1442 matches found
CVE-2008-2072: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in Virtual Design Studio vlbook 1.21 allows remote attackers to inject arbitrary web script or HTML via the l parameter, a different vector than CVE-2006-3260...
CVE-2008-2073: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in include/global.inc.php in Virtual Design Studio vlbook 1.21 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the l parameter...
joomla "com_omnirealestate" S@L Injection
AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ dork 2= allinurl: "comomnirealestate" index.php?option=comomnirealestate&Itemid=0&func=showObject&info=contact&objid=-9999//union//select//username,password//from//mosusers/&results=S@BUN...
AIX 530005 : U808615
The remote host is missing AIX PTF U808615 which is related to the security of the package devices.vdevice.IBM.l-lan.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...
Mambo Component Sermon 0.2 (gid) SQL Injection Vulnerability
No description provided by source. netadvantist@copyright 2006 SQL Injectioncomnaxxx AUTHOR : S@BUN HOME : http://www.hackturkiye.com DORKS 1 : allinurl:"comnacontent" DORK 2 : allinurl:"comnabible" DORKS 3 : allinurl:"comnaevents" DORKS 4 : allinurl:"comnacontent" DORKS 5 :...
Mambo Component Sermon 0.2 - gid SQL Injection
Mambo Component Sermon 0.2 - gid SQL Injection netadvantist@copyright 2006 SQL Injectioncomnaxxx AUTHOR : S@BUN HOME : http://www.hackturkiye.com DORKS 1 : allinurl:"comnacontent" DORK 2 : allinurl:"comnabible" DORKS 3 : allinurl:"comnaevents" DORKS 4 : allinurl:"comnacontent" DORKS 5 :...
Mambo Component Sermon 0.2 - 'gid' SQL Injection
netadvantist@copyright 2006 SQL Injectioncomnaxxx AUTHOR : S@BUN HOME : http://www.hackturkiye.com DORKS 1 : allinurl:"comnacontent" DORK 2 : allinurl:"comnabible" DORKS 3 : allinurl:"comnaevents" DORKS 4 : allinurl:"comnacontent" DORKS 5 : allinurl:"comnafeedback" DORKS 6 : allinurl:"comnamydocs...
OpenBSD 4.2 - rtlabel_id2name() Local Null Pointer Dereference Denial of Service
OpenBSD 4.2 - rtlabelid2name Local Null Pointer Dereference Denial of Service / OpenBSD 4.2 rtlabelid2name SIOCGIFRTLABEL ioctl Null Pointer Dereference local Denial of Service Exploit by Hunger Advisory: http://marc.info/?l=openbsd-security-announce&m=120007327504064 FOR TESTING PURPOSES ONLY! $...
CVE-2008-0289: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in viewfunc.php in Member Area System MAS 1.7 and possibly others allows remote attackers to execute arbitrary PHP code via a URL in the i parameter. NOTE: a second vector might exist via the l parameter. NOTE: as of 20080118, the vendor has disputed the se...
sing pinging utility privilege escalation
-L parameter allow to ovewrite files...
Joomla! Component Flash Uploader 2.5.1 - Remote File Inclusion
Joomla! Component Flash Uploader 2.5.1 - Remote File Inclusion -------------------------------------------- = = = Mdx c 2007 = = = -------------------------------------------- = = =Joomla comjoomlaflashuploader Remote File Include 2.5.1,2.5.2 = = ============================================ = =...
helplink010-rfi.txt
Helplink 0.1.0 show.php file Remote File Inclusion Vulnerability D.S : http://sourceforge.net/projects/helplink/ V.C ================================show.php================================= 01 : ========================================================================= POC : /show.php?file=Ev!L C...
Unfixed XSS vulnerability at l-i-e.com
Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting l-i-e.com, which at the time of submission ranked 5909566 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is currently...
XOOPS Module XFsection (modify.php) Remote File Inclusion Vulnerability
No description provided by source. XOOPS Module XFsection Remote File Inclusion version: 1.07 source : http://prdownloads.sourceforge.net/xoops/xoops2-modxfsection-107.zip Discovered by SpLo1T from hTTp://hacking.3Xforum.Ro Bug :...
XOOPS Module TinyContent 1.5 Remote File Inclusion Vulnerability
No description provided by source. XOOPS Module TinyContent Remote File Inclusion version: 1.5 source: http://prdownloads.sourceforge.net/xoops/xoops2-mod-tinycontent15.zip Discovered by SpLo1T from hTTP://hacking.3Xforum.Ro BUG:...
XOOPS Module XFsection - modify.php Remote File Inclusion
XOOPS Module XFsection - modify.php Remote File Inclusion XOOPS Module XFsection Remote File Inclusion version: 1.07 source : http://prdownloads.sourceforge.net/xoops/xoops2-modxfsection-107.zip Discovered by SpLo1T from hTTp://hacking.3Xforum.Ro Bug :...
xoopstc-rfi.txt
XOOPS Module TinyContent Remote File Inclusion version: 1.5 source: http://prdownloads.sourceforge.net/xoops/xoops2-mod-tinycontent15.zip Discovered by SpLo1T from hTTP://hacking.3Xforum.Ro BUG: http://www.site.com/modules/tinycontent/admin/spaw/spawcontrol.class.php?spawroot=evilcode.txt? Vuln...
webdesproxy 0.0.1 - exec-shield GET Remote Code Execution
webdesproxy 0.0.1 - exec-shield GET Remote Code Execution / Fedora Core 6 exec-shield based Webdesproxy webdesproxy-0.0.1.tgz remote root exploit reverse connect-back method by Xpl017Elz Advanced exploitation in exec-shield Fedora Core case study URL:...
CVE-2007-2547: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 allows remote attackers to inject arbitrary web script or HTML via the l parameter...
