nginx 0.7.61 WebDAV directory traversal

Exploit for unknown platform in category remote exploits ======================================= nginx 0.7.61 WebDAV directory traversal ======================================= Title: nginx 0.7.61 WebDAV directory traversal CVE-ID: OSVDB-ID: Author: Kingcope Published: 2009-09-23 Verified: yes vi...

Nginx 0.7.61 - WebDAV Directory Traversal

Bug Title: nginx webdav copy/move method directory traversal Program: nginx Version: nginx/0.7.61 - other versions may also be affected Website: http://sysoev.ru/nginx/ Severity: Low Date discovered: 23 September 2009 The webdav component has to be enabled and the user has to have permission to u...

mozilla-firefox

New mozilla-firefox packages are available for Slackware 12.2, 13.0, and -current to fix security issues. The Firefox 3.0.14 package may also be used with Slackware 11.0 or newer. More details about the issues may be found on the Mozilla website:...

Apache Site Hacked Through SSH Key Compromise

The main site of the Apache Software Foundation was compromised on Friday through an attack using a compromised SSH key, leading to concerns about the integrity of copies of the hugely popular Apache Web server, which is distributed through the Apache.org site. Early Friday morning EDT, a message...

Geeklog <= 1.6.0sr1 Remote Arbitrary File Upload Vulnerability

No description provided by source. ============================================================================== Geeklog = v1.6.0sr1 - Remote Arbitrary File Upload Software Site: http://www.geeklog.net Dork: "By Geeklog" "Created this page in" +seconds +powered inurl:publichtml...

Geeklog <= 1.6.0sr1 Remote Arbitrary File Upload Vulnerability

Exploit for unknown platform in category web applications ============================================================== Geeklog = 1.6.0sr1 Remote Arbitrary File Upload Vulnerability ==============================================================...

Geeklog 1.6.0sr1 - Arbitrary File Upload

Geeklog 1.6.0sr1 - Arbitrary File Upload ============================================================================== Geeklog = v1.6.0sr1 - Remote Arbitrary File Upload Software Site: http://www.geeklog.net Dork: "By Geeklog" "Created this page in" +seconds +powered inurl:publichtml...

Geeklog 1.6.0sr1 - Arbitrary File Upload

============================================================================== Geeklog = v1.6.0sr1 - Remote Arbitrary File Upload Software Site: http://www.geeklog.net Dork: "By Geeklog" "Created this page in" +seconds +powered inurl:publichtml...

Geeklog 1.6.0sr1 File Upload

============================================================================== Geeklog with the URL of the Geeklog site. Opens an interactive browser session where you can create directories and upload files. This also exposes all the files in the images/Library/File|Image|Media|Flash directories...

Geeklog &lt;- 1.6.0sr1 - Remote Arbitrary File Upload

============================================================================== Geeklog = v1.6.0sr1 - Remote Arbitrary File Upload Software Site: http://www.geeklog.net Dork: "By Geeklog" "Created this page in" +seconds +powered inurl:publichtml...

Sql injection

Multiple SQL injection vulnerabilities in header.php in Scripteen Free Image Hosting Script 2.3 allow remote attackers to execute arbitrary SQL commands via a 1 cookid or 2 cookgid cookie...

CVE-2009-2892

CVE-2009-2892 affects Scripteen Free Image Hosting Script 2.3, where header.php is vulnerable to SQL injection via the cookid or cookgid cookies. Remote attackers could potentially execute arbitrary SQL commands. The NVD entry lists a base score of 7.5 (HIGH) with network attack vector and no aut...

CVE-2009-2892

Multiple SQL injection vulnerabilities in header.php in Scripteen Free Image Hosting Script 2.3 allow remote attackers to execute arbitrary SQL commands via a 1 cookid or 2 cookgid cookie...

PT-2009-5250 · Scripteen · Scripteen Free Image Hosting Script

Name of the Vulnerable Software and Affected Versions: Scripteen Free Image Hosting Script version 2.3 Description: The issue concerns SQL injection vulnerabilities in the header.php file. Remote attackers can execute arbitrary SQL commands by manipulating the cookid or cookgid cookie...

CVE-2009-2892: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in header.php in Scripteen Free Image Hosting Script 2.3 allow remote attackers to execute arbitrary SQL commands via a 1 cookid or 2 cookgid cookie...

CVE-2008-6939

TurnkeyForms Web Hosting Directory allows remote attackers to bypass authentication and 1 gain administrative privileges by setting the adm cookie to 1 or 2 gain privileges as another user by setting the logged cookie to the target username...

CVE-2008-6941

SQL injection vulnerability in the login functionality in TurnkeyForms Web Hosting Directory allows remote attackers to execute arbitrary SQL commands via the password field...

CVE-2008-6940

TurnkeyForms Web Hosting Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain a database backup via a direct request to admin/backup/db...

Sql injection

SQL injection vulnerability in the login functionality in TurnkeyForms Web Hosting Directory allows remote attackers to execute arbitrary SQL commands via the password field...

CVE-2008-6939

TurnkeyForms Web Hosting Directory allows remote attackers to bypass authentication and 1 gain administrative privileges by setting the adm cookie to 1 or 2 gain privileges as another user by setting the logged cookie to the target username...