Calendar Express 2 SQL injection

====================================== DISCOVERED BY: CrAzY CrAcKeR Site:www.alshmokh.com I want to thank my friend:- nono225-mHOn-rageh-LoverHacker-Breeeeh BoNym-Rootshill-LiNuXrOOt-SauDiVirUs ====================================== Example: /print/month.php?cid=&catid=SQL /print/month.php?cid=SQ...

Calendar Express 2.2 - month.php SQL Injection

Calendar Express 2.2 - month.php SQL Injection source: https://www.securityfocus.com/bid/18314/info Calendar Express is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful...

Calendar Express 2.2 - 'month.php' SQL Injection

source: https://www.securityfocus.com/bid/18314/info Calendar Express is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise...

CVE-2006-2766

Buffer overflow in INETCOMM.DLL, as used in Microsoft Internet Explorer 6.0 through 6.0 SP2, Windows Explorer, Outlook Express 6, and possibly other programs, allows remote user-assisted attackers to cause a denial of service application crash via a long mhtml URI in the URL value in a URL file...

Buffer overflow

Buffer overflow in INETCOMM.DLL, as used in Microsoft Internet Explorer 6.0 through 6.0 SP2, Windows Explorer, Outlook Express 6, and possibly other programs, allows remote user-assisted attackers to cause a denial of service application crash via a long mhtml URI in the URL value in a URL file...

SSH IPSEC Express 4.1.1 VPN Detection

Binary data 3566.prm...

SSH IPSEC Express 5.0 VPN Detection

Binary data 3567.prm...

SSH IPSEC Express 5.1.0 VPN Detection

Binary data 3569.prm...

SSH IPSEC Express 5.1.1 VPN Detection

Binary data 3570.prm...

FileProtection101.txt

FileProtection Express = 1.0.1 authentification bypass Discovered by: Nomenumbra Date: 5/2/2006 impact:high privilege escalation,full file access Ok, this is absurd, the only form of authentification to the Admin panel is controlled by a cookie value. Use firefox CookieEditor extension for exampl...

Authentication flaw

FileProtection Express 1.0.1 and earlier allows remote attackers to bypass authentication via a cookie with an Admin value of 1...

Design/Logic Flaw

Unspecified vulnerability in the HTTP management interface in Cisco Unity Express CUE 2.22 and earlier, when running on any CUE Advanced Integration Module AIM or Network Module NM, allows remote authenticated attackers to reset the password for any user with an expired password...

CVE-2006-2166

Unspecified vulnerability in the HTTP management interface in Cisco Unity Express CUE 2.22 and earlier, when running on any CUE Advanced Integration Module AIM or Network Module NM, allows remote authenticated attackers to reset the password for any user with an expired password...

CVE-2006-2168

FileProtection Express 1.0.1 and earlier allows remote attackers to bypass authentication via a cookie with an Admin value of 1...

CVE-2006-2168

FileProtection Express 1.0.1 and earlier allows remote attackers to bypass authentication via a cookie with an Admin value of 1...

CVE-2006-2166

CVE-2006-2166 affects Cisco Unity Express (CUE) 2.2(2) and earlier when running on any CUE AIM or NM. The HTTP management interface contains an unspecified vulnerability that allows remote authenticated attackers to reset the password for any user with an expired password. The connected documents...

CVE-2006-2166

Unspecified vulnerability in the HTTP management interface in Cisco Unity Express CUE 2.22 and earlier, when running on any CUE Advanced Integration Module AIM or Network Module NM, allows remote authenticated attackers to reset the password for any user with an expired password...

CVE-2006-2168

CVE-2006-2168 affects FileProtection Express 1.0.1 and earlier. The vulnerability allows remote attackers to bypass authentication by presenting a cookie with an Admin value of 1. The available connected records confirm the affected product/version and the root cause (cookie-based admin flag bypa...

Outlook Express NNTP LIST buffer overflow

Added: 05/04/2006 CVE: CVE-2005-1213 BID: 13951 OSVDB: 17306 Background Outlook Express is a free e-mail client which is included in Windows operating systems. Problem A buffer overflow in Outlook Express allows command execution when processing responses from NNTP servers to LIST commands...

Outlook Express NNTP LIST buffer overflow

Added: 05/04/2006 CVE: CVE-2005-1213 BID: 13951 OSVDB: 17306 Background Outlook Express is a free e-mail client which is included in Windows operating systems. Problem A buffer overflow in Outlook Express allows command execution when processing responses from NNTP servers to LIST commands...