Lucene search
+L

673 matches found

Zero Day Initiative
Zero Day Initiative
added 2010/10/27 12:00 a.m.35 views

Symantec IM Manager Administrative Interface IMAdminReportTrendFormRun.asp SQL Injection Vulnerability

This vulnerability allows remote attackers to inject arbitrary SQL into the packaged database on vulnerable installations of Symantec IM Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Administrative interface installed with IM Manager...

10CVSS7.5AI score0.05822EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2010/10/27 12:00 a.m.48 views

Symantec IM Manager Administrative Interface LoggedInUsers.lgx Definition File SQL Injection Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec IM Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the rdpageimlogic.aspx and rdPage.aspx pages which is exposed through an IIS...

10CVSS7.5AI score0.05822EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2010/10/27 12:00 a.m.35 views

Symantec IM Manager Administrative Interface DetailReportGroup.lgx Definition File SQL Injection Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec IM Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the rdPageImlogic.aspx page which is exposed through an IIS extension on the defau...

10CVSS7.5AI score0.05822EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2010/10/27 12:00 a.m.32 views

Symantec IM Manager Administrative Interface rdpageimlogic.aspx SQL Injection Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec IM Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the rdpageimlogic.aspx page which is exposed through an IIS extension on the defau...

10CVSS7.5AI score0.05822EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2010/10/27 12:00 a.m.31 views

Symantec IM Manager Administrative Interface SummaryReportGroup.lgx Definition File SQL Injection Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec IM Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the rdpageimlogic.aspx page which is exposed through an IIS extension on the defau...

10CVSS7.5AI score0.05822EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2010/10/27 12:00 a.m.28 views

Symantec IM Manager Administrative Interface IMAdminScheduleReport.asp SQL Injection Vulnerability

This vulnerability allows remote attackers to inject arbitrary SQL into the packaged database on vulnerable installations of Symantec IM Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Administrative interface installed with IM Manager...

10CVSS7.5AI score0.05822EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2010/10/27 12:00 a.m.42 views

Symantec IM Manager rdServer.dll sGetDefinition SQL Injection Vulnerability

This vulnerability allows remote attackers to inject arbitrary SQL into the backend database on vulnerable installations of Symantec IM Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the IM Manager interface exposed by the web server which...

10CVSS6.8AI score0.05822EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2010/10/06 12:00 a.m.26 views

Barracuda Networks Multiple Products 'view_help.cgi' Directory Traversal Vulnerability

Multiple Barracuda Networks products are prone to a directory- traversal vulnerability because it fails to sufficiently sanitize user- supplied input. A remote attacker can exploit this vulnerability using directory- traversal characters '../' to access files that contain sensitive information th...

7.3AI score
SaveExploits0References3
Packet Storm
Packet Storm
added 2010/09/18 12:00 a.m.35 views

Joomla Restaurant Guide Cross Site Scripting / Local File Inclusion / SQL Injection

Exploit Title: Joomla Component comrestaurantguide Multiple Vulnerabilities Date: 18.09.2010 Author: Valentin Category: webapps/0day Version: 1.0.0 Tested on: Debian lenny, Apache2, MySQL 5, Joomla 1.5.x CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::...

0.5AI score
SaveExploits0
exploitpack
exploitpack
added 2010/07/23 12:00 a.m.17 views

Joomla! Component Golf Course Guide 0.9.6.0 - SQL Injection

Joomla! Component Golf Course Guide 0.9.6.0 - SQL Injection Exploit Title: Joomla Component comgolfcourseguide SQL Injection Vulnerability Date: 23.07.2010 Author: Valentin Category: webapps/0day Version: v0.9.6.0 beta, v1 beta Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1...

0.5AI score
SaveExploits0
Packet Storm
Packet Storm
added 2010/07/23 12:00 a.m.28 views

Joomla GolfCourseGuide SQL Injection

Exploit Title: Joomla Component comgolfcourseguide SQL Injection Vulnerability Date: 23.07.2010 Author: Valentin Category: webapps/0day Version: v0.9.6.0 beta, v1 beta Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information...

0.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2010/07/23 12:00 a.m.45 views

Joomla! Component Golf Course Guide 0.9.6.0 - SQL Injection

Exploit Title: Joomla Component comgolfcourseguide SQL Injection Vulnerability Date: 23.07.2010 Author: Valentin Category: webapps/0day Version: v0.9.6.0 beta, v1 beta Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information...

7.5CVSS5.2AI score0.00967EPSS
SaveExploits2
Packet Storm
Packet Storm
added 2010/07/20 12:00 a.m.22 views

Really Simple IM 1.3 Beta Denial Of Service

!/usr/bin/python import socket import sys Bug found: 18th July 2010 DoS proof of concept Found by: loneferret Tested on Windows XP Professional SP2-SP3 & Windows XP Home SP3 Really Simple IM verion 1.3 beta Software: http://code.google.com/p/reallysimpleim/ Nods to exploit-db I don't want this on...

0.2AI score
SaveExploits0
Exploit DB
Exploit DB
added 2010/07/18 12:00 a.m.37 views

Really Simple IM 1.3beta - Denial of Service (PoC)

!/usr/bin/python import socket import sys Bug found: 18th July 2010 DoS proof of concept Found by: loneferret Tested on Windows XP Professional SP2-SP3 & Windows XP Home SP3 Really Simple IM verion 1.3 beta Software: http://code.google.com/p/reallysimpleim/ Nods to exploit-db I don't want this on...

5.3AI score
SaveExploits0
exploitpack
exploitpack
added 2010/07/18 12:00 a.m.16 views

Really Simple IM 1.3beta - Denial of Service (PoC)

Really Simple IM 1.3beta - Denial of Service PoC !/usr/bin/python import socket import sys Bug found: 18th July 2010 DoS proof of concept Found by: loneferret Tested on Windows XP Professional SP2-SP3 & Windows XP Home SP3 Really Simple IM verion 1.3 beta Software:...

SaveExploits0
Packet Storm
Packet Storm
added 2010/06/12 12:00 a.m.29 views

eLMS Pro SQL Injection / Cross Site Scripting

======================================= eLMS Pro SQLi and XSS Vulnerability ======================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database...

0.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2010/06/09 12:00 a.m.35 views

eLms Pro - SQL Injection / Cross-Site Scripting

======================================= eLMS Pro SQLi and XSS Vulnerability ======================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database...

7.5CVSS5.2AI score0.01462EPSS
SaveExploits3
seebug.org
seebug.org
added 2010/06/09 12:00 a.m.15 views

eLMS Pro SQLi and XSS Vulnerability

No description provided by source. Name : eLMS Pro SQLi and XSS Vulnerability Date : june, 9 2010 Vendor url :http://www.elmspro.com/elms/ Platform: Linux,Windows Price: AUD$450 Author : Sid3^effects aKa HaRi shellc99atyahoo.com special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,gunsling...

7.1AI score
SaveExploits0
ThreatPost
ThreatPost
added 2010/05/04 2:13 p.m.11 views

IM Worm Spreading on Yahoo Messenger

A smiley-faced instant message with a photo link posing as if it’s from someone on your buddy list is actually spreading misery worldwide in the form of a worm on Yahoo Instant Messenger: The IM ultimately delivers a worm that allows an attacker to take over the victim’s machine, not to mention...

3AI score
SaveExploits0References2
securityvulns
securityvulns
added 2010/04/07 12:00 a.m.27 views

Miranda IM TLS encryption vulnerability

Under some conditions TLS is not used for Jabber server connection regradless of settings...

1.8AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder