Vulnerability in createSVGTransformFromMatrix (JavaScript, SVG)

Passing an incorrect object to createSVGTransformFromMatrixcan crash Opera and enable arbitrary code execution. Users who have disabled JavaScript are not affected...

CVE-2008-5267

SQL injection vulnerability in answer.php in Experts 1.0.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the questionid parameter...

Oracle Database Vault ptrace(2) Privilege Escalation Exploit

No description provided by source. / original release: http://vnull.pcnet.com.pl/blog/?p=92 oradvmemoff.c version 0x1 ORACLE Database Vault runtime disabler x8632 Linux only AKA givebackthefreedom by Jakub 'vnull' Wartak [email protected] 26.02.2008 0-day PRIVATE! D0 N0T DI$TRIBUT3! Tested o...

CVE-2008-5069

SQL injection vulnerability in go.php in Panuwat PromoteWeb MySQL, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in Pro Chat Rooms 3.0.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the gud parameter to 1 profiles/index.php and 2 profiles/admin.php...

CVE-2008-5070

SQL injection vulnerability in Pro Chat Rooms 3.0.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the gud parameter to 1 profiles/index.php and 2 profiles/admin.php...

PHPX news_id SQL Injection Vulnerability (Nov 2008)

PHPX is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-5000

CVE-2008-5000 is an SQL injection vulnerability in PHPX 3.5.16, exploitable when magic_quotes_gpc is disabled. The flaw resides in admin/includes/news.inc.php, allowing remote attackers to inject arbitrary SQL via the news_id parameter (uppercase input). Multiple sources reference this PHPX issue...

CVE-2008-4995

redirect.pl in bk2site 1.1.9 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/redirect.log temporary file. NOTE: this vulnerability is only limited to debug mode, which is disabled by default...

CVE-2008-4897

SQL injection vulnerability in fichiers/addurl.php in Logz podcast CMS 1.3.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the art parameter...

CVE-2008-4877

SQL injection vulnerability in admin.php in WebCards 1.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter. NOTE: some of these details are obtained from third party information...

Broken Web Server Detection

The remote web server seems password protected or misconfigured. Further tests on it will be disabled so that the whole scan is not slowed down. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid34474; scriptversion"$Revision: 1.20 $"; scriptcvsdate"$Date: 2016/02/26...

CVE-2008-4626

Directory traversal vulnerability in index.php in Fritz Berger yet another php photo album - next generation yappa-ng 2.3.2 and possibly other versions through 2.3.3-beta0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in th...

CVE-2008-4626

Directory traversal vulnerability in index.php in Fritz Berger yet another php photo album - next generation yappa-ng 2.3.2 and possibly other versions through 2.3.3-beta0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in th...

CVE-2008-4632

Multiple directory traversal vulnerabilities in index.php in Kure 0.6.3, when magicquotesgpc is disabled, allow remote attackers to read and possibly execute arbitrary local files via a .. dot dot in the 1 post and 2 doc parameters...

CVE-2008-4483

Directory traversal vulnerability in index.php in Crux Gallery 1.32 and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the theme parameter...

LanSuite 3.3.2 (fckeditor) Arbitrary File Upload Exploit

No description provided by source. !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print INTRO; +++++++++++++++++++++++++++++++++++++++++++++++++++++ + LanSuite 3.3.2 fckeditor Arbitrary File Upload + + + + By: Stack +...

CVE-2008-4082

SQL injection vulnerability in the Tasks plugin in Brim 2.0.0, when magicquotesgpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via an arbitrary field in a search action to index.php...

GeekLog 1.5.0 - Arbitrary File Upload

GeekLog 1.5.0 - Arbitrary File Upload !/usr/bin/perl use warnings; use strict; use LWP::UserAgent; use HTTP::Request::Common; print ; print "Enter File Pathpath to local file to upload: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST...

Directory traversal

Directory traversal vulnerability in index.php in the Contact module in Chupix CMS 0.1.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the mods parameter. NOTE: the provenance of this information is unknown; the details...