CVE-2005-3381: Undefined Security Weakness

Multiple interpretation error in Ukrainian National Antivirus UNA 1.83.2.16 with kernel 265 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe...

CVE-2005-3382: Undefined Security Weakness

Multiple interpretation error in Sophos 3.91 with the 2.28.4 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be...

CVE-2005-3380: Undefined Security Weakness

Multiple interpretation error in Panda Titanium 2005 4.02.01 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be execut...

CVE-2005-3379: Undefined Security Weakness

Multiple interpretation error in Trend Micro 1 PC-Cillin 2005 12.0.1244 with the 7.510.1002 engine and 2 OfficeScan 7.0 with the 7.510.1002 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated...

CVE-2005-3374: Undefined Security Weakness

Multiple interpretation error in F-Prot 3.16c allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangero...

CVE-2005-3372: Undefined Security Weakness

Multiple interpretation error in eTrust CA 7.0.1.4 with the 11.9.1 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could...

CVE-2005-3373: Undefined Security Weakness

Multiple interpretation error in Dr.Web 4.32b allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangero...

[SA17218] PHP-Nuke NukeFixes Addon "file" Local File Inclusion Vulnerability

TITLE: PHP-Nuke NukeFixes Addon "file" Local File Inclusion Vulnerability SECUNIA ADVISORY ID: SA17218 VERIFY ADVISORY: http://secunia.com/advisories/17218/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: NukeFixes 3.x addon for PHP-Nuke...

MuOnline Loopholes Web Server (pkok.asp) SQL Injection Exploit

No description provided by source. !-- Save this code as .htm and replace SITE/SQLCODE to your server address Some SQL Examples: -Changing character data- update character set...

Mailgust Password Reminder email Field SQL Injection

The remote host appears to be running MailGust, a mailing list manager, newsletter distribution tool and message board. A vulnerability was identified in MailGust that could be exploited by remote attackers to execute arbitrary SQL commands provided PHP's 'magicquotesgpc' setting is disabled...

phpfusion600109.txt

PHP-Fusion v6.00.109 SQL Injection / admin|users credentials disclosure site: http://www.php-fusion.co.uk - if magicquotes off - SQL Injection, poc: http://target/pathtoPhpFusion/messages.php?msgsend=' UNION SELECT userpassword FROM fusionusers WHERE username='adminusername'/ now hash is showed i...

pblang465.php.txt

php.exe ..\www\r57pblang465.php localhost /pbl/ "pblcookie732128=Pe ng0; PBLsecid=a4c2f845c002ac54f5751440647f3c91;" Peng0 PrSrS $ARGV = $SERVER'argv'; global $ARGV; ifcount$ARGV == 0 echo base64decode"3fLu8iDx6vDo7/Ig5O7r5uXtIOH78vwg5+Dv8/nl7SDo5yDq7uzg7eTt7u...

PBLang <= 4.65 Remote Command Execution Exploit (2)

Exploit for unknown platform in category web applications =================================================== PBLang php.exe ..\www\r57pblang465.php localhost /pbl/ "pblcookie732128=Pe ng0; PBLsecid=a4c2f845c002ac54f5751440647f3c91;" Peng0 PrSrS $ARGV = $SERVER'argv'; global $ARGV; ifcount$ARGV =...

phpAdsNew / phpPgAds < 2.0.6 Multiple Vulnerabilities

The remote host is running phpAdsNew / phpPgAds, an open source banner ad server. The version of phpAdsNews / phpPgAds installed on the remote host suffers from several flaws : - Remote PHP Code Injection Vulnerability The XML-RPC library bundled with the application allows an attacker to inject...

phppgadmin -- "formLanguage" local file inclusion vulnerability

A Secunia Advisory reports: A vulnerability has been reported in phpPgAdmin, which can be exploited by malicious people to disclose sensitive information. Input passed to the "formLanguage" parameter in "index.php" isn't properly verified, before it is used to include files. This can be exploited...

CVE-2002-1969

Technical details about CVE-2002-1969 are not publicly available in the provided documents. No concrete exploit, affected versions, or remediation are disclosed here; monitor for updates.

CVE-2002-1969

Magic Notebook 1.0b and 1.1b allows remote attackers to cause a denial of service crash via an invalid username during login...

CVE-2002-1969: Undefined Security Weakness

Magic Notebook 1.0b and 1.1b allows remote attackers to cause a denial of service crash via an invalid username during login...

r57ipb2.pl.txt

!/usr/bin/perl Invision Power Board SQL injection exploit by RST/GHC vulnerable forum versions : 1. , 2. 2.0.4 tested on version 1.3 Final and version 2.0.2 work on all mysql versions work with magicquotes On use %2527 for bypass magicquotesgpc = On coded by 1dt.w0lf screen: r57ipb2.pl blah.com...

Help Center Live Multiple Vulnerabilities (SQLi, XSS, CSRF)

The remote host is running Help Center Live, a help desk written in PHP that suffers from multiple vulnerabilities: - Multiple SQL Injection Vulnerabilities The application fails in many cases to sanitize user- supplied input before using it in database queries. As long as PHP's 'magicquotesgpc'...