Code injection

U&M Software Signup 1.0 and 1.1 does not require administrative authentication for all scripts in the admin/ directory, which allows remote attackers to have an unspecified impact via a direct request to 1 adminstart.php, 2 admineventtype.php, 3 admineventdetails.php, 4 admineventlist.php, 5...

CVE-2008-6719

U&M Software Event Lister aka JustListIt 1.0 does not require administrative authentication for all scripts in the admin/ directory, which allows remote attackers to have an unspecified impact via a direct request to 1 start.php, 2 aktivitet.php, 3 propaktivitet.php, 4 kategorier.php, 5 konfig.ph...

CVE-2008-6717

CVE-2008-6717 affects U&M Software Signup 1.0 and 1.1. The issue is that administrative authentication is not required for all scripts in the admin/ directory, allowing remote attackers to access sensitive admin endpoints (adminstart.php, admineventtype.php, admineventdetails.php, admineventlist....

CVE-2008-6719

The CVE-2008-6719 entry describes U&M Software Event Lister (aka JustListIt) 1.0 as vulnerable because admin/ scripts do not require administrative authentication. The affected components are the admin/ directory scripts (start.php, aktivitet.php, prop_aktivitet.php, kategorier.php, konfig.php, s...

CVE-2008-6717

U&M Software Signup 1.0 and 1.1 does not require administrative authentication for all scripts in the admin/ directory, which allows remote attackers to have an unspecified impact via a direct request to 1 adminstart.php, 2 admineventtype.php, 3 admineventdetails.php, 4 admineventlist.php, 5...

QuickTime < 7.6.6 Multiple Vulnerabilities

Binary data 801207.prm...

QuickTime < 7.6.6 Multiple Vulnerabilities

Binary data 5492.prm...

Directory traversal

Directory traversal vulnerability in the CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to load and execute arbitrary local DLL code via a .. dot dot in a /CIMListener/ URI in an M-POST request...

CVE-2009-0880

Directory traversal vulnerability in the CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to load and execute arbitrary local DLL code via a .. dot dot in a /CIMListener/ URI in an M-POST request...

CVE-2009-0879

The CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to cause a denial of service daemon crash via a long consumer name, as demonstrated by an M-POST request to a long /CIMListener/ URI...

[USN-732-1] dash vulnerability

=========================================================== Ubuntu Security Notice USN-732-1 March 10, 2009 dash vulnerability CVE-2009-0854 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 8.04 LTS Ubuntu 8.10 This advisor...

Universal Plug and Play (UPnP) Protocol Detection

The remote device answered an SSDP M-SEARCH request. Therefore, it supports 'Universal Plug and Play' UPnP. This protocol provides automatic configuration and device discovery. It is primarily intended for home networks. An attacker could potentially leverage this to discover your network...

Den Dating 9.01(searchmatch.php) SQL Injection Vulnerability

No description provided by source. Scripts Den Dating Demo V9.01searchmatch.php SQL Injection Vulnerability Author: nuclear site: http://www.scriptsden.com SQL vuln: http://localhost/path/searchmatch.php?page=2&sortby=username&sortorder=asc&txtgender=M&txtlookgender=F' union select...

StormBoard 1.0.1 SQL Injection

============================================================================== لااله الي لله محمد رسول لله ---------------------------------Samir-M---------------------------------- StormBoard Version 1.0.1 thread.php id= SQL Injection Vulnerability by : Samir-M Msn : [email protected] from: Morocco...

StormBoard 1.0.1 (thread.php id) SQL Injection Vulnerability

No description provided by source. ============================================================================== لااله الي لله محمد رسول لله ---------------------------------Samir-M---------------------------------- StormBoard Version 1.0.1 thread.php id= SQL Injection Vulnerability by : Samir-M...

StormBoard 1.0.1 - SQL Injection

============================================================================== لااله الي لله محمد رسول لله ---------------------------------Samir-M---------------------------------- StormBoard Version 1.0.1 thread.php id= SQL Injection Vulnerability by : Samir-M Msn :...

Pie Web M{a,e}sher 0.5.3 Multiple Remote File Inclusion Vulnerability

No description provided by source. =========================================================================================== o Pie Web Ma,esher 0.5.3 Multiple Remote File Inclusion Vulnerability Software : Pie Web Ma,esher version 0.5.3 Vendor : http://pie.ekkaia.org/ Download :...

pieweb-rfi.txt

=========================================================================================== o Pie Web Ma,esher 0.5.3 Multiple Remote File Inclusion Vulnerability Software : Pie Web Ma,esher version 0.5.3 Vendor : http://pie.ekkaia.org/ Download : http://pie.ekkaia.org/page/Download Author : NoGe...

U&M Software Signup 1.1 Auth Bypass Vulnerability

Exploit for unknown platform in category web applications ================================================= U&M Software Signup 1.1 Auth Bypass Vulnerability ================================================= ============================================================================== U&M Softwa...

U&M Software JustBookIt 1.0 Auth Bypass Vulnerability

Exploit for unknown platform in category web applications ===================================================== U&M Software JustBookIt 1.0 Auth Bypass Vulnerability ===================================================== =============================================================================...