Cpanel <= 11.x (Fantastico) LFI Vulnerability (sec bypass)

Exploit for unknown platform in category web applications ========================================================== Cpanel First Create directory Let the name /includes/ and upload Shell.php in /includes/ Then rename it to enclicensingservers.php :::xploit::::...

Xine multiple security vulnerabilities

5 buffer overflows in real Audio parsing, vulnerabilities in mng, mod, qt, matroska formats handling...

mod_perl PerlRun denial of service

PerlRun.pm in Apache modperl before 1.30, and RegistryCooker.pm in modperl 2.x, does not properly escape PATHINFO before use in a regular expression, which allows remote attackers to cause a denial of service resource consumption via a crafted URI...

BBlog 0.7.6 (mod) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================== BBlog 0.7.6 mod Remote SQL Injection Vulnerability ==================================================== BBlog 0.7.6 SQL Injection Vuln Vulnpath: /bblogplugins/builtin.help.php Vuln:...

apache mod_status cross-site scripting

Cross-site scripting XSS vulnerability in modstatus in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

mod_perl PerlRun denial of service

PerlRun.pm in Apache modperl before 1.30, and RegistryCooker.pm in modperl 2.x, does not properly escape PATHINFO before use in a regular expression, which allows remote attackers to cause a denial of service resource consumption via a crafted URI...

httpd: mod_imagemap XSS

Cross-site scripting XSS vulnerability in the 1 modimap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the 2 modimagemap module in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

apache mod_status cross-site scripting

Cross-site scripting XSS vulnerability in modstatus in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

mod_perl PerlRun denial of service

PerlRun.pm in Apache modperl before 1.30, and RegistryCooker.pm in modperl 2.x, does not properly escape PATHINFO before use in a regular expression, which allows remote attackers to cause a denial of service resource consumption via a crafted URI...

mod_autoindex XSS

Cross-site scripting XSS vulnerability in modautoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that th...

mod_ssl ssl_util_uuencode_binary CA issue

Stack-based buffer overflow in the sslutiluuencodebinary function in sslutil.c for Apache modssl, when modssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN...

httpd mod_status XSS

Cross-site scripting XSS vulnerability in modstatus.c in the modstatus module in Apache HTTP Server httpd, when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browser...

httpd cross-site scripting flaw in mod_imap

Cross-site scripting XSS vulnerability in the modimap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps...

PHP-Fusion Mod classifieds (lid) Remote SQL Injection Vulnerability

No description provided by source. Php fusion "classifieds" SQL-injetion ++++++++++++++++++++++++++++ Author : boom3rang contact : boomerang at knaqu-shqipe dot de webpage : www.khg-crew.ws ++++++++++++++++++++++++++++ ---- Remote SQL Injection ------ + Dork:...

PHP-Fusion Mod Classifieds - 'lid' SQL Injection

Php fusion "classifieds" SQL-injetion ++++++++++++++++++++++++++++ Author : boom3rang contact : boomerang at knaqu-shqipe dot de webpage : www.khg-crew.ws ++++++++++++++++++++++++++++ ---- Remote SQL Injection ------ + Dork: inurl:"classifieds.php?op=detailadverts" + Example:...

PHP-Fusion Mod Kroax 4.42 - category SQL Injection

PHP-Fusion Mod Kroax 4.42 - category SQL Injection ========================================================== The kroax phpfusion Remote SQL-injection. ========================================================== Author : boom3rang Contact : [email protected] webpage : www.khg-crew.ws ---...

phpraider-rfi.txt

Application Name : PhpRaider Mod phpbb3 Vulnerable Type : Remote File Include Google Keyword : Powered by phpRaider v1.0.7 Infection : İlgili site ve sunucuya erişim sağlanabilir. Bug Fix Advice : Undefined değerler, tanımlanmalıdır. author : KaCaK a.K.a Dr.Hack3r Error Code :...

phpRaider 1.0.7 (phpbb3.functions.php) RFI Vulnerability

No description provided by source. ------------------- header data start ------------------- Application Name : PhpRaider Mod phpbb3 Vulnerable Type : Remote File Include Google Keyword : Powered by phpRaider v1.0.7 Infection : Ä°lgili site ve sunucuya eriÅŸim saÄŸlanabilir. Bug Fix Advice :...

phpRaider 1.0.7 (phpbb3.functions.php) RFI Vulnerability

Exploit for unknown platform in category web applications ======================================================== phpRaider 1.0.7 phpbb3.functions.php RFI Vulnerability ======================================================== Application Name : PhpRaider Mod phpbb3 Vulnerable Type : Remote File...

PHPRaider 1.0.7 - 'PHPbb3.functions.php' Remote File Inclusion

Application Name : PhpRaider Mod phpbb3 Vulnerable Type : Remote File Include Google Keyword : Powered by phpRaider v1.0.7 Infection : İlgili site ve sunucuya erişim sağlanabilir. Bug Fix Advice : Undefined değerler, tanımlanmalıdır. author : KaCaK a.K.a Dr.Hack3r Error Code :...