CVE-2007-0901

Multiple cross-site scripting XSS vulnerabilities in Info pages in MoinMoin 1.5.7 allow remote attackers to inject arbitrary web script or HTML via the 1 hitcounts and 2 general parameters, different vectors than CVE-2007-0857. NOTE: the provenance of this information is unknown; the details are...

CVE-2007-0901

Removed by vendor...

MS-RPC - General Settings

...

PT-2007-2342

Name of the Vulnerable Software and Affected Versions: MoinMoin version 1.5.7 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the hitcounts and general parameters in Info pages. This can be exploited through different vectors. Recommendations: For MoinMoi...

CVE-2007-0901: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Info pages in MoinMoin 1.5.7 allow remote attackers to inject arbitrary web script or HTML via the 1 hitcounts and 2 general parameters, different vectors than CVE-2007-0857. NOTE: the provenance of this information is unknown; the details are...

webSPELL 4.01.02 - 'gallery.php' Blind SQL Injection

allowredirection1; $xpl-cookiejar1; function istrue$xpl,$host,$path,$prefix,$gid,$pid,$uid,$i,$h $xpl-get"http://".$host.$path."gallery.php?action=window&galleryID=".$gid."&picID=".$pid."%20AND%20MIDSELECT%20password%20FROM%20".$prefix."user%20WHERE%20userID=".$uid.",".$i.",1=CHAR".$h."";...

Cahier de texte 2.2 Bypass General Access Protection Exploit

No description provided by source. ? / Informations ============ Affected.scr..: Cahier de texte V2.2 last version Poc.ID........: 17061224 Type..........: Bypass general access restriction Risk.level....: High Conditions....: None Src.download..: www.etab.ac-caen.fr/bsauveur/cahierdetexte/...

Cahier de texte 2.2 - Bypass General Access Protection

Cahier de texte 2.2 - Bypass General Access Protection 'Administrateur' header"Location: ../index.php"; ; else header"Location: ../index.php";? ... / if!isset$GET'host' || empty$GET'host' headers; if!isset$GET'wanted' $wanted = 'index.php'; $host = $GET'host'; $prox = $GET'prox'; $path =...

Cahier de texte 2.2 Bypass General Access Protection Exploit

Exploit for unknown platform in category web applications ============================================================ Cahier de texte 2.2 Bypass General Access Protection Exploit ============================================================ 'Administrateur' header"Location: ../index.php"; ; else...

Cahier de texte 2.2 - Bypass General Access Protection

'Administrateur' header"Location: ../index.php"; ; else header"Location: ../index.php";? ... / if!isset$GET'host' || empty$GET'host' headers; if!isset$GET'wanted' $wanted = 'index.php'; $host = $GET'host'; $prox = $GET'prox'; $path = $GET'path'; echo...

CVE-2006-6206

SQL injection vulnerability in item.asp in WarHound General Shopping Cart allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

CVE-2006-6206

CVE-2006-6206 affects WarHound General Shopping Cart, where an SQL injection vulnerability exists in item.asp via the ItemID parameter. The underlying issue allows remote attackers to execute arbitrary SQL commands. Documentation provides no explicit patch/version or mitigation steps; exploitatio...

CVE-2006-6206

SQL injection vulnerability in item.asp in WarHound General Shopping Cart allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

CVE-2006-6206: Undefined Security Weakness

SQL injection vulnerability in item.asp in WarHound General Shopping Cart allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

aria-general.txt

Aria-Security Team Advisory ----------------------------------------------------------- Software: General Shopping Cart Method: SQL Injection Vendor:http://warhound.com PoC: http://target/item.asp?ItemID=SQL Injection Contact: [email protected]...

traceroute Local Root Exploit

No description provided by source. / MasterSecuritY www.mastersecurity.fr openwall.c - Local root exploit in LBNL traceroute Copyright C 2000 Michel "MaXX" Kaempf [email protected] Updated versions of this exploit and the corresponding advisory will be made available at:...

phpBBXS2.txt

SolpotCrew Community phpBB XS 2 spain version phpbbrootpath Remote File Inclusion Download : http://www.elanzuelo.es/phpbb.tar.gz Bug Found By :Solpot a.k.a k. Hasibuan 28-09-2006 contact: [email protected] Website : http://www.nyubicrew.org/adv/solpot-adv-10.txt Greetz: choi , h4ntu ,...

DEBIAN-CVE-2006-5051

Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service crash, and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free...

CVE-2006-3442

Unspecified vulnerability in Pragmatic General Multicast PGM in Microsoft Windows XP SP2 and earlier allows remote attackers to execute arbitrary code via a crafted multicast message...

CVE-2006-3442: Improper Control of Generation of Code

Unspecified vulnerability in Pragmatic General Multicast PGM in Microsoft Windows XP SP2 and earlier allows remote attackers to execute arbitrary code via a crafted multicast message...