Lucene search
+L

562 matches found

Cvelist
Cvelist
added 2009/01/27 6:0 p.m.23 views

CVE-2009-0287

SQL injection vulnerability in lib/patUser.php in KEEP Toolkit before 2.5.1 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password...

8.4AI score0.01096EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2008/11/10 4:29 a.m.6 views

sISAPILocation vulnerability bypasses HTTP header rewrite function

Overview sISAPILocation, an ISAPI Internet Server Application Program Interface filter, contains a vulnerability that allows the HTTP header rewrite function to be bypassed. sISAPILocation, developed by an individual developer, is an ISAPI filter for IIS Internet Information Services...

5CVSS6.6AI score0.01477EPSS
SaveExploits0References9
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2008/11/06 12:0 a.m.22 views

JVN#67060882 sISAPILocation vulnerability bypasses HTTP header rewrite function

sISAPILocation, developed by an individual developer, is an ISAPI filter for IIS Internet Information Services. sISAPILocation contains a vulnerability that allows the HTTP header rewrite function to be bypassed. Impact When sISAPILocation is used to configure settings, such as to specify charact...

6.8AI score
SaveExploits0
NVD
NVD
added 2008/04/02 5:44 p.m.14 views

CVE-2008-1635

Directory traversal vulnerability in viewprivate.php in Keep It Simple Guest Book KISGB 5.0.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the tmptheme parameter. NOTE: 5.1.1 is also reportedly affected...

7.5CVSS7.1AI score0.0299EPSS
SaveExploits2References3
Prion
Prion
added 2008/04/02 5:44 p.m.18 views

Directory traversal

Directory traversal vulnerability in viewprivate.php in Keep It Simple Guest Book KISGB 5.0.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the tmptheme parameter. NOTE: 5.1.1 is also reportedly affected...

7.5CVSS7.6AI score0.0299EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
added 2008/04/02 5:0 p.m.21 views

CVE-2008-1635

Directory traversal vulnerability in viewprivate.php in Keep It Simple Guest Book KISGB 5.0.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the tmptheme parameter. NOTE: 5.1.1 is also reportedly affected...

7.1AI score0.0299EPSS
SaveExploits2References3
CVE
CVE
added 2008/04/02 5:0 p.m.42 views

CVE-2008-1635

CVE-2008-1635 affects Keep It Simple Guest Book (KISGB) up to version 5.0.0 (and reportedly 5.1.1) via a directory-traversal flaw in view_private.php. The vulnerability arises from a .. path in the tmp_theme parameter, allowing remote attackers to include and execute arbitrary local files. Docume...

7.5CVSS7.1AI score0.0299EPSS
SaveExploits2References3Affected Software1
seebug.org
seebug.org
added 2008/03/30 12:0 a.m.27 views

KISGB <= (tmp_theme) 5.1.1 Local File Inclusion Vulnerability

No description provided by source. KISGB Keep It Simple Guest Book : Local FiLe Include's tmptheme Version : All Versions Download : http://sourceforge.net/project/showfiles.php?groupid=38585 ---------------------------------------------------------- Exploit coded and founded by Cr@zyKing Date:...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2007/12/18 12:0 a.m.29 views

dlink.txt

!/bin/bash Coded Bt Ph3mt Of K-Security Team This Code is private, pls do not redistribute Release Date 25/11/2007 Code function dow echo 'POST /cgi-bin/firmwarecfg HTTP/1.1' richiesta echo 'Host: $IP' richiesta echo 'User-Agent: veryprivateacsor' richiesta echo 'Accept:...

7.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2007/01/30 12:0 a.m.616 views

HyperText Transfer Protocol (HTTP) Information

This test gives some information about the remote HTTP protocol - the version used, whether HTTP Keep-Alive is enabled, etc... This test is informational only and does not denote any security problem. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid24260;...

5.5AI score
SaveExploits0
NVD
NVD
added 2006/12/27 2:28 a.m.11 views

CVE-2006-6763

Multiple PHP remote file inclusion vulnerabilities in the Keep It Simple Guest Book KISGB allow remote attackers to execute arbitrary PHP code via a URL in the 1 pathtothemes parameter in a authenticate.php, and the 2 defaultpathforthemes parameter in b admin.php and c upconfig.php...

7.5CVSS7.7AI score0.02089EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2006/12/27 2:0 a.m.21 views

CVE-2006-6764

PHP remote file inclusion vulnerability in authenticate.php in Keep It Simple Guest Book KISGB, when executing PHP through CGI, allows remote attackers to execute arbitrary PHP code via a URL in the defaultpathtothemes parameter...

7.5AI score0.02047EPSS
SaveExploits2References4
exploitpack
exploitpack
added 2006/12/22 12:0 a.m.12 views

KISGB 5.1.1 - Authenticate.php Remote File Inclusion

KISGB 5.1.1 - Authenticate.php Remote File Inclusion KISGB Keep It Simple Guest Book defaultpathforthemes Remote File Include +class : Remote File Include Vulnerability + +download link : http://phpnuke-downloads.com/modules.php?name=Downloads&dop=nsgetit&cid=14&lid=156&type=urlget +Author : mdx...

0.1AI score
SaveExploits0
CVE
CVE
added 2005/06/28 4:0 a.m.52 views

CVE-2002-1942

Imatix Xitami 2.5 b5 is affected. The issue is that the product does not properly terminate certain Keep-Alive connections that have been broken or closed early, which can allow remote attackers to cause a denial of service (crash) through a large number of concurrent sessions. The vulnerability ...

5CVSS7.2AI score0.01697EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2005/06/28 4:0 a.m.25 views

CVE-2002-1942

Imatix Xitami 2.5 b5 does not properly terminate certain Keep-Alive connections that have been broken or closed early, which allows remote attackers to cause a denial of service crash via a large number of concurrent sessions...

6.8AI score0.01697EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2005/04/19 4:0 a.m.28 views

CVE-2005-1184

The TCP/IP stack in multiple operating systems allows remote attackers to cause a denial of service CPU consumption via a TCP packet with the correct sequence number but the wrong Acknowledgement number, which generates a large number of "keep alive" packets. NOTE: some followups indicate that th...

6.5AI score0.32746EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2004/08/20 12:0 a.m.11 views

BGP Keep Alive Message Detection (Client Initiation)

Binary data 1200.prm...

7.3AI score
SaveExploits0
securityvulns
securityvulns
added 2004/02/09 12:0 a.m.35 views

php.ini PHP protection bypass

It's possible tyo bypass protection registerglobals = on for example of virtual host by requestin host without protection in same HTTP keep-alive connection before...

0.7AI score
SaveExploits0References1Affected Software1
securityvulns
securityvulns
added 2003/06/09 12:0 a.m.39 views

NOVL-2003-2966181 - HTTPSTK DOS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 For Immediate Disclosure ============================== Summary ============================== Security Alert: NOVL-2003-2966181 Title: HTTPSTK DOS Date: 03-Jun-2003 Revision: Original Product Name: Netware OS/Platforms: Netware 6.x Reference URL:...

7.1AI score
SaveExploits0
securityvulns
securityvulns
added 2003/06/09 12:0 a.m.32 views

Novell Netware HTTPSTK DoS

Invelid processing for Keep-Alive packet...

0.9AI score
SaveExploits0References1
Rows per page
Query Builder