 (RFI/LFI/XSS/DT) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================================ Quate CMS 0.3.4 RFI/LFI/XSS/DT Multiple Remote Vulnerabilities ================================================================ Digital Security Research Group DSecRG Advisor...

OneCMS 2.5 - install_mod.php Local File Inclusion

OneCMS 2.5 - installmod.php Local File Inclusion Digital Security Research Group DSecRG Advisory DSECRG-08-034 Application: OneCMS Versions Affected: 2.5 Vendor URL: http://www.insanevisions.com/ Bug: Local File Include Exploits: YES Reported: 26.03.2008 Vendor Response: NONE Solution: NONE Date ...

DSECRG-08-025.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-025 Application: OneCMS Versions Affected: 2.5 Vendor URL: http://www.insanevisions.com/ Bug: Local File Include Exploits: YES Reported: 26.03.2008 Vendor Response: NONE Solution: NONE Date of Public Advisory: 23.05.2008 Author: Digital...

DSECRG-08-024.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-024 Application: Quate CMS Versions Affected: 0.3.4 Vendor URL: http://www.quate.net/ Bugs: RFI, Multiple LFI, Directory traversal, Multiple XSS Exploits: YES Reported: 18.03.2008 Second report: 25.03.2008 Vendor response: NONE Solution:...

Quate CMS 0.3.4 - Multiple Vulnerabilities

Quate CMS 0.3.4 - Multiple Vulnerabilities Digital Security Research Group DSecRG Advisory DSECRG-08-030 Application: Quate CMS Versions Affected: 0.3.4 Vendor URL: http://www.quate.net/ Bugs: RFI, Multiple LFI, Directory traversal, Multiple XSS Exploits: YES Reported: 18.03.2008 Second report:...

Quate CMS 0.3.4 - Multiple Vulnerabilities

Digital Security Research Group DSecRG Advisory DSECRG-08-030 Application: Quate CMS Versions Affected: 0.3.4 Vendor URL: http://www.quate.net/ Bugs: RFI, Multiple LFI, Directory traversal, Multiple XSS Exploits: YES Reported: 18.03.2008 Second report: 25.03.2008 Vendor response: NONE Solution:...

OneCMS 2.5 - 'install_mod.php' Local File Inclusion

Digital Security Research Group DSecRG Advisory DSECRG-08-034 Application: OneCMS Versions Affected: 2.5 Vendor URL: http://www.insanevisions.com/ Bug: Local File Include Exploits: YES Reported: 26.03.2008 Vendor Response: NONE Solution: NONE Date of Public Advisory: 23.05.2008 Author: Digital...