php2014.txt

/ -------------------------------------------------------- Neo Security Team NST® - Advisory 14 - 17/04/05 -------------------------------------------------------- Program: phpBB 2.0.14 Homepage: http://www.phpbb.com Vulnerable Versions: phpBB 2.0.14 & Lower versions Risk: Low Risk!! Impact:...

UNICODE BUFFER OVERFLOW IN MS-WORD

UNICODE BUFFER OVERFLOW IN MS-WORD =================================== .mcw is the ms-word format file for Macintosh. the unicode buffer overflow occurs when the user opens the malformed .mcw document. Proof of concept: ----------------- by modifying the .mcw file by using binary editor as follow...

CVE-2003-1205

Crob FTP Server 2.60.1 allows remote authenticated users to cause a denial of service crash by renaming a file to the "con" MS-DOS device name...

Multiple Vulnerabilities in MetaCart e-Shop

/ / | | / // / | | Y / | / / /| / / / / / / .OR.ID ECHOADV13$2005 --------------------------------------------------------------------------- Multiple Vulnerabilities in MetaCart e-Shop --------------------------------------------------------------------------- Author: Dedi Dwianto Date: May, 16t...

CVE-2004-1841

CVE-2004-1841 concerns a SQL injection in MS Analysis module 2.0 for PHP-Nuke, allowing remote attackers to execute arbitrary SQL via the Referer header in an HTTP request. The available documents identify the affected component and the general vulnerability class but do not provide version-speci...

CVE-2004-1841

SQL injection vulnerability in MS Analysis module 2.0 for PHP-Nuke allows remote attackers to execute arbitrary SQL via the referer field in an HTTP request...

CVE-2004-1840

CVE-2004-1840 affects the MS Analysis module 2.0 for PHP-Nuke. The vulnerability is multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary JavaScript/HTML via (1) screen parameter to modules.php, (2) module_name parameter to title.php, (3) sortby parameter to mo...

CVE-2004-1840

Multiple cross-site scripting XSS vulnerabilities in MS Analysis module 2.0 for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the 1 screen parameter to modules.php, 2 modulename parameter to title.php, 3 sortby parameter to modules.php, or 4 overview parameter to...

CVE-2004-1839

MS Analysis module 2.0 for PHP-Nuke exposes full path disclosure via direct requests to browsers.php, mstrack.php, or title.php, enabling Information Disclosure without user interaction. Root cause: PHP error messages reveal filesystem paths. The provided documents do not specify a patched versio...

CVE-2005-0278

The FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to gain sensitive information via a cd command that contains an MS-DOS device name, which reveals the installation path in an error message...

Immunity Canvas: MS05_021

Name| ms05021 ---|--- CVE| CVE-2005-0560 Exploit Pack| CANVAS Description| MS Exchange 2000 MS05-021 X-LINK2STATE heap overflow Notes| CVE Name: CVE-2005-0560 VENDOR: Microsoft MSADV: MS05-021 CVSS: 7.5 CVE Url: https://vulners.com/cve/CVE-2005-0560 Notes: This exploit is reliable over and over...

CVE-2005-0275

TFTP in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service application crash via a GET request containing an MS-DOS device name...

MS Windows WINS Vulnerability and OS/SP Scanner

Exploit for unknown platform in category remote exploits =============================================== MS Windows WINS Vulnerability and OS/SP Scanner =============================================== / HAT-SQUAD WINS VULNERABILITY/OS SCANNER ------------------------------------...

MS Exchange Server Remote Code Execution Exploit (MS05-021)

Exploit for unknown platform in category remote exploits =========================================================== MS Exchange Server Remote Code Execution Exploit MS05-021 =========================================================== !/bin/perl MS05-021 Exchange X-LINK2STATE Heap Overflow Author...

MS Internet Explorer DHTML Object Memory Corruption Exploit

Exploit for unknown platform in category remote exploits =========================================================== MS Internet Explorer DHTML Object Memory Corruption Exploit =========================================================== This program is free software; you can redistribute it and/o...

MS Jet Database (msjet40.dll) DB File Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ============================================================= MS Jet Database msjet40.dll DB File Buffer Overflow Exploit ============================================================= / -------------------------------------- Microsoft Jet...

CVE-2005-0799

MySQL 4.1.9, and possibly earlier versions, allows remote attackers with certain privileges to cause a denial of service application crash via a use command followed by an MS-DOS device name such as 1 LPT1 or 2 PRN...

CVE-2005-0799

MySQL 4.1.9, and possibly earlier versions, allows remote attackers with certain privileges to cause a denial of service application crash via a use command followed by an MS-DOS device name such as 1 LPT1 or 2 PRN...

MS Internet Explorer "mshtml.dll" CSS Parsing Buffer Overflow

Exploit for unknown platform in category remote exploits ============================================================= MS Internet Explorer "mshtml.dll" CSS Parsing Buffer Overflow ============================================================= / The exploit will create a .CSS file that should be...

CVE-2004-0466

WebConnect 6.5, 6.4.4, and possibly earlier versions allows remote attackers to cause a denial of service hang via a URL containing an MS-DOS device name such as 1 AUX, 2 CON, 3 PRN, 4 COM1, or 5 LPT1...