7228 matches found
OSSIM 2.1 - SQL Injection and xss
No description provided by source. OSSIM - Open Source Security Information Management is vulnerable to multiple security vulnerabilities. 1. SQL Injections 2. Linked XSS 3. Unauthorized access Digital Security Research Group DSecRG Advisory DSECRG-09-055 Application: OSSIM Versions Affected: 2.1...
Tagit! Tagit2b 2.1.B Build 2 CONFIG/errmsg.inc.php configpath Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application...
ezContents CMS 2.0.0 - Multiple Remote SQL Injection Vulnerabilities
No description provided by source. ...:::::ezContents CMS Version 2.0.0 SQL Injection Vulnerabilities ::::... Virangar Security Team www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz...
GNU Anubis 3.6.x/3.9.x auth.c auth_ident() Function Overflow
No description provided by source. source: http://www.securityfocus.com/bid/9772/info GNU Anubis has been reported prone to multiple buffer overflow and format string vulnerabilities. It has been conjectured that a remote attacker may potentially exploit these vulnerabilities to have arbitrary co...
myUPB <= 2.2.6 - Multiple Vulnerabilities
No description provided by source. =============== altbta ====================== Name: myUPB = v2.2.6 Multiple Vulnerabilities Download: http://sourceforge.net/projects/textmb/files/UPB/ Vulnerability: CSRF privilege escalation Tested on: 2.2.6 Author : altbta [email protected] Dork: Powered by myUP...
w1l3d4 philboard 1.2 (blind sql/xss) Multiple Vulnerabilities
No description provided by source. + Script Name : philboard v 1.14 Multiple Remote Exploits |+| Team : InjEct0r5 + Author : Bl@ckbe@rD 'Tunisian TerrorisT' ; + Contact : blackbeard-sqlA.Thotmail.fr ; + Dork : Powered by v1.14 powered by philboard v1.14 --//-- + Expl0iT : Remote SQL Injection : -...
fastpublish cms 1.9999 (lfi/sql) Multiple Vulnerabilities
No description provided by source. Author: !DoktOR! Date found: 30.09.08 Product: fastpublish CMS Version: 1.9.9.9.9.d URL: www.fastpublish.de Download: http://www.fastpublish.de/richfiles/attachments/downloads/fastpublish19999dtrial.zip Vulnerability Class: SQL Injection SQL Injection Exploit 1:...
zenphoto 1.4.3.3 - Multiple Vulnerabilities
No description provided by source. waraxe-2012-SA096 - Multiple Vulnerabilities in Zenphoto 1.4.3.3 =============================================================================== Author: Janek Vind waraxe Date: 03. November 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-96.html...
miniwebsvr 0.0.10 - Directory Traversal/Listing Exploits
No description provided by source. miniwebsvr v0.0.10 Directory Traversal/Listing Exploits Found By: DrIDE Date: May 12, 2010 Download: http://sourceforge.net/projects/miniwebsvr/ Tested on: Windows 7 - Description - miniwebsvr v0.0.10 is a Windows based HTTP server. This is the latest version of...
web calendar system <= 3.40 (xss/sql) Multiple Vulnerabilities
No description provided by source. 000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0 0 0 0 0 0 000 0 0 0 ...
PSI CMS 0.3.1 - SQL Injection
No description provided by source. PSI CMS v. 0.3.1 SQLi Vulns By learn3r hacker from nepal [email protected] Product name: psi-cms Product vendor: http://psi.tarakan.eu/ This product suffers from multiple SQLi... + Exploits:...
DynPG CMS 4.1.0 - Multiple Vulnerability (popup.php and counter.php)
No description provided by source. DynPG CMS v4.1.0 Multiple Vulnerability fucking the Web Apps attack edition /\ \ /\ \ /\ /\ \ \ \ \L\ \ \ /'\ /\ \ \ ,\ \ \ \ \ /\ /\ \ /'\ \ , /\ \ /' \ /' \ \ \ /\ \ \ /'\ \ \ /\ \ \ /\ /\ \ \\ \ /\ /\ /\ \L\ \ \ \ \ \ \ \ /\ / \ \ \ /\ \...
Microsoft Internet Explorer 6.0 URL Local Resource Access Weakness
No description provided by source. source: http://www.securityfocus.com/bid/10472/info Microsoft Internet Explorer is prone to a security weakness that may permit unauthorized access to local resources on a client computer. This will effectively bypass security restrictions implemented in Interne...
WebWiz Products (1.0 , <= 3.06) - Login Bypass SQL Injection Exploits
No description provided by source. !-- Vulnerable products : webwiz site news access2000 : vesion 3.06 and prior versions webwiz journal access2000 : version 1.0 webwiz weekly poll access2000 : version 3.06 and prior versions database login access2000 : version 1.71 and prior versions webwiz site...
linux/x86 break chroot setuid(0) + /bin/sh 132 bytes
No description provided by source. / Linux/x86 - setreuid0, 0; - chroot-break make a temp dir with mkdir, chroot to tempdir, go through a loop of chdir..; then a final chroot.; - execve of /bin/sh used in several wu-ftpd, beroftpd and proftpd exploits, amongst others / include stdio.h char c0de =...
Stud.IP <= 1.3.0-2 Multiple Remote File Include Vulnerabilities
No description provided by source. /------------------------------------------------ IHS Public advisory -------------------------------------------------/ Stud.IP Remote File Inclusion Stud.IP is a learning and an information management system for universities, educational facilities and...
bugmall shopping cart 2.5 (sql/xss) Multiple Vulnerabilities
No description provided by source. --==+================================================================================+==-- --==+ BUG MALL SHOPPING CART 2.5 AND PRIOR SQL, XSS, DEFAULT LOGINS VULNERABILITYS +==--...
PHPJabbers Event Booking Calendar 2.0 - Multiple Vulnerabilities
No description provided by source. Event Booking Calendar V2.0 - Multiple Vulnerabilities ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script :...
Winamp <= 5.541 (mp3/aiff) Multiple Denial of Service Exploits
No description provided by source. Winamp = 5.541 multiples Denial of Services MP3/AIFF Winamp MP3 file parsing DoS == !/usr/bin/perl use strict; my $mp3 = \x49\x44\x33\x00\x00\x00\x00\x00\x09\x07\x54\x49\x54\x32\x00\x00\x00\x08\x00\x00\x00...
Microsoft Crypto API X.509 Certificate Validation - Remote Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28548/info Microsoft's Crypto API library is prone to an information-disclosure vulnerability because HTTP requests to arbitrary hosts and ports may be automatically triggered when validating X.509 certificates. Successfu...