2798 matches found
LokiCMS admin.php文件绕过安全限制漏洞
BUGTRAQ ID: 29448 LokiCMS是一款简单易用的网络内容管理系统。 LokiCMS的admin.php文件中存在逻辑错误，如果远程攻击者在所提交的HTTP POST请求中设置了LokiACTION和其他参数的话，则无需管理权限就可以设置CMS main settings。 以下是有漏洞的代码段： admin.php Lines:24-42 if isset $POST && isset $POST'LokiACTION' && strlen trim $POST'LokiACTION' 0 // we have an action to do switch trim...
Unfixed XSS vulnerability at www.lrv.lt
Security researcher F3nix, has submitted on 06/01/2008 a cross-site-scripting XSS vulnerability affecting www.lrv.lt, which at the time of submission ranked 167214 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/01/2008. It is currently...
CVE-2008-1198
The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which makes it easier for remote attackers to conduct brute force attacks by sniffing an unencrypted preshared key PSK hash...
Unrestricted file upload
Unrestricted file upload vulnerability in GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to the main virtual directory...
Tribisur 'forum.php'/'cat_main.php' SQL注入漏洞
BUGTRAQ ID: 27149 CNCAN ID:CNCAN-2008010812 Tribisur是一款基于PHP的WEB应用程序。 Tribisur不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于'forum.php'和'catmain.php'脚本对用户提交的WEB参数处理缺少充分过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Thomas PEREZ Tribisur 2.0 厂商解决方案 --------- 目前没有解决方案提供：...
Tribisur <= 2.0 Remote SQL Injection Exploit
No description provided by source. !/usr/bin/php -q ?php echo "Tribisur = 2.0 Remote SQL Injection Exploit\r\n"; echo "Coded by x0kster -x0ksterATgmailDOTcom - \r\n"; / Script Download : http://www.comscripts.com/scripts/php.tribisur-20.1211.html Bug 1 in modules/forum/liste.php : First, this...
GoSamba 1.0.1 - INCLUDE_PATH Multiple Remote File Inclusions
GoSamba 1.0.1 - INCLUDEPATH Multiple Remote File Inclusions GoSamba 1.0.1 includepath Multiple Remote File Inclusion Vulnerabilities http://mesh.dl.sourceforge.net/sourceforge/gosamba/gosamba.1.0.1.tar.gz POC : /incgroup.php?includepath=http://localhost/scripts/020.txt?...
CVE-2003-1361
Unknown vulnerability in VERITAS Bare Metal Restore BMR of Tivoli Storage Manager TSM 3.1.0 through 3.2.1 allows remote attackers to gain root privileges on the BMR Main Server...
Unfixed XSS vulnerability at www.kommun-biblioteket.vilhelmina.com
Security researcher Uber0n, has submitted on 29/09/2007 a cross-site-scripting XSS vulnerability affecting www.kommun-biblioteket.vilhelmina.com, which at the time of submission ranked 6652756 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...
Proxy Anket v3.0.1 Sql injection Vulnerable
//////////////// Yollubunlar.Org //////////////////// Proxy Anket v3.0.1 Sql injection Vulnerable Author : Yollubunlar.Org Orginal Article : http://yollubunlar.org/proxy-anket-v301-sql-injection-vulnerable-3502.html Main Page: http://yollubunlar.org/category/web-security Script :...
QuickEStore <= 8.2 (insertorder.cfm) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ======================================================================= QuickEStore = 8.2 insertorder.cfm Remote SQL Injection Vulnerability ======================================================================= web application:QuickEStor...
CVE-2006-7209
Multiple cross-site scripting XSS vulnerabilities in phpTrafficA before 1.2beta2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to keywords results in the 1 main, 2 daily, 3 weekly, 4 monthly, 5 new trends, 6 individual page, and 7 search engine...
NavBoard 2.6.0 - Remote Code Execution
"; print ""; print ""; print "Main forum settings"; print ""; print "Board Title"; print ""; print ""; print ""; print "Admin email address blank will not display"; print ""; print "input type=text name="adminemail" value="$configarr...
XSS in Microsoft SharePoint
Hi! I think this is a XSS in MS SharePoint, you can reproduce it in SharePoint test server using for example following url: http://www.example.com/sharepoint/default.aspx/22;iftruealert22qwertytis This is due a lack of string stripping when putting the path into javascript. It seems to work at...
Mambo Component zOOm Media Gallery <= 2.5 Beta 2 RFI Vulnerabilities
Exploit for unknown platform in category web applications ==================================================================== Mambo Component zOOm Media Gallery array , "getMakernoteTextValue" = array , "InterpretMakernotetoHTML" = array ; // Include the Main TIFF and EXIF Tags array...
Sisplet CMS <= 05.10 (site_path) Remote File Inclusion Vulnerability
Sisplet CMS Found by kezzap66345 Script Download:http://www.sisplet.org/uploadi/editor/Sisplet0504.tar.bz2 https://sourceforge.net/project/showfiles.php?groupid=111881 ERROR1: File:main/forum/komentar.php require$sitepath.'main/forum/class.php'; rfi coded RFI1:...
Unfixed XSS vulnerability at www.fdp-main-tauber.de
Security researcher BackDoor, has submitted on 04/11/2007 a cross-site-scripting XSS vulnerability affecting www.fdp-main-tauber.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...
Sisplet CMS 05.10 - 'site_path' Remote File Inclusion
Sisplet CMS Found by kezzap66345 Script Download:http://www.sisplet.org/uploadi/editor/Sisplet0504.tar.bz2 https://sourceforge.net/project/showfiles.php?groupid=111881 ERROR1: File:main/forum/komentar.php require$sitepath.'main/forum/class.php'; rfi coded RFI1:...
QFTP (LIBFtp 3.1-1) (command line) sprintf() local buffer overflow
http://nbpfaus.net/pfau/ftplib/ qftp is a utility that performs file transfers using ftplib based on instructions presented on the command line. Description buffer overflow in sprintf, setumask don't check sizelen of passed argument. Source error in main: 337: case 'm' : setumaskoptarg; break;...
CVE-2007-1458
Multiple PHP remote file inclusion vulnerabilities in CARE2X 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 inccheckdatelang.php, 2 inccharsetfx.php, 3 incconfigcolor.php, 4 inccurrencyset.php, 5 incdbmakelink.php, 6 incdiagnosticsreportfx.php, 7...