MASA2EL Music City 1.0 - SQL Injection

MASA2EL Music City 1.0 - SQL Injection :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: Exploit Title : MASA2EL Music City Remote Sql Injection Vulnerability Author: alnjm33 Software Link: http://www.masa2el.com/index.php?go=dl&type=d&id=4 Tested on: Version 1....

Gbook MX 4.1.0 (Arabic Version) - Remote File Inclusion

======================================================================================== | Title : Gbook MX v4.1.0 Arabic Version File inclusion Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total aler...

Joomla JM-Recommend Cross Site Scripting

Joomla Component comjm-recommend Cross Site Scripting Vulnerabilities Author : Pyske Name : comjm-recommend Home : www.cyber-warrior.org Greetz : Fl0riX , M-K-A , F0RTS3V3N , 3KB3R and ALL Cyber-Warrior Bug Type : Cross Site Scripting Infection : Yönetici ve User cookiekleri calinabilir. Bug Fix...

Joomla Component com_facileforms Cross Site Scripting Vulnerabilities

Exploit for unknown platform in category web applications ===================================================================== Joomla Component comfacileforms Cross Site Scripting Vulnerabilities ===================================================================== Joomla Component comfacileform...

myPHPupload 0.5.1 - Arbitrary File Upload

myPHPupload 0.5.1 - Arbitrary File Upload | | myPHPupload 0.5.1 Remote File Upload Vulnerability | | Author : ViRuSMaN | | Contact : [email protected] | | Home : Islam-Attack.CoM , HackTeach.OrG | | Download : http://www.graphiks.net/telecharger/myPHPupload.zip | | | | Exp : | | 1- Uoload your shell...

Eshopbuilde CMS SQL Injection

================= IUT-CERT ================= Title: Eshopbuilde CMS SQL Injection Vulnerability Vendor: www.eshopbuilder.ir Dork: Design by Satcom Co Type: Input.Validation.Vulnerability SQL Injection Fix: N/A ================== nsec.ir ================= Description: ------------------ Eshopbuild...

Spammer Gets Over 4-Year Sentence

Alan M. Ralsky, the “Godfather of Spam,” was sentenced to 51 months in prison for long term involvement in pump and dump schemes. Read the full article. Washington Post...

CVE-2009-3418: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Plume CMS 1.2.3 allow 1 remote authenticated users to execute arbitrary SQL commands via the m parameter to manager/index.php and 2 remote authenticated administrators to execute arbitrary SQL commands via the id parameter in an editlink action to...

Unfixed XSS vulnerability at www.tamsayfa.org

Security researcher M-K-A, has submitted on 24/09/2009 a cross-site-scripting XSS vulnerability affecting www.tamsayfa.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/11/2011. It is currently...

Unfixed XSS vulnerability at www.guzelonline.org

Security researcher M-K-A, has submitted on 20/09/2009 a cross-site-scripting XSS vulnerability affecting www.guzelonline.org, which at the time of submission ranked 814833 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/10/2010. It is...

CVE-2009-3214: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in Photodex ProShow Gold 4.0.2549 allow remote attackers to execute arbitrary code via a crafted Slideshow project .psh file, related to the 1 celln.imagesm.image and 2 celln.sound.file fields...

Remote file inclusion

PHP remote file inclusion vulnerability in lib/action/rss.php in RSS module 0.1 for Pie Web Ma,esher, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lib parameter...

CVE-2008-7073

CVE-2008-7073 concerns a PHP remote file inclusion in the RSS module 0.1 for Pie Web Maesher. The root cause is that when register_globals is enabled, the lib parameter can be controlled to point to a URL, allowing an attacker to execute arbitrary PHP code on the server. The vulnerability targets...

CVE-2008-7073

PHP remote file inclusion vulnerability in lib/action/rss.php in RSS module 0.1 for Pie Web Ma,esher, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lib parameter...

CVE-2008-7073: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in lib/action/rss.php in RSS module 0.1 for Pie Web Ma,esher, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lib parameter...

SA-CONTRIB-2009-043 - Image Assist - Multiple vulnerabilities

The Image Assist module for Drupal 5.x and 6.x allows users to upload and insert inline images into posts. Two vulnerabilities and weaknesses were discovered in the contributed Image Assist module. Cross site scripting The node title is treated as if it was safe text, and is not escaped before...

Military to Create Cyber Command Unit

From The New York Times Thom Shanker Defense Secretary Robert M. Gates on Tuesday ordered the creation of the military’s first headquarters designed to coordinate Pentagon efforts in the emerging battlefield of cyberspace and computer-network security, officials said. Read the full story...

freebsd/x86-64 exec("/bin/sh") shellcode 31 bytes

No description provided by source. / | | | | | | | \ | | | | || |/ |/ | |/ / ' \ | | / | | | | | | | | | | | | | | | | || ||,|||\| || || \/||| http://www.hacknroll.com Description: FreeBSD x86-64 exec"/bin/sh" Shellcode - 31 bytes Authors: Maycon M. Vitali 0ut0fBound Milw0rm .:...

Authentication flaw

U&M Software JustBookIt 1.0 does not require administrative authentication for all scripts in the admin/ directory, which allows remote attackers to have an unspecified impact via a direct request to 1 usermanual.php, 2 userconfig.php, 3 userkundnamn.php, 4 userkundlista.php, 5...

Code injection

U&M Software Signup 1.0 and 1.1 does not require administrative authentication for all scripts in the admin/ directory, which allows remote attackers to have an unspecified impact via a direct request to 1 adminstart.php, 2 admineventtype.php, 3 admineventdetails.php, 4 admineventlist.php, 5...