GetSimple CMS 2.01 Cross Site Request Forgery / Cross Site Scripting

Date: Mon 12 Jul 2010 12:11:45 PM EEST Vendor: http://get-simple.info/ Download: http://www.box.net/get-simple --- -= CSRF PoC 1 - Change Admin Password =- GetSimple CMS 2.01 Multiple Vulnerabilities XSS/CSRF - Change Admin Password -= CSRF PoC 2 - Delete Page =- -= CSRF PoC 3 - Delete All Backup...

2DayBiz Job Site Script - SQL Injection

$------------------------------------------------------------------------------------------------------------------- $ 2daybiz Job site Script SQL injection $ Author : Sangteamtham $ Home : Hcegroup.net $ Download :http://www.2daybiz.com/realestateportalscript.html $ Date :06/24/2010 $ $ $Exploit...

MovieLibrary v1.4.401 Local Dos .dmv File

Exploit for windows platform in category dos / poc ========================================= MovieLibrary v1.4.401 Local Dos .dmv File ========================================= Exploit Title: MovieLibrary Local Dos .dmv file Date: April 14, 2010 Software Link: http://wensoftware.com/ Version:...

Discloser 'more' Parameter SQL Injection Vulnerability

The host is running Discloser and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: secpoddisclosersqlinjvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Discloser 'more' Parameter SQL Injection Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 SecPod,...

Sql injection

SQL injection vulnerability in index.php in Discloser 0.0.4 rc2 allows remote attackers to execute arbitrary SQL commands via the more parameter...

CVE-2009-4719: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Discloser 0.0.4 rc2 allows remote attackers to execute arbitrary SQL commands via the more parameter...

CVE-2009-4155: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Eshopbuilde CMS allow remote attackers to execute arbitrary SQL commands via the sitebid parameter to 1 home-f.asp and 2 opinions-f.asp; 3 sitebid, 4 id, 5 secText, 6 client-ip, and 7 Gid parameters to more-f.asp; 8 sitebid, 9 id, 10 maid, 11 miid, 12...

kernel: udp socket NULL ptr dereference

The udpsendmsg function in the UDP implementation in 1 net/ipv4/udp.c and 2 net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service NULL pointer dereference and system crash via vectors involving the MSGMORE flag and a UDP socket...

kernel: udp socket NULL ptr dereference

The udpsendmsg function in the UDP implementation in 1 net/ipv4/udp.c and 2 net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service NULL pointer dereference and system crash via vectors involving the MSGMORE flag and a UDP socket...

kernel: udp socket NULL ptr dereference

The udpsendmsg function in the UDP implementation in 1 net/ipv4/udp.c and 2 net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service NULL pointer dereference and system crash via vectors involving the MSGMORE flag and a UDP socket...

Almnzm 2.0 - Blind SQL Injection

Almnzm 2.0 - Blind SQL Injection ?php iniset"maxexecutiontime",0; printr' || || | || o,7 || . o7 || q||| o///, : / / . /QQQQQQQQQQQQQQQQQQQ\ q Almnzm 2.0 Blind SQL Inj. /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ q Cookie 3 /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ q http://www.almnzm.com |QQQQ/ By Qabandi \QQQQ| |QQQQ| |QQQQ|...

Solaris Update for Obsoleted by 121395-03

Check for the Version of Obsoleted by OpenVAS Vulnerability Test Solaris Update for Obsoleted by 121395-03 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Solaris Update for Obsoleted by 116454-02

Check for the Version of Obsoleted by OpenVAS Vulnerability Test Solaris Update for Obsoleted by 116454-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Pc4Uploader 9.0 - Blind SQL Injection

Pc4Uploader 9.0 - Blind SQL Injection || || | || o,7 || . o7 || q||| ow, : / / . =By: Qabandi =Email: iqaahotmail.fr From Kuwait PEACE =Vuln: pc4arb - pc4 Uploader = 9.0 Blind SQL injection =INFO: http://pc4arb.com/product-13.html =BUY: http://pc4arb.com/deal-13.html =DORK: intext:"Powered by...

Fedora 7 : perl-Imager-0.64-2.fc7 (2008-3920)

Thu Apr 24 2008 Steven Pritchard 0.64-2 - Rebuild. - Thu Apr 24 2008 Steven Pritchard 0.64-1 - Update to 0.64 CVE-2008-1928. - Add versioned Test::More BR. - Thu Mar 6 2008 Tom 'spot' Callaway - 0.62-3 - rebuild for new perl - Tue Feb 19 2008 Fedora Release Engineering - 0.62-2 - Autorebuild for...

Fedora 8 : perl-Imager-0.64-2.fc8 (2008-3352)

Thu Apr 24 2008 Steven Pritchard 0.64-2 - Rebuild. - Thu Apr 24 2008 Steven Pritchard 0.64-1 - Update to 0.64 CVE-2008-1928. - Add versioned Test::More BR. - Thu Mar 6 2008 Tom 'spot' Callaway - 0.62-3 - rebuild for new perl - Tue Feb 19 2008 Fedora Release Engineering - 0.62-2 - Autorebuild for...

Debian Security Advisory DSA 173-1 (bugzilla)

The remote host is missing an update to bugzilla announced via advisory DSA 173-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2005-2711: Undefined Security Weakness

ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, and RealSecure Desktop 3.6 and 7.0, does not drop privileges before launching help from the "More Info" button in the "Application Protection" dialog, which allows local users to...

CVE-2005-2213

Buffer overflow in the mmsinterpheader function in mms.c in MMS Ripper before 0.6.4 might allow remote attackers to execute arbitrary code via a file with more than 20 streams...

CVE-2001-0406: Undefined Security Weakness

Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using 1 a printer queue query, 2 the more command in smbclient, or 3 the mput command in smbclient...