Joomla Component acctexp <= 0.12.x Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " Joomla Component acctexp Blind SQL Injection Exploit \n"; print " Author:His0k4 ALGERIAN HaCkeR \n"; print " &nb...

Dot Net Nuke (DNN) <= 4.8.3 XSS Vulnerability

www.BugReport.ir AmnPardaz Security Research Team Title: Dot Net Nuke DNN XSS Vulnerability. Vendor: www.dotnetnuke.com Vulnerable Version: 4.8.3 and prior versions Exploit: N/A Impact: Low Fix: N/A Original Advisory: http://bugreport.ir/index.php?/38 1. Description: DotNetNuke is an open source...

Unfixed XSS vulnerability at search.everyzing.com

Security researcher SeYMeN, has submitted on 23/05/2008 a cross-site-scripting XSS vulnerability affecting search.everyzing.com, which at the time of submission ranked 44762 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/05/2008. It is...

RDdbenum.py.txt

!/usr/bin/env python un-comment your selection. import urllib2 import urllib import string import getopt import sys def banner: print print "RED DOT CMS 7.5 database enumeration" print "by Mark Crowther and Rodrigo Marcos" def usage: print print "usage:" print "python RDPOC.py options URL" print...

Directory traversal

Directory traversal vulnerability in the NeffyLauncher 1.0.5 ActiveX control NeffyLauncher.dll in CDNetworks Nefficient Download allows remote attackers to download arbitrary code onto a client system via a .. dot dot in the SkinPath parameter and a .zip URL in the HttpSkin parameter. NOTE: this...

CVE-2003-1545

The CVE-2003-1545 case concerns Nukestyles.com viewpage.php addon for PHP-Nuke, where an absolute path traversal allows remote reading of arbitrary files via the file parameter. The underlying cause is lack of input filtering in the viewpage.php component of the addon, not the core PHP-Nuke produ...

Dvbbs8. 1 0DAY(through the kill access and mssql version-bug warning-the black bar safety net

Author:Tr4c3at1 2 6dotCoM http://www.nspcn.org http://www.tr4c3.com I have the honour to in this document to the at my wife is not around when with me YY,see AV n37p47ch,King,murong the rain and the BK instantly group all the screwing around with. These days is really boring very, Ah, the night...

CVE-2007-6653

Directory traversal vulnerability in download.php in Mihalism Multi Host 2.0.7 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2007-6528

Directory traversal vulnerability in tiki-listmovies.php in TikiWiki before 1.9.9 allows remote attackers to read arbitrary files via a .. dot dot and modified filename in the movie parameter...

CVE-2007-6483

Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.0.0 through 7.4.0 and possibly earlier versions, and Sentinel Keys Server 1.0.3 and possibly earlier versions, allows remote attackers to read arbitrary files via a .. dot dot in the query string...

JVN#90712589 Multiple Cybozu products vulnerable to cross-site scripting

Multiple Cybozu products are vulnerable to cross-site scripting. This vulnerability is different from JVN50342989. Impact An arbitrary script can be executed on the user's web browser. Solution Update the Software Apply the latest updates provided by the vendor. Products Affected Cybozu Office 6....

JVN#50342989 Multiple Cybozu products vulnerable to cross-site scripting

Multiple Cybozu products are vulnerable to cross-site scripting. This vulnerability is different from JVN90712589. Impact An arbitrary script can be executed on the user's web browser. Solution Update the Software Apply the latest updates provided by the vendor. Products Affected Cybozu Office 6....

MWOpen E-Commerce - 'leggi_commenti.asp' SQL Injection

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- MWOpen...

DEBIAN-CVE-2007-4829

Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences...

CVE-2002-2403: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in KeyFocus web server 1.0.8 allows remote attackers to read arbitrary files for recognized MIME type files via "...", "....", ".....", and other multiple dot sequences...

CVE-2004-2745

Directory traversal vulnerability in Anteco Visual Technologies OwnServer 1.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in a URL...

CVE-2002-2351

Eudora 5.1 allows remote attackers to bypass security warnings and possibly execute arbitrary code via attachments with names containing a trailing "." dot...

CVE-2003-1408

Lotus Domino Server 5.0 and 6.0 allows remote attackers to read the source code for files via an HTTP request with a filename with a trailing dot...

CVE-2003-1408: Exposure of Sensitive Information to an Unauthorized Actor

Lotus Domino Server 5.0 and 6.0 allows remote attackers to read the source code for files via an HTTP request with a filename with a trailing dot...

Unfixed XSS vulnerability at dot-it.com

Security researcher BackDoor, has submitted on 23/09/2007 a cross-site-scripting XSS vulnerability affecting dot-it.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/09/2007. It is currently unfixe...