TR Forum 2.0 - SQL Injection Bypass Security Restriction

TR Forum 2.0 - SQL Injection Bypass Security Restriction !/usr/bin/perl Affected.scr..: Tr Forum V2.0 Poc.ID........: 10060903 Type..........: SQL Injection, Bypass Security Restriction Risk.level....: Medium Vendor.Status.: Unpatched Src.download..: comscripts.com/scripts/php.tr-forum.1579.html...

Annuaire 1Two 2.2 - SQL Injection

Annuaire 1Two 2.2 - SQL Injection !/usr/bin/perl Affected.scr..: Annuaire 1Two 2.2 Poc.ID........: 09060902.txt Type..........: SQL Injection without quote Risk.level....: Medium Vendor.Status.: Unpatched Src.download..: http://www.1two.org/ Poc.link......: acid-root.new.fr/poc/09060902.txt...

Annuaire 1Two 2.2 Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Affected.scr..: Annuaire 1Two 2.2 Poc.ID........: 09060902.txt Type..........: SQL Injection without quote Risk.level....: Medium Vendor.Status.: Unpatched Src.download..: http://www.1two.org/ Poc.link......: acid-root.new.fr/poc/09060902.txt...

[KAPDA]MyBB 1.1.7 ~ admin/global.php ~ XSS Attack

ORIGINAL ADVISORY: http://myimei.com/security/2006-08-17/mybb-117-adminglobalphp-xss-attack.html http://kapda.ir/page-advisory.html ——————-Summary—————- Software: MyBB Sowtware’s Web Site: http://www.mybboard.com Versions: 1.1.7 Class: Remote Status: Unpatched Exploit: Available Solution: Availab...

Solaris 9 (x86) : 120884-02

SunOS 5.9x86: procfs Patch. Date this patch was last updated by Sun : Aug/10/06 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...

Solaris 10 (sparc) : 121236-02

SunOS 5.10: ncp patch. Date this patch was last updated by Sun : Jul/11/06 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit...

CAID 34325 - CA ITM, eAV, ePP scan job description field format string vulnerability

Title: CAID 34325 - CA ITM, eAV, ePP scan job description field format string vulnerability CA Vulnerability ID: 34325 CA Advisory Date: 2006-06-26 Discovered By: Deral Heiland www.layereddefense.com Impact: Attackers can cause a denial of service condition or possibly execute arbitrary code...

[Full-disclosure] Layered Defense Advisory: Format String Vuln in CA eTrust

=============================================================== Layered Defense Advisory 27 June 2006 =============================================================== 1 Affected Software Computer Associates: eTrust Antivirus 8.0 Computer Associates: eTrust PestPatrol 8.0 Computer Associates:...

mybloggie221.txt

Milli-Harekat Advisory www.milli-harekat.org MyBloggie = 2.1.1 version - Remote File Include Vulnerabilities Risk : meduim Class: Remote Script : MyBloggie 2.1.1 version Msn : erne at ernealizm.com Credits : ERNE Thanks : DjReMix,Eskobar,Blackened,TRIP,ßy KorsaN,OsL3m7,Poizonbox,Dilejyoner and Al...

neo-Advisory-20.txt

/ --------------------------------------------------------------- Neo Security Team NST® Advisory 20 --------------------------------------------------------------- Program : CuteNews 1.4.1 Homepage: http://www.cutephp.com Vulnerable Versions: CuteNews 1.4.1 & lower ones Risk: Medium! Impact: Cro...

[Full-disclosure] CAID 34013 - CA Common Services CAIRIM on z/OS LMP SVC vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: CAID 34013 - CA Common Services CAIRIM on z/OS LMP SVC vulnerability CA Vulnerability ID: 34013 CA Advisory Date: 2006-05-02 Discovered By: IBM Global Services Impact: Local attacker can gain escalated privileges. Summary: A potential...

[Full-disclosure] SQL Injection in package SYS.DBMS_LOGMNR_SESSION

Name SQL Injection in package SYS.DBMSLOGMNRSESSION Systems Affected Oracle Database Severity Medium Risk Category SQL Injection DB06 Vendor URL http://www.oracle.com/ Author Alexander Kornbrust ak at red-database-security.com Advisory 18 April 2006 V 1.00 Oracle Bugid 6980723 Details The package...

[KAPDA::#38] - MyBB 1.1.0~functions_post.php~XSS Attack

ORIGINAL ADVISORY: http://myimei.com/security/2006-03-12/mybb-110functionspostphpxss-attack.html http://kapda.ir/advisory-305.html ---------- ——————-Summary—————- Software: MyBB Sowtware’s Web Site: http://www.mybboard.com Versions: 1.1.0 Class: Remote Status: Unpatched Exploit: Private Solution:...

Milkeyway-0.1.1.txt

Milkeyway Captive Portal Multiple Vulnerabilities Name Multiple Vulnerabilities in Milkeyway Captive Portal Systems Affected WebCalendar any version, verified on 0.1 and 0.1.1 Severity Medium Risk Vendor sourceforge.net/projects/milkeyway Advisory...

Milkeyway Multiple Vulnerabilities

Milkeyway Captive Portal Multiple Vulnerabilities Name Multiple Vulnerabilities in Milkeyway Captive Portal Systems Affected WebCalendar any version, verified on 0.1 and 0.1.1 Severity Medium Risk Vendor sourceforge.net/projects/milkeyway Advisory...

noahClassified.txt

Advisory 10 Title: Noah's Classifieds Multiple Cross-Site Scripting Vulnerabilities Author: 0ozeuso0 Arturo Z. Contact: [email protected] Website: www.elitemexico.org Date: 09/03/2006 Risk: Medium Vendor Url: http://classifieds.phpoutsourcing.com/ Affected Software: Noah's Classifieds Non...

textfilebbmessanger.txt

ORIGIONAL: http://notlegal.ws/textfilebbmessanger.txt software: textfileBB vendors website: http://tfbb.jcink.com/ versions: = 1.0 class: remote status: unpatched exploit: available solution: not available discovered by: retard risk level: medium exploits:...

simplogsploit.txt

——–summary software: simplog vendors website: http://daverave.64digits.com/home.php?page=simplog versions: directory transversal: http://example.com/index.php?act=blog&blogid=../somefile http://example.com/index.php?act=../somefile ——– credit authors: retard and jim email: [email protected]...

histhost v1.0.0 xss and possible rmdir

——– summary software: HitHost vendors website: http://daverave.64digits.com/index.php?page=hithost versions: = 1.0.0 class: remote status: unpatched exploit: available solution: not available discovered by: retard risk level: medium ——– description hithost uses $GET variables in crucial parts of...

Game-Panel <= 2.1.6 XSS

ORIGIONAL SOURCE: http://notlegal.ws/gamepanel.txt summary software: Game-Panel vendors website: http://game-panel.com versions: = 2.6.1 class: remote status: unpatched exploit: available solution: not available discovered by: sycko risk level: medium description game-panel uses a global variable...