CVE-2006-2730

The CVE-2006-2730 entry concerns a PHP remote file inclusion vulnerability in Hot Open Tickets (HOT) 11012004_ver2f. When register_globals is enabled, an attacker could abuse the GLOBALS[CLASS_PATH] parameter in admin/lib_action_step.php to include arbitrary files. The vulnerability aligns with a...

CVE-2006-2730: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin/libactionstep.php in Hot Open Tickets HOT 11012004ver2f, when registerglobals is enabled, allows remote attackers to include arbitrary files via the GLOBALSCLASSPATH parameter. NOTE: this issue might be resultant from a global overwrite vulnerabili...

Hot Open Tickets <= 11012004 (CLASS_PATH) Remote Include Vuln

Exploit for unknown platform in category web applications ============================================================= Hot Open Tickets = 11012004 CLASSPATH Remote Include Vuln ============================================================= DEVIL TEAM THE BEST POLISH TEAM HOT Hot Open Tickets...

Hot Open Tickets 11012004 - 'CLASS_PATH' Remote File Inclusion

DEVIL TEAM THE BEST POLISH TEAM HOT Hot Open Tickets hot11012004ver2f - Remote File Include Vulnerabilities Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : Contact: [email protected] or http://www.devilteam.yum.pl Site scripts:...

Let the“fat horse”into“hot pot”-vulnerability warning-the black bar safety net

Preface: In fact, this pony on my computer and feeding the n years. （a conservative estimate of 3 years. ps: my computer what is wall, what anti-virus are no）） Just for this plug thread, never know heteroaryl killed in the TC prawns in the hands of the teachings, finally... One, found With iceswo...

CVE-2005-4364

Cross-site scripting XSS vulnerability in index.cfm in Hot Banana Web Content Management Suite 5.3 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...

CVE-2005-4364

The CVE-2005-4364 entry describes a Cross-site scripting (XSS) vulnerability in the Hot Banana Web Content Management Suite 5.3, specifically in index.cfm where the keywords parameter can be exploited to inject arbitrary web script or HTML. The accompanying data indicates an impact on confidentia...

CVE-2005-4364

Cross-site scripting XSS vulnerability in index.cfm in Hot Banana Web Content Management Suite 5.3 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...

CVE-2005-4364: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.cfm in Hot Banana Web Content Management Suite 5.3 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...

Hot Banana XSS vuln.

Hot Banana XSS vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/hot-banana-xss-vuln.html vendor:www.hotbanana.com/products/web-content-management-suite/ affected version: 5.3 and prior Description: Founded in 1999, Hot Banana powers Web sites...

CVE-2005-4041

Cross-site scripting XSS vulnerability in search.cgi in MR CGI Guy Hot Links SQL 3.1.x and Hot Links Pro 3.1.x allows remote attackers to inject arbitrary web script or HTML via the query string...

CVE-2005-4041

Cross-site scripting XSS vulnerability in search.cgi in MR CGI Guy Hot Links SQL 3.1.x and Hot Links Pro 3.1.x allows remote attackers to inject arbitrary web script or HTML via the query string...

CVE-2005-4041

CVE-2005-4041 describes a cross-site scripting (XSS) vulnerability in the search.cgi component of MR CGI Guy Hot Links SQL 3.1.x and Hot Links Pro 3.1.x. The issue arises from injecting arbitrary script/HTML via the query string, enabling an attacker to trigger client-side code in affected users’...

CVE-2005-4041: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.cgi in MR CGI Guy Hot Links SQL 3.1.x and Hot Links Pro 3.1.x allows remote attackers to inject arbitrary web script or HTML via the query string...

Hot Links SQL 3.x XSS vuln.

Hot Links SQL 3.x XSS vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/hot-links-sql-3x-xss-vuln.html vendor:http://www.mrcgiguy.com/hlsqldetails.shtml affected version:3.1.x and prior Product Description: irectory style index allows for easy...

Hot Links Pro 3.x XSS vuln.

Hot Links Pro 3.x XSS vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/hot-links-pro-3x-xss-vuln.html vendor:http://www.mrcgiguy.com/hl3details.shtml affected version:3.x and prior Product Description: Directory style index allows for easy...

MS Windows 2k UPNP (getdevicelist) Memory Leak DoS Exploit

Exploit for unknown platform in category dos / poc ========================================================== MS Windows 2k UPNP getdevicelist Memory Leak DoS Exploit ========================================================== / Author: Winny Thomas Nevis Labs, Pune, INDIA Details: While working o...

Microsoft Windows Server 2000 - UPNP getdevicelist Memory Leak Denial of Service

Microsoft Windows Server 2000 - UPNP getdevicelist Memory Leak Denial of Service / Author: Winny Thomas Nevis Labs, Pune, INDIA Details: While working on the exploit for MS05-047 i came across a condition where a specially crafted request to upnpgetdevicelist would cause services.exe to consume...

CVE-2002-2053

The design of the Hot Standby Routing Protocol HSRP, as implemented on Cisco IOS 12.1, when using IRPAS, allows remote attackers to cause a denial of service CPU consumption via a router with the same IP address as the interface on which HSRP is running, which causes a loop...

CVE-2004-2099

Buffer overflow in Need for Speed Hot Pursuit 2.0 client NFSHP2, version 242 and earlier, allows remote attackers servers to execute arbitrary code via long 1 gamename, 2 gamever, 3 hostname, 4 gametype, 5 mapname or 6 gamemode commands...