1171 matches found
IBM Rational Build Forge远程拒绝服务漏洞
BUGTRAQ ID: 29036 IBM Rational Build Forge提供了企业级构建管理和发布管理，能提高软件质量，加速中小企业的软件和系统交付。 Build Forge在处理大量恶意连接时存在漏洞，远程攻击者可能利用此漏洞导致服务不可用。 在使用端口扫描软件检查网络漏洞时，如果端口扫描器在Build Forge代理的端口打开了套接字的话，则扫描器关闭端口后代理应立即关闭套接字，但代理错误的解释了关闭的套接字，仍从已关闭的套接字读取垃圾数据，这可能导致生成大量无限循环的伪造bfagent进程，必须手动杀死这些进程才能保证系统的正常运行。 IBM Rational Buil...
CVE-2008-2088
SQL injection vulnerability in admin/news.php in PHP Forge 3.0 beta 2 allows remote attackers to execute arbitrary SQL commands via the id parameter in the news module to admin.php...
Sql injection
SQL injection vulnerability in admin/news.php in PHP Forge 3.0 beta 2 allows remote attackers to execute arbitrary SQL commands via the id parameter in the news module to admin.php...
CVE-2008-2088
SQL injection vulnerability in admin/news.php in PHP Forge 3.0 beta 2 allows remote attackers to execute arbitrary SQL commands via the id parameter in the news module to admin.php...
CVE-2008-2088
The provided CVE-2008-2088 data describe a SQL injection in PHP Forge 3.0 beta 2, affecting admin/news.php. The vulnerability occurs when crafting the news module’s request to admin.php via the id parameter, enabling remote attackers to execute arbitrary SQL commands. The documents do not specify...
CVE-2008-1930
CVE-2008-1930 affects WordPress 2.5 where cookie authentication relies on a hash of a concatenated string of USERNAME and EXPIRY_TIME. This design allows remote attackers to forge cookies by creating a username that yields the same string, enabling escalation to administrator privileges (cryptogr...
PHP Forge <= 3 beta 2 (id) Remote SQL Injection Vulnerability
No description provided by source. ========================================================= =============== JIKI TEAM Maroc And YameN =============== ========================================================= Author : jiko email : [email protected] Home : www.no-back.org Script : Forge 3.0 b锚ta...
phpforge-sql.txt
========================================================= =============== JIKI TEAM Maroc And YameN =============== ========================================================= Author : jiko email : [email protected] Home : www.no-back.org Script : Forge 3.0 bêta Bug : Remote SQL Injection...
PHP Forge <= 3 beta 2 (id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================= PHP Forge = 3 beta 2 id Remote SQL Injection Vulnerability ============================================================= ========================================================...
PHP Forge 3 Beta 2 - id SQL Injection
PHP Forge 3 Beta 2 - id SQL Injection ========================================================= =============== JIKI TEAM Maroc And YameN =============== ========================================================= Author : jiko email : [email protected] Home : www.no-back.org Script : Forge 3.0...
PHP Forge 3 Beta 2 - 'id' SQL Injection
========================================================= =============== JIKI TEAM Maroc And YameN =============== ========================================================= Author : jiko email : [email protected] Home : www.no-back.org Script : Forge 3.0 bêta Bug : Remote SQL Injection...
cb075-rfi.txt
Content Builder 0.7.5 RFI Bug Script Home Page : http://www.content-builder.de/ Source Forge Script Link : http://sourceforge.net/projects/content-builder/ Script Download URL : http://www.content-builder.de/modules/download/download.php?id=821 The Content Builder is a powerful German...
Command injection
Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service client disconnect by sending a clientconnect command in a forged packet from the server to a client. NOTE: client IP addresses are available via product-specific queries...
CVE-2006-5462
Mozilla Network Security Service NSS library before 3.11.3, as used in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6, when using an RSA key with exponent 3, does not properly handle extra data in a signature, which allows remote attackers to forge signatur...
CVE-2006-5484
SSH Tectia Client/Server/Connector 5.1.0 and earlier, Manager 2.2.0 and earlier, and other products, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS 1 v1.5 signature that is signed by that RSA key and prevents...
CVE-2006-5484
SSH Tectia Client/Server/Connector 5.1.0 and earlier, Manager 2.2.0 and earlier, and other products, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS 1 v1.5 signature that is signed by that RSA key and prevents...
PHPForge3b2.txt
PHP Forge 3b2 /inc/inc.php Remote File Include Vulnerability Source Code: http://www.comscripts.com/jump.php?action=script&id=697 Vulnerable Code: require$cfgracine."inc/vars.php"; require$cfgracine."inc/config.php"; require$cfgracine."inc/fonctions.php"; require$cfgracine."inc/systeme.php";...
PHP Forge 3b2 (/inc/inc.php) Remote File Include Vulnerability
PHP Forge 3b2 /inc/inc.php Remote File Include Vulnerability Source Code: http://www.comscripts.com/jump.php?action=script&id=697 Vulnerable Code: require$cfgracine."inc/vars.php"; require$cfgracine."inc/config.php"; require$cfgracine."inc/fonctions.php"; require$cfgracine."inc/systeme.php";...
PHP Forge 3b2 (/inc/inc.php) Remote File Include Vulnerability
---- ERNE ---- TheBekir ---- patchlodel-0.7.3 - Remote File Include Vulnerabilities site : Www.Hack-Medya.Org & Www.SavSak.Com Script : http://www.lodel.org/download/patchlodel-0.7.3.zip Credits : TheBekir & ERNE Contact : erne at ernealizm dot com email concealed Thanks : BlackWhite, D3ngszn,...
CVE-2006-5201
Multiple packages on Sun Solaris, including 1 NSS; 2 Java JDK and JRE 5.0 Update 8 and earlier, SDK and JRE 1.4.x up to 1.4.212, and SDK and JRE 1.3.x up to 1.3.119; 3 JSSE 1.0.303 and earlier; 4 IPSec/IKE; 5 Secure Global Desktop; and 6 StarOffice, when using an RSA key with exponent 3, removes...