33 matches found
kapda-26.txt
KAPDA New advisory Vendor: http://www.jaia-interactive.com Vulnerable: Version: 1.2.3 Bug: Sql Injection & Path Disclosure Exploitation: Remote with browser Description: -------------------- MyTopix is a PHP-based message board system that uses a MySQL database. Vulnerability: -------------------...
Cerberus FTP Server <= 2.32 Denial of Service Exploit
Exploit for unknown platform in category dos / poc ===================================================== Cerberus FTP Server include include include include define POCSTR "%s" int header; int usagechar filename; int remoteconnect char ip, unsigned short port ; int header printf"\ni KAPDA - Comput...
HomeFtp 1.1 - 'NLST' Denial of Service
/ HomeFtp v1.1 Denial of Service original advisory: http://kapda.ir/advisory-202.html homeftpv1.1xpl.c ---------------------------------------- / include include include include include define POCSTR "USER %s\x0d\x0aPASS %s\x0d\x0aNLST\x0d\x0a" int header; int usagechar filename; int remoteconnec...
[SA18263] Web Wiz Products "txtUserName" SQL Injection Vulnerability
TITLE: Web Wiz Products "txtUserName" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA18263 VERIFY ADVISORY: http://secunia.com/advisories/18263/ CRITICAL: Moderately critical IMPACT: Security Bypass, Manipulation of data WHERE: From remote SOFTWARE: Web Wiz Site News 3.x...
kapda-18.txt
KAPDA::18 - WebWiz Products SQL Injection Happy new year ! : KAPDA New advisory Vulnerable products : webwiz site news access2000 : vesion 3.06 and prior versions webwiz journal access2000 : version 1.0 webwiz weekly poll access2000 : version 3.06 and prior versions database login access2000 :...
WebWiz Products 1.03.06 - Authentication Bypass SQL Injection
WebWiz Products 1.03.06 - Authentication Bypass SQL Injection WebWiz Scripts Login Bypass PoC - site news , journal , weekly poll - Kapda s advisory Discovery and exploit by devilbox at kapda.ir Kapda - Security Science Researchers Institute of Iran WebWiz Login Bypass PoC - Database login - Kapd...
WebWiz Products (1.0 <= 3.06) Login Bypass SQL Injection Exploits
No description provided by source. !-- Vulnerable products : webwiz site news access2000 : vesion 3.06 and prior versions webwiz journal access2000 : version 1.0 webwiz weekly poll access2000 : version 3.06 and prior versions database login access2000 : version 1.71 and prior versions webwiz site...
[KAPDA::#18] - WebWiz Products SQL Injection
KAPDA::18 - WebWiz Products SQL Injection Happy new year ! : KAPDA New advisory Vulnerable products : webwiz site news access2000 : vesion 3.06 and prior versions webwiz journal access2000 : version 1.0 webwiz weekly poll access2000 : version 3.06 and prior versions database login access2000 :...
Mambo Open Source, Path disclosure
KAPDA::11 - Mambo Open Source, Path disclosure KAPDA New advisory Vendor: http://www.mamboserver.com Vulnerable Versions: 4.5.2.3 , 4.5.2.2 , 4.5.2.1 ,4.5.2 Bug: path disclosure Exploitation: Remote with browser Discussion: -------------------- Mambo is a feature-rich dynamic portal engine/conten...
advisory-103.txt
KAPDA::9Techno Dreams Scripts Vulnerabilities KAPDA New advisory Vulnerable products : Techno Dreams Announcement Script Techno Dreams Guestbook Script Techno Dreams Mailing List Script Techno Dreams WebDirectory Script Vendor: http://www.t-dreams.com/ Risk: High Vulnerability: Sql injection Date...
[KAPDA::#8] Domain Manager Pro Vulnerability
KAPDA::8 Domain Manager Pro Vulnerability Domain Manager Pro - Fake form injection KAPDA New advisory Vulnerable Products : Domain Manager Pro Vendor: SiteTurn ,http://www.siteturn.com/ Vulnerability: Fake form injection XSS Date : -------------------- 2005/08/08 1384/05/17 Hijri Shamsi About...
[KAPDA::#6] Punbb SQL Injection Vulnerability
KAPDA::6 Punbb SQL Injection Vulnerability Punbb search.php SQL Injection Vulnerability KAPDA New advisory Vulnerable products : Punbb V 1.2.8 and 1.2.7 are tested,Hopefully all other versions Vendor: http://www.punbb.org/ Vulnerability: Sql injection About Punbb -------------------- PunBB is a...
[SA17117] aeNovo Cross-Site Scripting and SQL Injection Vulnerabilities
TITLE: aeNovo Cross-Site Scripting and SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA17117 VERIFY ADVISORY: http://secunia.com/advisories/17117/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: aeNovo...