GeekLog <= 2. (BaseView.php) Remote File Include Vulnerabilities

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Epistemon 1.0 = Remote File Include Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Discovered by GolDMMahmnoodali & & Contact: [email protected]...

AgerMenu 0.01 (top.inc.php rootdir) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ===================================================================== AgerMenu 0.01 top.inc.php rootdir Remote File Include Vulnerability =====================================================================...

Epistemon Common.Inc.PHP远程文件包含漏洞

Epistemon是一款基于PHP的WEB应用程序。 Epistemon不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'Common.Inc.PHP'脚本对用户提交的'incpath'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Epistemon 1.0 目前没有解决方案提供,请关注以下链接： http://www.homelocate.ca/listing/listing.php...

AgerMenu 0.01 - top.inc.php?rootdir Remote File Inclusion

AgerMenu 0.01 - top.inc.php?rootdir Remote File Inclusion =============================================================== Discovered by GolDMMahmnoodali & & Contact: [email protected] =============================================================== URL Script:...

CVE-2007-0639

Multiple static code injection vulnerabilities in error.php in GuppY 4.5.16 and earlier allow remote attackers to inject arbitrary PHP code into a .inc file in the data/ directory via 1 a REMOTEADDR cookie or 2 a cookie specifying an element of the msg array with an error number in the first...

CVE-2007-0639

GuppY 4.5.16 and earlier is affected by multiple static code injection vulnerabilities in error.php that let remote attackers inject arbitrary PHP code into a data/.inc file via cookies (REMOTE_ADDR or msg[...] with an error dimension). Exploitation would impact confidentiality, integrity, and av...

Oracle Buffer Overflow in DBMS_LOGREP_UTIL.GET_OBJECT_NAME

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Oracle Database Buffer overflow vulnerability in procedure DBMSLOGREPUTIL.GETOBJECTNAME DB08 AppSecInc Team SHATTER Security Advisory http://www.appsecinc.com/resources/alerts/oracle Jan 18, 2007 Affected versions: Oracle Database Server versions 9iR1...

Oracle Buffer Overflow in DBMS_DRS.GET_PROPERTY

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Oracle Database Buffer overflow vulnerabilities in procedure DBMSDRS.GETPROPERTY DB03 AppSecInc Team SHATTER Security Advisory http://www.appsecinc.com/resources/alerts/oracle Jan 18, 2007 Affected versions: Oracle Database Server versions 9iR2 and...

Oracle Multiple Buffer Overflows and DoS attacks in public procedures of MDSYS.MD

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Oracle Database Buffer overflows and Denial of service vulnerabilities in public procedures of MDSYS.MD DB05 AppSecInc Team SHATTER Security Advisory http://www.appsecinc.com/resources/alerts/oracle Jan 18, 2007 Affected versions: Oracle Database Serv...

DEBIAN-CVE-2006-6943

PhpMyAdmin before 2.9.1.1 allows remote attackers to obtain the full server path via direct requests to a scripts/checklang.php and b themes/darkblueorange/layout.inc.php; and via the 1 lang, 2 target, 3 db, 4 goto, 5 table, and 6 tblgroup array arguments to c index.php, and the 7 back argument t...

Fedora Core 6 : xterm-223-1.fc6 (2007-031)

Mon Jan 8 2007 Miroslav Lichvar 223-1.fc6 - update to 223 - use correct tty group 219048 - spec cleanup Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much...

Calyptix Security Advisory CX-2007-001 - Snort 2.6.1.2 Integer Underflow Vulnerability

Calyptix Security Advisory CX-2007-001 Date: 01/11/2007 http://www.calyptix.com/ http://labs.calyptix.com/advisories/CX-2007-01.txt Overview Snort 2.6.1.2 is vulnerable to an integer underflow that allows a remote attacker to cause Snort to read beyond a specified length of memory, potentially...

Microsoft Windows SMB Share Hosting Office Files

This plugin connects to the remotely accessible SMB shares and attempts to find office related files such as .doc, .ppt, .xls, .pdf etc. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid23974; scriptversion "$Revision: 1.13 $"; scriptnameenglish:"Microsoft Windows SMB...

XD100098.txt

Orkut Group Cross Site Scripting Vulnerability XDisclose Advisory : XD100098 Vulnerability Discovered: November 08th 2006 Advisory Released : December 11th 2006 Credit : Rajesh Sethumadhavan Class : Cross Site Scripting HTML Injection Severity : Medium Solution Status : Unpatched Vendor : Google...

Hacker attack and Defense of the PPPoE authentication and use-vulnerability and early warning-the black bar safety net

A Foreword In recent years, Internet data traffic has developed rapidly, broadband users showed explosive growth, the operators in the use of xDSL, LAN, HFC, wireless and other access methods at the same time, in order to build an operable, manageable and profitable broadband network, is very...

orkut-xss.txt

Orkut Multiple Cross Site Scripting Vulnerabilities XDisclose Advisory : XD100092 Vulnerability Discovered: November 18th 2006 Advisory Released : December 08th 2006 Credit : Rajesh Sethumadhavan Class : Cross Site Scripting HTML Injection Severity : Medium Solution Status : Unpatched Vendor :...

vg-onlinebookmarks-3-12-2006.txt

3/12/06 Vigilon Advisory http://www.vigilon.com/vg-onlinebookmarks-3-12-2006.txt ------------------------------------------------------- Application: OnLine Bookmarks Web Site: http://www.frech.ch/online-bookmarks/ Versions: 0.6.12 Platform: linux, windows, freebsd, sun Bug: Cross Site Scripting...

Online BookMarks Multiple SQL Injection/XSS Vulnerabilities

3/12/06 Vigilon Advisory http://www.vigilon.com/vg-onlinebookmarks-3-12-2006.txt ------------------------------------------------------- Application: OnLine Bookmarks Web Site: http://www.frech.ch/online-bookmarks/ Versions: 0.6.12 Platform: linux, windows, freebsd, sun Bug: Cross Site Scripting...

iDefense Security Advisory 12.01.06: Novell ZENworks Asset Management Collection Client Heap Overflow Vulnerability

Novell ZENworks Asset Management Collection Client Heap Overflow Vulnerability iDefense Security Advisory 12.01.06 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 01, 2006 I. BACKGROUND Novell Inc's ZENworks is a set of tools used to automate IT management and business processes across...

[Full-disclosure] AVG Anti-Virus - Arbitrary Code Execution (remote)

n.runs AG http://www.nruns.com/ security at nruns.com n.runs-SA-2006.002 13-Nov-2006 Vendor: Grisoft Inc., http://grisoft.com Product: AVG Anti-Virus Vulnerability: Arbitrary Code Execution remote Vendor communication: 2006/08/24 initial notification to Grisoft Inc. 2006/08/24 Grisoft Inc. Respon...