Joomla! Component JD-Wiki 1.0.2 - 'wantedpages.php?MosConfig_absolute_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/24342/info JD-Wiki is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in t...

eSellerate SDK 3.6.5 - 'eSellerateControl365.dll' ActiveX Control Buffer Overflow

source: https://www.securityfocus.com/bid/24300/info eSellerate SDK ActiveX control is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. Successfully exploiting this issue allows remote...

PHP 5.2.3 - EXTSession HTTP Response Header Injection

PHP 5.2.3 - EXTSession HTTP Response Header Injection source: https://www.securityfocus.com/bid/24268/info PHP is prone to an HTTP-response-header-injection vulnerability because it fails to sanitize user-supplied input. An attacker can exploit this issue to inject additional cookie attributes in...

Prototype of an PHP Application 0.1 - param.inc.php?path_inc Remote File Inclusion

Prototype of an PHP Application 0.1 - param.inc.php?pathinc Remote File Inclusion source: https://www.securityfocus.com/bid/24266/info 'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the...

Prototype of an PHP Application 0.1 - identident.inc.php?path_inc Remote File Inclusion

Prototype of an PHP Application 0.1 - identident.inc.php?pathinc Remote File Inclusion source: https://www.securityfocus.com/bid/24266/info 'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the...

Prototype of an PHP Application 0.1 - '/ident/identification.php?path_inc' Remote File Inclusion

source: https://www.securityfocus.com/bid/24266/info 'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application. An attacker may leverage these issues to execute an arbitrary remote file...

Prototype of an PHP Application 0.1 - identloginliste.php?path_inc Remote File Inclusion

Prototype of an PHP Application 0.1 - identloginliste.php?pathinc Remote File Inclusion source: https://www.securityfocus.com/bid/24266/info 'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the...

Prototype of an PHP Application 0.1 - identindex.php?path_inc Remote File Inclusion

Prototype of an PHP Application 0.1 - identindex.php?pathinc Remote File Inclusion source: https://www.securityfocus.com/bid/24266/info 'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the...

Prototype of an PHP Application 0.1 - menumenuprincipal.php?path_inc Remote File Inclusion

Prototype of an PHP Application 0.1 - menumenuprincipal.php?pathinc Remote File Inclusion source: https://www.securityfocus.com/bid/24266/info 'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to th...

PHPLive! 3.2.2 - 'chat.php?sid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24276/info PHP Live! is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Prototype of an PHP Application 0.1 - '/ident/loginliste.php?path_inc' Remote File Inclusion

source: https://www.securityfocus.com/bid/24266/info 'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application. An attacker may leverage these issues to execute an arbitrary remote file...

Prototype of an PHP Application 0.1 - pluginsPHPgaclindex.php?path_inc Remote File Inclusion

Prototype of an PHP Application 0.1 - pluginsPHPgaclindex.php?pathinc Remote File Inclusion source: https://www.securityfocus.com/bid/24266/info 'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to...

Prototype of an PHP Application 0.1 - 'index.php?path_inc' Remote File Inclusion

source: https://www.securityfocus.com/bid/24266/info 'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application. An attacker may leverage these issues to execute an arbitrary remote file...

Buttercup WFM - 'Title' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24269/info Buttercup WFM Web File Manager is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Microsoft IIS 5.1 - Hit Highlighting Authentication Bypass

!/bin/sh NTLM && BASIC AUTH BYPASS : sha0atbadchecksum.net Based on my adv: https://www.securityfocus.com/bid/24105/info CVE-2007-2815 if $ != 2 then printf "USAGE:\t\t$0 \nExample:\t$0 http://www.microsoft.com /en/us/default.aspx\n\n"; exit 0 fi site=$1 protectedObject=$2...

apache2058-rewrite.txt

/ apache mod rewrite exploit win32 By: fabio/b0x oc-192, old CoTS member Vuln details: http://www.securityfocus.com/archive/1/archive/1/443870/100/0/threaded Code: bind shell on port 4445, tested on apache 2.0.58 with modrewrite windows 2003 original exploit http://milw0rm.com/exploits/3680 only...

Apache 2.0.58 mod_rewrite Remote Overflow Exploit (win2k3)

No description provided by source. / apache mod rewrite exploit win32 By: fabio/b0x oc-192, old CoTS member Vuln details: http://www.securityfocus.com/archive/1/archive/1/443870/100/0/threaded Code: bind shell on port 4445, tested on apache 2.0.58 with modrewrite windows 2003...

Dart ZipLite Compression 1.8.5.3 - 'DartZipLite.dll' ActiveX Control Buffer Overflow

source: https://www.securityfocus.com/bid/24099/info The Dart ZipLite Compression ActiveX control is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. Successfully exploiting this issue...

ClonusWiki 0.5 - 'index.php' HTML Injection

source: https://www.securityfocus.com/bid/24101/info ClonusWiki is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would run in the context of t...

Rational Software Hidden Administrator 1.7 Auth Bypass Exploit

Exploit for unknown platform in category remote exploits ============================================================== Rational Software Hidden Administrator 1.7 Auth Bypass Exploit ============================================================== Hidden Administrator Authenticaiton Bypass Exploit...