Mobilelib Gold - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/21817/info Mobilelib GOLD is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an...

ZoneX 1.0.3 Publishers Gold Edition Remote File Inclusion Vulnerability

No description provided by source. ///////////////////CYBER-WARRiOR.ORG\\\\\\\\\\\ ZoneX 1.0.3 - Publishers Gold Edition Remote File Inclusion Vulnerability - Author: xoron - script: ZoneX 1.0.3 - Publishers Gold Edition - Class : Remote - cont@ct: x0r0nathotmaildotcom - CODE:...

Ipswitch WhatsUp Gold 8.03 Buffer Overflow

This module exploits a buffer overflow in IPswitch WhatsUp Gold 8.03. By posting a long string for the value of 'instancename' in the maincfgret.cgi script an attacker can overflow a buffer and execute arbitrary code on the system. This module requires Metasploit: https://metasploit.com/download...

WhatsUp Gold _maincfgret.cgi instancename buffer overflow

Added: 09/08/2006 CVE: CVE-2004-0798 BID: 11043 OSVDB: 9177 Background WhatsUp Professional formerly WhatsUp Gold is a network mapping and monitoring tool. Problem A buffer overflow in the WhatsUp Gold web interface allows remote command execution by requesting maincfgret.cgi with a long...

WhatsUp Gold _maincfgret.cgi instancename buffer overflow

Added: 09/08/2006 CVE: CVE-2004-0798 BID: 11043 OSVDB: 9177 Background WhatsUp Professional formerly WhatsUp Gold is a network mapping and monitoring tool. Problem A buffer overflow in the WhatsUp Gold web interface allows remote command execution by requesting maincfgret.cgi with a long...

WhatsUp Gold _maincfgret.cgi instancename buffer overflow

Added: 09/08/2006 CVE: CVE-2004-0798 BID: 11043 OSVDB: 9177 Background WhatsUp Professional formerly WhatsUp Gold is a network mapping and monitoring tool. Problem A buffer overflow in the WhatsUp Gold web interface allows remote command execution by requesting maincfgret.cgi with a long...

WhatsUp Gold _maincfgret.cgi instancename buffer overflow

Added: 09/08/2006 CVE: CVE-2004-0798 BID: 11043 OSVDB: 9177 Background WhatsUp Professional formerly WhatsUp Gold is a network mapping and monitoring tool. Problem A buffer overflow in the WhatsUp Gold web interface allows remote command execution by requesting maincfgret.cgi with a long...

PT-2006-5347 · Canyon +3 · Canyon Power File Gold +5

Name of the Vulnerable Software and Affected Versions: BeCubed Compression Plus versions prior to 5.0.1.28 Tumbleweed EMF versions prior to 5.0.1.28 VCOM/Ontrack PowerDesk Pro versions prior to 5.0.1.28 Canyon Drag and Zip versions prior to 5.0.1.28 Canyon Power File versions prior to 5.0.1.28...

CVE-2006-4554

Stack-based buffer overflow in the ReadFile function in the ZOO-processing exports in the BeCubed Compression Plus before 5.0.1.28, as used in products including 1 Tumbleweed EMF, 2 VCOM/Ontrack PowerDesk Pro, 3 Canyon Drag and Zip, 4 Canyon Power File, and 5 Canyon Power File Gold, allow...

CVE-2006-4036

The CVE-2006-4036 issue affects ZoneMetrics ZoneX Publishers Gold Edition 1.0.3 and earlier, where includes/usercp_register.php is vulnerable to PHP remote file inclusion via the phpbb_root_path parameter, enabling arbitrary PHP code execution through a crafted URL. The records provide base detai...

ZoneX 1.0.3 Publishers Gold Edition Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================= ZoneX 1.0.3 Publishers Gold Edition Remote File Inclusion Vulnerability =======================================================================...

ZoneX 1.0.3 - Publishers Gold Edition Remote File Inclusion

ZoneX 1.0.3 - Publishers Gold Edition Remote File Inclusion ///////////////////CYBER-WARRiOR.ORG\\\\\\\\\\\ ZoneX 1.0.3 - Publishers Gold Edition Remote File Inclusion Vulnerability - Author: xoron - script: ZoneX 1.0.3 - Publishers Gold Edition - Class : Remote - cont@ct:...

ZoneX 1.0.3 - Publishers Gold Edition Remote File Inclusion Vulnerability

///////////////////CYBER-WARRiOR.ORG ZoneX 1.0.3 - Publishers Gold Edition Remote File Inclusion Vulnerability - Author: xoron - script: ZoneX 1.0.3 - Publishers Gold Edition - Class : Remote - cont@ct: x0r0nathotmaildotcom - CODE: include$phpbbrootpath . 'newsletter/scripts/subscriptions.' .$php...

radscripts.txt

Products: RadBids Gold, RadLance Gold, RadNics Gold auction products Vendor: RadScripts URL: http://www.radscripts.com/ VULNERABILITY CLASS: Admin login bypass Product Description RadBids was designed to give you all the tools needed to rapidly deploy an ebay style auction web site solution. Our...

Quake 3 Engine Client CG_ServerCommand() Remote Overflow Exploit

No description provided by source. / Quake 3 Engine Client CGServerCommand Remote Stack Overflow Exploit Win32 Written by RunningBon E-Mail: [email protected] IRC: irc.rizon.net kik This is a DLL, which gets injected into the server exe. You will need Microsoft Detours library to compile this...

Ultimate PHP Board <= 1.96 GOLD Multiple Vulnerabilities Exploit

Exploit for unknown platform in category web applications ================================================================ Ultimate PHP Board "; $ikey = ordsubstr$key, $i, 1; // print $i."ikey:".$ikey.""; $itext = ordsubstr$text, $i, 1; // print $i."itext:".$itext.""; $nkey = ordsubstr$key, $i+1...

CVE-2006-2827

SQL injection vulnerability in search.php in X-Cart Gold and Pro 4.0.18, and X-Cart 4.1.0 beta 1, allows remote attackers to execute arbitrary SQL commands via the "Search for pattern" field, when the settings specify only "Search in Detailed description" and "Search also in ISBN." NOTE: the vend...

PT-2006-3745 · X Cart · X-Cart

Name of the Vulnerable Software and Affected Versions: X-Cart Gold and Pro versions 4.0.18 through 4.1.0 beta 1 Description: The issue allows remote attackers to execute arbitrary SQL commands via the "Search for pattern" field in search.php, when the settings specify only "Search in Detailed...

radlance.txt

Discovered And Coded By Mr.CrackerZ Exploit Code !/usr/bin/perl Discovered and coded by Mr.CrackerZ Security Team Contact me [email protected] Usage: radlance.pl Google: Powered by: RadLance Gold v7 Tested Under RadLance Gold v7 Local Inclusion Exploit Example:...

Directory traversal

Directory traversal vulnerability in popup.php in RadScripts RadLance Gold 7.0 allows remote attackers to read arbitrary files via a .. dot dot in the read parameter...