VP-ASP Shopping Cart 6.50 - ShopContent.asp Cross-Site Scripting

VP-ASP Shopping Cart 6.50 - ShopContent.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/24033/info VP-ASP Shopping Cart is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue t...

vBulletin 3.6.6 - calendar.php HTML Injection

vBulletin 3.6.6 - calendar.php HTML Injection source: https://www.securityfocus.com/bid/24020/info vBulletin is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML...

taltech-overflow.txt

Taltech Tal Bar Code ActiveX Control Buffer Overflow Exploit - By Umesh Wanve targetFile = "C:\Program Files\TAL Bar Code ActiveX Demo\TALBarCd.OCX" prototype = "Sub SaveBarCode ByVal FileName As String " memberName = "SaveBarCode" progid = "TALBarCode.TALBarCd" argCount = 1...

incredimail-overflow.txt

IncrediMail IMMenuShellExt ActiveX Control Buffer Overflow Exploit - By Umesh Wanve shellcode=unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36"...

Campsite 2.6.1 - IPAccess.php?g_documentRoot Remote File Inclusion

Campsite 2.6.1 - IPAccess.php?gdocumentRoot Remote File Inclusion source: https://www.securityfocus.com/bid/23874/info Campsite is prone to multiple remote file-include vulnerabilities. Exploiting this issue allows remote attackers to execute code in the context of the webserver. This issue affec...

Campsite 2.6.1 - SubscriptionDefaultTime.php?g_documentRoot Remote File Inclusion

Campsite 2.6.1 - SubscriptionDefaultTime.php?gdocumentRoot Remote File Inclusion source: https://www.securityfocus.com/bid/23874/info Campsite is prone to multiple remote file-include vulnerabilities. Exploiting this issue allows remote attackers to execute code in the context of the webserver...

Taltech Tal Bar Code - ActiveX Control Buffer Overflow

Taltech Tal Bar Code - ActiveX Control Buffer Overflow Taltech Tal Bar Code ActiveX Control Buffer Overflow Exploit - By Umesh Wanve targetFile = "C:\Program Files\TAL Bar Code ActiveX Demo\TALBarCd.OCX" prototype = "Sub SaveBarCode ByVal FileName As String " memberName = "SaveBarCode" progid =...

Campsite 2.6.1 - 'ArticleData.php?g_documentRoot' Remote File Inclusion

source: https://www.securityfocus.com/bid/23874/info Campsite is prone to multiple remote file-include vulnerabilities. Exploiting this issue allows remote attackers to execute code in the context of the webserver. This issue affects Campsite 2.6.1. Earlier versions may also be affected...

IncrediMail IMMenuShellExt ActiveX Control Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================== IncrediMail IMMenuShellExt ActiveX Control Buffer Overflow Exploit ================================================================== IncrediMail IMMenuShellExt ActiveX...

Campsite 2.6.1 - 'UserType.php?g_documentRoot' Remote File Inclusion

source: https://www.securityfocus.com/bid/23874/info Campsite is prone to multiple remote file-include vulnerabilities. Exploiting this issue allows remote attackers to execute code in the context of the webserver. This issue affects Campsite 2.6.1. Earlier versions may also be affected...

Campsite 2.6.1 - 'Publication.php?g_documentRoot' Remote File Inclusion

source: https://www.securityfocus.com/bid/23874/info Campsite is prone to multiple remote file-include vulnerabilities. Exploiting this issue allows remote attackers to execute code in the context of the webserver. This issue affects Campsite 2.6.1. Earlier versions may also be affected...

Campsite 2.6.1 - ArticleImage.php?g_documentRoot Remote File Inclusion

Campsite 2.6.1 - ArticleImage.php?gdocumentRoot Remote File Inclusion source: https://www.securityfocus.com/bid/23874/info Campsite is prone to multiple remote file-include vulnerabilities. Exploiting this issue allows remote attackers to execute code in the context of the webserver. This issue...

Campsite 2.6.1 - 'IPAccess.php?g_documentRoot' Remote File Inclusion

source: https://www.securityfocus.com/bid/23874/info Campsite is prone to multiple remote file-include vulnerabilities. Exploiting this issue allows remote attackers to execute code in the context of the webserver. This issue affects Campsite 2.6.1. Earlier versions may also be affected...

FipsCMS 2.1 - 'pid' SQL Injection

source: https://www.securityfocus.com/bid/23850/info fipsCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data,...

ipix-overflow.txt

targetFile = "C:\test\iPIX-ImageWell-ipix\iPIX-ImageWell-ipix.dll" prototype = "Function CreateMediaGroup ByVal bUserID As String , ByVal bPassword As String , ByVal bGroupHandle As String , ByVal NumElements As Integer , ByVal bServiceType As String , ByVal bIPAddr As String As Integer" memberNa...

CMS Made Simple 1.0.5 - 'Stylesheet.php' SQL Injection

source: https://www.securityfocus.com/bid/23753/info CMS Made Simple is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modi...

Fenice Oms server 1.10 - exec-shield Remote Buffer Overflow

/ Fedora Core 6 exec-shield based Fenice OMS server fenice-1.10.tar.gz remote root exploit by Xpl017Elz Advanced exploitation in exec-shield Fedora Core case study URL: http://x82.inetcop.org/h0me/papers/FCexploit/FCexploit.txt Reference: https://www.securityfocus.com/bid/17678 vendor:...

IPIX Image Well - ActiveX 'iPIX-ImageWell-ipix.dll' Remote Buffer Overflow

targetFile = "C:\test\iPIX-ImageWell-ipix\iPIX-ImageWell-ipix.dll" prototype = "Function CreateMediaGroup ByVal bUserID As String , ByVal bPassword As String , ByVal bGroupHandle As String , ByVal NumElements As Integer , ByVal bServiceType As String , ByVal bIPAddr As String As Integer" memberNa...

plesk 8.1.1 - 'login.php3' Directory Traversal

source: https://www.securityfocus.com/bid/23639/info Plesk is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected...

DynaTracker 1.5.1 - 'action.php?base_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/23667/info DynaTracker is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...