XM Easy Personal FTP Server 5.2.1 (USER) Format String DoS Exploit

No description provided by source. import sys,os,string import socket import time print "-----------------------------------------------------------------------" print " XM Easy Personal FTP Server 5.2.1 format string Denial of Service" print " url: http://www.dxm2008.com/" print " author: shinna...

XM Easy Personal FTP Server 5.2.1 (USER) Format String DoS Exploit

Exploit for unknown platform in category dos / poc ================================================================== XM Easy Personal FTP Server 5.2.1 USER Format String DoS Exploit ================================================================== import sys,os,string import socket import time...

XM Easy Personal FTP Server 5.2.1 - USER Format String Denial of Service

XM Easy Personal FTP Server 5.2.1 - USER Format String Denial of Service import sys,os,string import socket import time print "-----------------------------------------------------------------------" print " XM Easy Personal FTP Server 5.2.1 format string Denial of Service" print " url:...

Newxooper-php 0.9.1 (mapage.php) Remote File Include Vulnerability

No description provided by source. Newxooper-php v0.9.1chemin Remote File Include Vulnerabilty Download:http://www.easy-script.com/newxoope-091.zip Author:Dr Max Virus Location:Egypt Bug in compteur/mapage.php In Line:37 Vul Code: REQUIRE "$chemin/compteur/mapage.txt"; POC:...

XM Easy Personal FTP Server 5.2.1 - 'USER' Format String Denial of Service

import sys,os,string import socket import time print "-----------------------------------------------------------------------" print " XM Easy Personal FTP Server 5.2.1 format string Denial of Service" print " url: http://www.dxm2008.com/" print " author: shinnai" print " mail:...

Newxooper-PHP 0.9.1 - mapage.php Remote File Inclusion

Newxooper-PHP 0.9.1 - mapage.php Remote File Inclusion Newxooper-php v0.9.1chemin Remote File Include Vulnerabilty Download:http://www.easy-script.com/newxoope-091.zip Author:Dr Max Virus Location:Egypt Bug in compteur/mapage.php In Line:37 Vul Code: REQUIRE "$chemin/compteur/mapage.txt"; POC:...

Newxooper-php v0.9.1(chemin) Remote File Include Vulnerabilty

Newxooper-php v0.9.1chemin Remote File Include Vulnerabilty Download:http://www.easy-script.com/newxoope-091.zip Author:Dr Max Virus Location:Egypt Bug in compteur/mapage.php In Line:37 Vul Code: REQUIRE "$chemin/compteur/mapage.txt"; POC: http://target/path/compteur/mapage.php?chemin=Evil Code...

PHP Easy Download admin/save.php moreinfo Parameter Code Injection

The version of PHP Easy Download installed on the remote host fails to sanitize input to the 'moreinfo' parameter before using it in the 'save.php' script. By sending a specially crafted value, an attacker can store and execute code at the privilege level of the remote web server. %NASLMINLEVEL...

CVE-2006-6072

SQL injection vulnerability in bpg/publicationslist.asp in BPG-InfoTech Easy Publisher and Smart Publisher//Pro 2.7.7 allows remote attackers to execute arbitrary SQL commands via the vjob parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party...

CVE-2006-6072

SQL injection vulnerability in bpg/publicationslist.asp in BPG-InfoTech Easy Publisher and Smart Publisher//Pro 2.7.7 allows remote attackers to execute arbitrary SQL commands via the vjob parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party...

CVE-2006-6072

CVE-2006-6072: SQL injection in BPG-InfoTech Easy Publisher and Smart Publisher/Pro 2.7.7 via the vjob parameter in bpg/publications_list.asp. Root cause: unsafe SQL construction allowing remote execution of arbitrary commands. Impact: remote attacker could execute arbitrary SQL, with partial con...

CVE-2006-6072: Undefined Security Weakness

SQL injection vulnerability in bpg/publicationslist.asp in BPG-InfoTech Easy Publisher and Smart Publisher//Pro 2.7.7 allows remote attackers to execute arbitrary SQL commands via the vjob parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party...

PHP Easy Download file_info/admin/save.php文件远程代码执行漏洞

PHP Easy Download是一款方便易用的下载脚本。 PHP Easy Download在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞以Web进程权限在服务器上执行任意命令。 PHP Easy Download的fileinfo/admin/save.php脚本没有正确验证description、moreinfo、accesses、date和filename参数的输入，允许攻击者通过filename加上字符串“.0”写入Web可访问的文件，导致执行任意PHP代码。漏洞代码如下： fileinfo/admin/save.php， 14-36行： - 14:...

PHP Easy Downloader <= 1.5 (save.php) Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl +------------------------------------------------------------------------------------------- + PHP Easy Download = 1.5 Remote Code Execution Vulnerability +-------------------------------------------------------------------------------------------...

PHP Easy Downloader 1.5 - save.php Remote Code Execution

PHP Easy Downloader 1.5 - save.php Remote Code Execution !/usr/bin/perl +------------------------------------------------------------------------------------------- + PHP Easy Download +------------------------------------------------------------------------------------------- + Details: + PHP Ea...

PHP Easy Downloader <= 1.5 (save.php) Remote Code Execution Exploit

Exploit for unknown platform in category web applications =================================================================== PHP Easy Downloader +------------------------------------------------------------------------------------------- + Details: + PHP Easy Download by default installation...

PHP Easy Downloader 1.5 - 'save.php' Remote Code Execution

!/usr/bin/perl +------------------------------------------------------------------------------------------- + PHP Easy Download +------------------------------------------------------------------------------------------- + Details: + PHP Easy Download by default installation doesn't prevent any o...

CVE-2006-5927

SQL injection vulnerability in cpLogin.asp in ASP Scripter Easy Portal 1.4 and Live Support 1.3 allows remote attackers to execute arbitrary SQL commands via the Password parameter...

CVE-2006-5927

Affected software: ASP Scripter Easy Portal 1.4 and Live Support 1.3. - Vulnerability: SQL injection in cpLogin.asp that allows remote attackers to execute arbitrary SQL commands via the Password parameter. - Root cause: improper handling of the Password parameter leading to SQL command injection...

CVE-2006-5927: Undefined Security Weakness

SQL injection vulnerability in cpLogin.asp in ASP Scripter Easy Portal 1.4 and Live Support 1.3 allows remote attackers to execute arbitrary SQL commands via the Password parameter...