CVE-2007-0901

Multiple cross-site scripting XSS vulnerabilities in Info pages in MoinMoin 1.5.7 allow remote attackers to inject arbitrary web script or HTML via the 1 hitcounts and 2 general parameters, different vectors than CVE-2007-0857. NOTE: the provenance of this information is unknown; the details are...

CVE-2007-0901

Removed by vendor...

MS-RPC - General Settings

...

PT-2007-2342

Name of the Vulnerable Software and Affected Versions: MoinMoin version 1.5.7 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the hitcounts and general parameters in Info pages. This can be exploited through different vectors. Recommendations: For MoinMoi...

webSPELL 4.01.02 - 'gallery.php' Blind SQL Injection

allowredirection1; $xpl-cookiejar1; function istrue$xpl,$host,$path,$prefix,$gid,$pid,$uid,$i,$h $xpl-get"http://".$host.$path."gallery.php?action=window&galleryID=".$gid."&picID=".$pid."%20AND%20MIDSELECT%20password%20FROM%20".$prefix."user%20WHERE%20userID=".$uid.",".$i.",1=CHAR".$h."";...

Cahier de texte 2.2 Bypass General Access Protection Exploit

No description provided by source. ? / Informations ============ Affected.scr..: Cahier de texte V2.2 last version Poc.ID........: 17061224 Type..........: Bypass general access restriction Risk.level....: High Conditions....: None Src.download..: www.etab.ac-caen.fr/bsauveur/cahierdetexte/...

Cahier de texte 2.2 - Bypass General Access Protection

Cahier de texte 2.2 - Bypass General Access Protection 'Administrateur' header"Location: ../index.php"; ; else header"Location: ../index.php";? ... / if!isset$GET'host' || empty$GET'host' headers; if!isset$GET'wanted' $wanted = 'index.php'; $host = $GET'host'; $prox = $GET'prox'; $path =...

Cahier de texte 2.2 Bypass General Access Protection Exploit

Exploit for unknown platform in category web applications ============================================================ Cahier de texte 2.2 Bypass General Access Protection Exploit ============================================================ 'Administrateur' header"Location: ../index.php"; ; else...

Cahier de texte 2.2 - Bypass General Access Protection

'Administrateur' header"Location: ../index.php"; ; else header"Location: ../index.php";? ... / if!isset$GET'host' || empty$GET'host' headers; if!isset$GET'wanted' $wanted = 'index.php'; $host = $GET'host'; $prox = $GET'prox'; $path = $GET'path'; echo...

CVE-2006-6206

SQL injection vulnerability in item.asp in WarHound General Shopping Cart allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

CVE-2006-6206

SQL injection vulnerability in item.asp in WarHound General Shopping Cart allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

CVE-2006-6206

CVE-2006-6206 affects WarHound General Shopping Cart, where an SQL injection vulnerability exists in item.asp via the ItemID parameter. The underlying issue allows remote attackers to execute arbitrary SQL commands. Documentation provides no explicit patch/version or mitigation steps; exploitatio...

aria-general.txt

Aria-Security Team Advisory ----------------------------------------------------------- Software: General Shopping Cart Method: SQL Injection Vendor:http://warhound.com PoC: http://target/item.asp?ItemID=SQL Injection Contact: [email protected]...

traceroute Local Root Exploit

No description provided by source. / MasterSecuritY www.mastersecurity.fr openwall.c - Local root exploit in LBNL traceroute Copyright C 2000 Michel "MaXX" Kaempf [email protected] Updated versions of this exploit and the corresponding advisory will be made available at:...

phpBBXS2.txt

SolpotCrew Community phpBB XS 2 spain version phpbbrootpath Remote File Inclusion Download : http://www.elanzuelo.es/phpbb.tar.gz Bug Found By :Solpot a.k.a k. Hasibuan 28-09-2006 contact: [email protected] Website : http://www.nyubicrew.org/adv/solpot-adv-10.txt Greetz: choi , h4ntu ,...

DEBIAN-CVE-2006-5051

Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service crash, and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free...

CVE-2006-3442

Unspecified vulnerability in Pragmatic General Multicast PGM in Microsoft Windows XP SP2 and earlier allows remote attackers to execute arbitrary code via a crafted multicast message...

Microsoft Windows XP Pragmatic General Multicast memory corruption

Memory corruption on parsing multicast PGM message if Microsoft Message Queuing Services MSMQ service is installed...

MS06-052: Vulnerability in Pragmatic General Multicast (PGM) Could Allow Remote Code Execution (919007)

The remote version of Windows is affected by a vulnerability in the Pragmatic General Multicast protocol installed with the MSMQ service. An attacker may exploit this flaw to execute arbitrary code on the remote host with KERNEL privileges. C Tenable Network Security, Inc. include"compat.inc"; if...

X11R6 6.4 XKEYBOARD (sco x86) - Local Buffer Overflow

X11R6 6.4 XKEYBOARD sco x86 - Local Buffer Overflow / X11R6 XKEYBOARD extension Strcmp for SCO UnixWare 7.1.3 x86 Copyright 2006 RISE Security , Ramon de Carvalho Valle This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as...