1142 matches found
Joomla Component com_ninjarsssyndicator SQL Injection Vulnerability
Exploit for php platform in category web applications =================================================================== Joomla Component comninjarsssyndicator SQL Injection Vulnerability =================================================================== Author : Expl0it Email & msn :...
OpenDocMan 1.2.5 - Cross-Site Scripting / SQL Injection
Security Advisory : Multiple vulnerabilities in OpenDocMan Discovered by == Amol Naik amolnaik4atgmail.com Overview -------------- OpenDocMan is a free document management system DMS designed to comply with ISO 17025 and OIE standard for document management. It features web based access, fine...
Mandrake Security Advisory MDVSA-2009:267 (xmlsec1)
The remote host is missing an update to xmlsec1 announced via advisory MDVSA-2009:267. OpenVAS Vulnerability Test $Id: mdksa2009267.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:267 xmlsec1 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...
Joomla GroupJive 1.8 B4 Remote File Inclusion
No description provided by source. Joomla Component groupjive 1.8 B4 RFI Vulnerability Author : M3NW5 Homepage : http://www.indonesiancoder.com contach : [email protected] Location : INDONESIA Achievo 1.3.4 Information Vendor : http://www.groupjive.org/ Scripts :...
iodined 0.4.2-2 - forged DNS packet Denial of Service
!/usr/bin/perl iodined http://www.wekk.net 2009-04-26 This exploit shuts down the iodined daemon using a forged DNS packet. It works on the last debian stable version 0.4.2-2. It produces a segmentation fault on the daemon side. use IO::Socket; use strict; my $pktheader =...
Next injection protection cross-site scripting request spoofing(CSRF)-vulnerability warning-the black bar safety net
Author: superhei, 出处 :ph4nt0m.org CSRFCross-site Request Forgery,cross-site request cheat in the past year nn2always fire, however, CSRF is very difficult to completely prevent, following some of my Bypass Preventingside note CSRF tricks...... CSRFCross-site Request Forgery,cross-site request che...
CVE-2008-2122
IBM Rational Build Forge 7.0.2 allows remote attackers to cause a denial of service CPU consumption via a port scan, which spawns multiple bfagent server processes that attempt to read data from closed sockets...
Code injection
IBM Rational Build Forge 7.0.2 allows remote attackers to cause a denial of service CPU consumption via a port scan, which spawns multiple bfagent server processes that attempt to read data from closed sockets...
CVE-2008-2122
IBM Rational Build Forge 7.0.2 allows remote attackers to cause a denial of service CPU consumption via a port scan, which spawns multiple bfagent server processes that attempt to read data from closed sockets...
CVE-2008-2122
CVE-2008-2122 affects IBM Rational Build Forge 7.0.2. A port scan can trigger multiple bfagent server processes that attempt to read from closed sockets, causing CPU consumption and a DoS (availability impact). Public references describe the issue as remote, with the impact described as partial (...
Phoenix View CMS Pre Alpha2 - SQL Injection / Local File Inclusion / Cross-Site Scripting
Phoenix View CMS = Pre Alpha2 Multiple Vulnerabilities LFISQLIXSS Found by : tw8 Date : 8.05.2008 Website && Forum : http://rstzone.org && http://rstzone.org/forum/ Bug type : LFI, SQLI & XSS Affected software description: Application : Phoenix View CMS Version : = Pre Alpha2 Vendor :...
IBM Rational Build Forge远程拒绝服务漏洞
BUGTRAQ ID: 29036 IBM Rational Build Forge提供了企业级构建管理和发布管理,能提高软件质量,加速中小企业的软件和系统交付。 Build Forge在处理大量恶意连接时存在漏洞,远程攻击者可能利用此漏洞导致服务不可用。 在使用端口扫描软件检查网络漏洞时,如果端口扫描器在Build Forge代理的端口打开了套接字的话,则扫描器关闭端口后代理应立即关闭套接字,但代理错误的解释了关闭的套接字,仍从已关闭的套接字读取垃圾数据,这可能导致生成大量无限循环的伪造bfagent进程,必须手动杀死这些进程才能保证系统的正常运行。 IBM Rational Buil...
CVE-2008-2088
SQL injection vulnerability in admin/news.php in PHP Forge 3.0 beta 2 allows remote attackers to execute arbitrary SQL commands via the id parameter in the news module to admin.php...
Sql injection
SQL injection vulnerability in admin/news.php in PHP Forge 3.0 beta 2 allows remote attackers to execute arbitrary SQL commands via the id parameter in the news module to admin.php...
CVE-2008-2088
SQL injection vulnerability in admin/news.php in PHP Forge 3.0 beta 2 allows remote attackers to execute arbitrary SQL commands via the id parameter in the news module to admin.php...
CVE-2008-2088
The provided CVE-2008-2088 data describe a SQL injection in PHP Forge 3.0 beta 2, affecting admin/news.php. The vulnerability occurs when crafting the news module’s request to admin.php via the id parameter, enabling remote attackers to execute arbitrary SQL commands. The documents do not specify...
CVE-2008-1930
CVE-2008-1930 affects WordPress 2.5 where cookie authentication relies on a hash of a concatenated string of USERNAME and EXPIRY_TIME. This design allows remote attackers to forge cookies by creating a username that yields the same string, enabling escalation to administrator privileges (cryptogr...
phpforge-sql.txt
========================================================= =============== JIKI TEAM Maroc And YameN =============== ========================================================= Author : jiko email : [email protected] Home : www.no-back.org Script : Forge 3.0 bêta Bug : Remote SQL Injection...
PHP Forge <= 3 beta 2 (id) Remote SQL Injection Vulnerability
No description provided by source. ========================================================= =============== JIKI TEAM Maroc And YameN =============== ========================================================= Author : jiko email : [email protected] Home : www.no-back.org Script : Forge 3.0 b锚ta...
PHP Forge <= 3 beta 2 (id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================= PHP Forge = 3 beta 2 id Remote SQL Injection Vulnerability ============================================================= ========================================================...