163 matches found
MiniWeb远程缓冲区溢出漏洞
BUGTRAQ ID: 34563 CNCAN ID：CNCAN-2009041703 Miniweb是一款WEB服务程序。 Miniweb不正确处理超长请求，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 提交超过过120字符的URL可导致触发缓冲区溢出，精心构建提交数据可能以应用程序权限执行任意指令。 Stanley Huang MiniWeb 0.8.19 目前没有解决方案提供： http://sourceforge.net/projects/miniweb / BoF when requesting URI longer than 120 / using System;...
MiniWeb Web server multiple security vulnerabilities
Buffer overflow, directory traversal...
MiniWeb 0.8.19 - Remote Buffer Overflow
MiniWeb 0.8.19 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/34563/info MiniWeb is prone to a remote buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result...
Miniweb Buffer Overflow
Miniweb Remote Buffer Overflow By: e.wiZz! Site: www.balcansecurity.com Found with ServMeNot world's sexiest fuzzer :P In the wild... / BoF when requesting URI longer than 120 / using System; using System.IO; using System.Net; using System.Text; namespace idiot class pf static void Mainstring arg...
Miniweb Source Disclosure
Miniweb webserver Source Disclousure Vulnerabilities By: e.wiZz! Site: www.balcansecurity.com Found with ServMeNot world's sexiest fuzzer :P : In t3h wild... Site: http://miniweb.sourceforge.net/ Info: MiniWeb is a mini HTTP server implementation written in C language, featuring low system resour...
MiniWeb 0.8.19 - Remote Buffer Overflow
source: https://www.securityfocus.com/bid/34563/info MiniWeb is prone to a remote buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. / BoF...
Miniweb Buffer Overflow
Miniweb Remote Buffer Overflow By: e.wiZz! Site: www.balcansecurity.com Found with ServMeNot world's sexiest fuzzer :P In the wild... / BoF when requesting URI longer than 120 / using System; using System.IO; using System.Net; using System.Text; namespace idiot class pf static void Mainstring arg...
Miniweb server Multiple Vulnerabilities
Miniweb webserver Source Disclousure Vulnerabilities By: e.wiZz! Site: www.balcansecurity.com Found with ServMeNot world's sexiest fuzzer :P : In t3h wild... Site: http://miniweb.sourceforge.net/ Info: MiniWeb is a mini HTTP server implementation written in C language, featuring low system resour...
CVE-2008-6582
SQL injection vulnerability in index.php in Miniweb 2.0 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action...
Sql injection
SQL injection vulnerability in index.php in Miniweb 2.0 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action...
CVE-2008-6582
CVE-2008-6582 describes a SQL injection vulnerability in index.php of Miniweb 2.0, where the login action vulnerable via the username parameter allows remote attackers to execute arbitrary SQL commands. Connected documents confirm the affected component and the injection vector; no exploitation d...
CVE-2008-6582
SQL injection vulnerability in index.php in Miniweb 2.0 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action...
CVE-2008-6582: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in Miniweb 2.0 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action...
miniweb20-sql.txt
Miniweb 2.0 Admin bypass Type: 'union select 1 in the username field and press login, you are admin! download: http://www.miniweb2.com/ Found by bizzit and cybernetic Contact: bizzitatlive.de Greetz to: Suicide, ReED, h0yt3r, J0hn^x3r, tmh, n00bor, Five-Three-Nine, electron1x, Nazrek, Free-Hack a...
Miniweb 2.0 (Auth Bypass) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ===================================================== Miniweb 2.0 Auth Bypass SQL Injection Vulnerability ===================================================== Miniweb 2.0 Admin bypass Type: 'union select 1 in the username field and press...
Miniweb 2.0 - Authentication Bypass
Miniweb 2.0 Admin bypass Type: 'union select 1 in the username field and press login, you are admin! download: http://www.miniweb2.com/ Found by bizzit Contact: bizzitatlive.de Greetz to: Suicide, ReED, h0yt3r, J0hn^x3r, tmh, n00bor, Five-Three-Nine, electron1x, Nazrek, Free-Hack and Sys-Flaw...
Miniweb 2.0 - Authentication Bypass
Miniweb 2.0 - Authentication Bypass Miniweb 2.0 Admin bypass Type: 'union select 1 in the username field and press login, you are admin! download: http://www.miniweb2.com/ Found by bizzit Contact: bizzitatlive.de Greetz to: Suicide, ReED, h0yt3r, J0hn^x3r, tmh, n00bor, Five-Three-Nine, electron1x...
Miniweb 2.0 (Auth Bypass) SQL Injection Vulnerability
No description provided by source. Miniweb 2.0 Admin bypass Type: 'union select 1 in the username field and press login, you are admin! download: http://www.miniweb2.com/ Found by bizzit Contact: bizzitatlive.de Greetz to: Suicide, ReED, h0yt3r, J0hn^x3r, tmh, n00bor, Five-Three-Nine, electron1x,...