Lucene search
K

4143 matches found

exploitpack
exploitpack
added 2008/12/12 12:0 a.m.18 views

Umer Inc Songs Portal Script - id SQL Injection

Umer Inc Songs Portal Script - id SQL Injection || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

0.8AI score
Exploits0
Nmap
Nmap
added 2008/11/06 2:52 a.m.922 views

smb-enum-users NSE Script

Attempts to enumerate the users on a remote Windows system, with as much information as possible, through two different techniques both over MSRPC, which uses port 445 or 139; see smb.lua. The goal of this script is to discover all user accounts that exist on a remote system. This can be helpful...

10CVSS9.4AI score0.99448EPSS
Exploits33
Positive Technologies
Positive Technologies
added 2008/11/06 12:0 a.m.3 views

PT-2008-6149 · Postfix · Postfix

Name of the Vulnerable Software and Affected Versions: Postfix version 2.5.2 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on the /tmp/postfix groups.stdout, /tmp/postfix groups.stderr, and /tmp/postfix groups.message temporary files. The vendor...

6.9CVSS6.4AI score0.00374EPSS
Exploits1References7
xssed
xssed
added 2008/10/26 12:0 a.m.12 views

Unfixed XSS vulnerability at www.learning2008.com

Security researcher xylitol, has submitted on 26/10/2008 a cross-site-scripting XSS vulnerability affecting www.learning2008.com, which at the time of submission ranked 11844287 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/07/2009. It is...

Exploits0References1
Prion
Prion
added 2008/10/07 12:31 a.m.12 views

Sql injection

SQL injection vulnerability in pickusers.php in the groups module in eXtrovert Thyme 1.3 allows remote attackers to execute arbitrary SQL commands via the unamesearch parameter. NOTE: some of these details are obtained from third party information...

7.5CVSS9AI score0.00971EPSS
Exploits1References4Affected Software1
FreeBSD
FreeBSD
added 2008/10/05 12:0 a.m.45 views

dovecot -- ACL plugin bypass vulnerabilities

Timo Sirainen reports in dovecot 1.1.4 release notes: ACL plugin fixes: Negative rights were actually treated as positive rights. 'k' right didn't prevent creating parent/child/child mailbox. ACL groups weren't working...

5CVSS6.5AI score0.01679EPSS
Exploits0
Atlassian
Atlassian
added 2008/10/01 10:56 p.m.23 views

Restrict access to page history to certain users (or groups)

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-13247. panel A customer requested for a new feature to restrict access to page history only to a particular group or certain...

1.7AI score
Exploits0Affected Software1
Atlassian
Atlassian
added 2008/10/01 10:56 p.m.21 views

Restrict access to page history to certain users (or groups)

A customer requested for a new feature to restrict access to page history only to a particular group or certain users...

2.1AI score
Exploits0Affected Software1
Packet Storm
Packet Storm
added 2008/09/03 12:0 a.m.32 views

ajhyipacmereadarticle-sql.txt

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

7.4AI score
Exploits0
seebug.org
seebug.org
added 2008/09/01 12:0 a.m.25 views

Brim 2.0.0 (SQL/XSS) Multiple Remote Vulnerabilities

No description provided by source. || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /...

7.1AI score
Exploits0
UbuntuCve
UbuntuCve
added 2008/08/27 8:41 p.m.23 views

CVE-2008-3789

Samba 3.2.0 uses weak permissions 0666 for the 1 groupmapping.tdb and 2 groupmapping.ldb files, which allows local users to modify the membership of Unix groups...

2.1CVSS7.2AI score0.00533EPSS
Exploits1References1
Prion
Prion
added 2008/08/27 8:41 p.m.23 views

Code injection

Samba 3.2.0 uses weak permissions 0666 for the 1 groupmapping.tdb and 2 groupmapping.ldb files, which allows local users to modify the membership of Unix groups...

2.1CVSS6.3AI score0.00533EPSS
Exploits1References8Affected Software1
OSV
OSV
added 2008/08/27 8:41 p.m.1 views

DEBIAN-CVE-2008-3789

Samba 3.2.0 uses weak permissions 0666 for the 1 groupmapping.tdb and 2 groupmapping.ldb files, which allows local users to modify the membership of Unix groups...

2.1CVSS8.9AI score0.00533EPSS
Exploits1References1
CVE
CVE
added 2008/08/27 8:0 p.m.85 views

CVE-2008-3789

CVE-2008-3789 (Samba 3.2.0): The vulnerability arises from weak permissions (0666) on the group_mapping.tdb and group_mapping.ldb files, enabling local users to modify Unix group memberships. Concrete details in connected docs confirm the affected component/files and the local-privilege consequen...

2.1CVSS5.9AI score0.00533EPSS
Exploits1References8Affected Software1
Packet Storm
Packet Storm
added 2008/07/21 12:0 a.m.30 views

aproxcms-sql.txt

Viva IslaM Viva IslaM Remote SQL injection Vulnerability Aprox CMS Engine V5.1.0.4 index.php page AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...

7.4AI score
Exploits0
Prion
Prion
added 2008/07/09 7:33 p.m.19 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Organic Groups OG module 5.x before 5.x-7.3 and 6.x before 6.x-1.0-RC1, a module for Drupal, allows remote authenticated users, with group owner permissions, to inject arbitrary web script or HTML via unspecified vectors...

3.5CVSS5.6AI score0.00842EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2008/07/09 7:33 p.m.15 views

CVE-2008-3094

The Organic Groups OG module 5.x before 5.x-7.3 and 6.x before 6.x-1.0-RC1, a module for Drupal, allows remote attackers to obtain sensitive information private group names via unspecified vectors...

4.3CVSS6.3AI score0.02041EPSS
Exploits0References4
NVD
NVD
added 2008/07/09 7:33 p.m.21 views

CVE-2008-3095

Cross-site scripting XSS vulnerability in the Organic Groups OG module 5.x before 5.x-7.3 and 6.x before 6.x-1.0-RC1, a module for Drupal, allows remote authenticated users, with group owner permissions, to inject arbitrary web script or HTML via unspecified vectors...

3.5CVSS5.2AI score0.00842EPSS
Exploits0References4
Prion
Prion
added 2008/07/09 7:33 p.m.13 views

Information disclosure

The Organic Groups OG module 5.x before 5.x-7.3 and 6.x before 6.x-1.0-RC1, a module for Drupal, allows remote attackers to obtain sensitive information private group names via unspecified vectors...

4.3CVSS6.8AI score0.02041EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2008/07/09 7:0 p.m.50 views

CVE-2008-3095

The CVE-2008-3095 entry concerns the Organic Groups (OG) module for Drupal. A cross-site scripting (XSS) vulnerability affects OG 5.x before 5.x-7.3 and 6.x before 6.x-1.0-RC1, allowing remote authenticated users with group owner permissions to inject arbitrary web script or HTML via unspecified ...

3.5CVSS5.3AI score0.00842EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder