Fedora Core 10 FEDORA-2009-8136 (OpenEXR)

The remote host is missing an update to OpenEXR announced via advisory FEDORA-2009-8136. OpenVAS Vulnerability Test $Id: fcore20098136.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8136 OpenEXR Authors: Thomas Reinke Copyright: Copyright c 2009...

Gazelle CMS 1.0 Multiple Vulnerabilities / RCE Exploit

No description provided by source. !/bin/bash Gazelle CMS 1.0 Multiple Vulnerabilities Script Download: http://www.anantasoft.com/index.php?Gazelle%20CMS/Download Found by whitesheep on 11/08/2009 Contact: [email protected] - https://www.ihteam.net Need magicquotegpc Off for RCE and LFI...

Irokez CMS 0.7.1 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================== Irokez CMS 0.7.1 Remote SQL Injection Vulnerability ===================================================...

opennews 1.0 - SQL Injection / Remote Code Execution

OpenNews 1.0 SQLI/RCE Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download : http://sourceforge.net/projects/opennews-sun/ + SQL Injection Auth Bypass - Note : magicquotesgpc = off - PoC http://127.0.0.1/admin.php Username : admin ' or...

SimpleLoginSys 0.5 - Authentication Bypass

SimpleLoginSys v0.5 Auth Bypass SQL Injection Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + download : http://sourceforge.net/projects/simplesiteadmin/files/simpleloginsys/SimpleLoginSys%20v0.5/simpleloginsys0.5.zip/download + SQL Injection Auth Bypass -...

Arab Portal 2.x - forum.php SQL Injection

Arab Portal 2.x - forum.php SQL Injection getqc &&!isset$apt-getqp $qc = $apt-getqc; $result = $apt-query"select name,comment from rafiacomment where id='$qc'"; $row = $apt-dbarray$result; $apt-row'quote' = "\n\n\nQUOTE..... :".$row'name'."\n".$row'comment'."/QUOTE"; /code - Debug : code $qc =...

[SECURITY] Fedora 10 Update: OpenEXR-1.6.1-8.fc10

OpenEXR is a high dynamic-range HDR image file format developed by Indust rial Light & Magic for use in computer imaging applications. This package contai ns libraries and sample applications for handling the format...

[SECURITY] Fedora 11 Update: OpenEXR-1.6.1-8.fc11

OpenEXR is a high dynamic-range HDR image file format developed by Indust rial Light & Magic for use in computer imaging applications. This package contai ns libraries and sample applications for handling the format...

SerWeb Remote File Inclusion

SerWeb = 2.1.0-dev1 2009-07-02 Multiple Remote File Inclusion Vulnerabilities D.Script : http://ftp.iptel.org/pub/serweb/daily-snapshots/ POC: /loadlang.php?SERWEBconfigdir=Shell /mainprepend.php?SERWEBfunctionsdir=Shell /loadphplib.php?PHPLIBlibdir=Shell Us = phpflag magicquotesgpc Off / phpflag...

Allomani Mobile 2.5 - Blind SQL Injection

Allomani Mobile 2.5 - Blind SQL Injection ?php iniset"maxexecutiontime",0; printr' || || | || o,7 || . o7 || q||| o///, : / / . /QQQQQQQQQQQQQQQQQQQ\ q Allomani Mobile v2.5 /QQQ/\QQQ\ Blind SQL inj. exploit /QQQQQ/ \QQQQQQ\ q GET 3 /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ q http://allomani.com |QQQQ/ By Qaband...

Limny 1.01 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. + Limny 1.01 Auth Bypass SQL Injection Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Script Homepage : http://www.limny-project.com/ + SQL Injection Vulnerability - Notes : magicquotesgpc = off - Vulnerable code in...

SaphpLesson 4.0 - Authentication Bypass

SaphpLesson 4.0 - Authentication Bypass ---------------------------------SaphpLesson v4.0 Auth Bypass SQL Injection Vulnerability--------------------------------------- ---------------------------------------------------------------------------------------------------------------- Script :...

SaphpLesson 4.0 SQL Injection

---------------------------------SaphpLesson v4.0 Auth Bypass SQL Injection Vulnerability--------------------------------------- ---------------------------------------------------------------------------------------------------------------- Script : SaphpLesson version : 4.0 Language: PHP Site:...

CVE-2009-2553

Multiple SQL injection vulnerabilities in comments.php in Super Simple Blog Script 2.5.4, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the entry parameter...

Traidnt UP 2.0 Blind SQL Injection

?php printr' || || | || o,7 || . o7 || q||| o///, : / / . /QQQQQQQQQQQQQQQQQQQ\ q Traidnt UP 2.0 Blind SQL Inj. /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ q FILES 3 /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ q Magic Quotes == OFF! |QQQQ/ By Qabandi \QQQQ| |QQQQ| |QQQQ| |QQQQ| From Kuwait, PEACE... |QQQQ| |QQQQ| |QQQQ| |QQQQ...

Traidnt UP 2.0 - Blind SQL Injection

Traidnt UP 2.0 - Blind SQL Injection ?php printr' || || | || o,7 || . o7 || q||| o///, : / / . /QQQQQQQQQQQQQQQQQQQ\ q Traidnt UP 2.0 Blind SQL Inj. /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ q FILES 3 /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ q Magic Quotes == OFF! |QQQQ/ By Qabandi \QQQQ| |QQQQ| |QQQQ| |QQQQ| From Kuwait,...

Traidnt UP 2.0 Remote Blind SQL Injection Exploit

No description provided by source. ?php printr' || || | || o,7 || . o7 || q||| o///, : / / . /QQQQQQQQQQQQQQQQQQQ\ q Traidnt UP 2.0 Blind SQL Inj. /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ q FILES 3 /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ q Magic Quotes == OFF! |QQQQ/ By Qabandi \QQQQ| |QQQQ| |QQQQ| |QQQQ| From Kuwait,...

Mobilelib Gold 3.0 - Local File Disclosure

|| || | || o,7 || . o7 || q||| o\, : / / . /QQQQQQQQQQQQQQQQQQQ\ /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ |QQQQ/ By Qabandi \QQQQ| |QQQQ| |QQQQ| |QQQQ| From Kuwait, PEACE... |QQQQ| |QQQQ| |QQQQ| |QQQQ\ iqaahotmail.fr /QQQQ| \QQQQ\ /QQQQ/ \QQQQ\ /QQ\QQQQ/ \QQQQ\ \QQQQQQQ/ \QQQQQ...

Citrix XenCenterWeb Multiple Vulnerabilities

Secure Network - Security Research Advisory Vuln name: Citrix XenCenterWeb Multiple Vulnerabilities Systems affected: Citrix XenCenterWeb Systems not affected: n/a Severity: High Local/Remote: Remote Vendor URL: http://www.citrix.com Authors: Alberto Trivero [email protected] - Claudio...

CVE-2009-2220

Multiple directory traversal vulnerabilities in Tribiq CMS 5.0.12c, when registerglobals is enabled and magicquotesgpc is disabled, allow remote attackers to include and possibly execute arbitrary files via directory traversal sequences in the templatepath parameter to 1 masthead.inc.php, 2...