WebTester 5.0.20060927 - typeID SQL Injection

WebTester 5.0.20060927 - typeID SQL Injection source: https://www.securityfocus.com/bid/22559/info WebTester is prone to multiple input-validation issues, including multiple cross-site scripting and multiple SQL-injection issues, because the application fails to properly sanitize user-supplied...

Fullaspsite ASP Hosting Site - 'listmain.asp?cat' Cross-Site Scripting

source: https://www.securityfocus.com/bid/22545/info Fullaspsite Shop is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize user-supplied input. A successful exploit of these...

Tagit! Tagit2b 2.1.B Build 2 - CONFIGerrmsg.inc.php?configpath Remote File Inclusion

Tagit! Tagit2b 2.1.B Build 2 - CONFIGerrmsg.inc.php?configpath Remote File Inclusion source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues...

Tagit! Tagit2b 2.1.B Build 2 - tagminverify.php?configpath Remote File Inclusion

Tagit! Tagit2b 2.1.B Build 2 - tagminverify.php?configpath Remote File Inclusion source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may...

WordPress 1.x2.0.x - Templates.php Cross-Site Scripting

WordPress 1.x2.0.x - Templates.php Cross-Site Scripting source: https://www.securityfocus.com/bid/22534/info WordPress is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

[Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers)

There is an interesting logic flaw in Mozilla Firefox web browser. The vulnerability allows the attacker to silently redirect focus of selected key press events to an otherwise protected file upload form field. This is possible because of how onKeyDown / onKeyPress events are handled, allowing th...

[Full-disclosure] Firefox/MSIE focus stealing vulnerability - clarification

After some research, I can offer this clarification: 1 The MSIE 7 attack vector I described is a distinctive, new vulnerability that differs from the attack reported by Charles McAuley and Bart van Arnhem. Attacks described by them were fixed in MSIE7 although MSIE6 is still exposed to the origin...

oracle-sql.txt

!/usr/bin/perl Remote Oracle dbmsexportextension exploit any version Grant or revoke dba permission to unprivileged user Tested on Oracle 10g - Release 10.2.0.1.0 Oracle 9i - Release 9.2.0.2.0 REF: http://www.securityfocus.com/bid/17699 AUTHOR: Andrea "bunker" Purificato...

Oracle 9i/10g DBMS_EXPORT_EXTENSION SQL Injection Exploit

No description provided by source. !/usr/bin/perl Remote Oracle dbmsexportextension exploit any version Grant or revoke dba permission to unprivileged user Tested on Oracle 10g - Release 10.2.0.1.0 Oracle 9i - Release 9.2.0.2.0 REF: http://www.securityfocus.com/bid/17699 AUTHOR: Andrea "bunker"...

Oracle 9i/10g - DBMS_EXPORT_EXTENSION SQL Injection

!/usr/bin/perl Remote Oracle dbmsexportextension exploit any version Grant or revoke dba permission to unprivileged user Tested on Oracle 10g - Release 10.2.0.1.0 Oracle 9i - Release 9.2.0.2.0 REF: https://www.securityfocus.com/bid/17699 AUTHOR: Andrea "bunker" Purificato...

PortailPHP 2 - '/mod_search/index.php?chemin' Remote File Inclusion

source: https://www.securityfocus.com/bid/22381/info PortailPHP is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on an affected...

CA BrightStor ARCserve (lgserver.exe) Remote Stack Overflow Exploit

No description provided by source. !/usr/bin/python Remote exploit for the CA BrightStor Arcserve stack overflow as described in http://www.securityfocus.com/archive/1/458648/30/0/threaded Winny Thomas ;- Author shall bear no responsibility for any screw ups caused by using this code import os...

Microsoft Help Workshop .CNT file buffer overflow

Added: 01/31/2007 CVE: CVE-2007-0352 BID: 22100 OSVDB: 31898 Background Microsoft Help Workshop is a standard component of Microsoft Visual Studio and is also available as a standalone product. Problem A buffer overflow vulnerability in Microsoft Help Workshop allows command execution when a user...

Microsoft Help Workshop .HPJ file HLP field buffer overflow

Added: 01/26/2007 CVE: CVE-2007-0427 BID: 22135 OSVDB: 31899 Background Microsoft Help Workshop is a standard component of Microsoft Visual Studio and is also available as a standalone product. Problem A buffer overflow vulnerability in Microsoft Help Workshop allows command execution when a user...

Yahoo! Messenger 8.0 - Notification Message HTML Injection

Yahoo! Messenger 8.0 - Notification Message HTML Injection source: https://www.securityfocus.com/bid/22269/info Yahoo! Messenger is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

Apple Mac OSX 10.4.x - Software Update Format String

source: https://www.securityfocus.com/bid/22222/info Apple Software Update is prone to a format-string vulnerability. This issue presents itself because the application fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. A...

3Com TFTP Service <= 2.0.1 Remote Buffer Overflow Exploit (meta)

Exploit for unknown platform in category remote exploits ================================================================ 3Com TFTP Service 'TFTP Server 3CTftpSvc Buffer Overflow Vulnerability', 'Version' = '$ 1.0 $', 'Authors' = 'Enseirb ', , 'Description' = Pex::Text::Freeformqq This...

3Com TFTP Service (3CTftpSvc) 2.0.1 - Remote Buffer Overflow (Metasploit)

3Com TFTP Service 3CTftpSvc 2.0.1 - Remote Buffer Overflow Metasploit package Msf::Exploit::3comtftplongmode; use strict; use base "Msf::Exploit"; use Pex::Text; use IO::Socket; my $advanced = ; my $info = 'Name' = 'TFTP Server 3CTftpSvc Buffer Overflow Vulnerability', 'Version' = '$ 1.0 $',...

ArsDigita Community System 3.4.x - Directory Traversal

source: https://www.securityfocus.com/bid/22121/info ArsDigita Community System is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the conte...

Indexu 5.05.3 - power_search.php Multiple Cross-Site Scripting Vulnerabilities

Indexu 5.05.3 - powersearch.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/22084/info Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...