MamboLaiThai ExtCalThai 0.9.1 - admin_events.php?CONFIG_EXT[LANGUAGES_DIR] Remote File Inclusion

MamboLaiThai ExtCalThai 0.9.1 - adminevents.php?CONFIGEXTLANGUAGESDIR Remote File Inclusion source: https://www.securityfocus.com/bid/20487/info ExtCalThai is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issue...

Buzlas 2006-1 Full - 'Archive_Topic.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20511/info Buzlas is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...

ToendaCMS 1.0.4 - Media.php Directory Traversal

ToendaCMS 1.0.4 - Media.php Directory Traversal source: https://www.securityfocus.com/bid/20170/info toendaCMS is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to access sensitive...

NextAge Cart - index.php Multiple Cross-Site Scripting Vulnerabilities

NextAge Cart - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/20040/info NextAge Cart is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an...

Vikingboard 0.1b - 'help.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19916/info Vikingboard is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal cookie-based authentication credentials and to launch oth...

HLstats 1.34 - index.php Multiple Cross-Site Scripting Vulnerabilities

HLstats 1.34 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/19771/info HLstats is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may help...

HLstats 1.34 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/19771/info HLstats is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may help an attacker steal cookie-based authentication credentials and launch...

Ruby Safe Level security bypass

"alias" can be exploited to replace safe function, directory access protection bypass. Few potentially dangerous methods are not limited...

Microsoft Windows Server Driver Mailslot Remote Heap Buffer Overflow Vulnerability

Description Microsoft Windows Server driver is prone to a remote heap buffer-overflow vulnerability. This issue is due to a failure of the software to properly bounds check user-supplied input prior to copying it to an insufficiently-sized memory buffer. Exploiting this issue allows anonymous,...

CafeLog B2 0.6.1 Weblog and News Publishing Tool - 'b2mail.php?b2inc' Remote File Inclusion

source: https://www.securityfocus.com/bid/23659/info B2 is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are...

xFlow 5.46.11 - index.cgi Multiple Cross-Site Scripting Vulnerabilities

xFlow 5.46.11 - index.cgi Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17614/info xFlow is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in...

ArchAngelFlaw.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 KingOfSka - http://www.cpc.info.ms Contro Potere Crew Advisories 5 26/02/2006 http://www.archangelmgt.com/ Archangel Weblog 0.90.02 Admin Authentication Bypass & Remote File Inclusion 1:. Background : Archangel Weblog is a new, full featured weblog...

GnuPG 1.x - Detached Signature Verification Bypass

GnuPG 1.x - Detached Signature Verification Bypass source: https://www.securityfocus.com/bid/16663/info GnuPG is affected by a detached signature verification-bypass vulnerability because it fails to properly notify scripts that an invalid detached signature was presented and that the verificatio...

Microsoft Windows DTC Remote Exploit (PoC) (MS05-051) (updated)

Exploit for unknown platform in category remote exploits =============================================================== Microsoft Windows DTC Remote Exploit PoC MS05-051 updated =============================================================== / Hard to exploit, isn't it? I have tested it on 10+...

Astaro Security Linux 6.0 - HTTP CONNECT Access Localhost Weakness

Astaro Security Linux 6.0 - HTTP CONNECT Access Localhost Weakness ================================================================== Product: ======== Astaro Security Linux 6.0 is a network security solution, including a combination of the following security applications: - Stateful inspection...

bluecoat7111.txt

Blue Coat Reporter 7.1.1.1 - multiple remote vulnerabilities ============================================================ Blue Coat Reporter ================== "Blue Coat Reporter 7 provides identity-based reporting on Web communications enabling enterprises to evaluate Web policies and manage...

MS Windows Color Management Module Overflow Exploit (MS05-036)

Exploit for unknown platform in category dos / poc ============================================================== MS Windows Color Management Module Overflow Exploit MS05-036 ============================================================== / Author: snooq http://www.redpuffer.net/snooq/web/ Date: 2...

sile002adv.txt

---- sile002 advisory + PoC PRODUCT: PHP-Nuke VERSION: 7.5 but others versions maybe either vulnerables VENDOR: http://www.phpnuke.org VULNERABILITY: Multiple vulnerability RISK: Hight Found by: Silentium of Anacron Group Italy date: 02/05/2005 e-mail: anacrongroupitalyatautisticidotorg myhome:...

eXtropia Shopping Cart web_store.cgi Remote Exploit

No description provided by source. !/usr/bin/perl -w Remote Command Execution Vulnerability In Webstore.cgi SegmentationFault Group Greetz to : Xsupr3mo - failed - Status-x - Stealh - P3S4D3L0 Greetz to : berhooz - nima - ehsan - Unknown OutLaw eutanasia www.ashiyane.com ok setp by setp to work :...