1393 matches found
MX-System 2.7.3 (index.php page) Remote SQL Injection Vulnerability
No description provided by source. Name : MX-System 2.7.3 index.php page Remote SQL Injection Vulnerability Author : cOndemned Dork : intext:Powered by MX-System 2.7.3 Greetz : ZaBeaTy, str0ke, doctor, Avantura /3 PoC :...
MX-System 2.7.3 - index.php SQL Injection
MX-System 2.7.3 - index.php SQL Injection Name : MX-System 2.7.3 index.php page Remote SQL Injection Vulnerability Author : cOndemned Dork : intext:Powered by MX-System 2.7.3 Greetz : ZaBeaTy, str0ke, doctor, Avantura /3 PoC :...
MX-System 2.7.3 - 'index.php' SQL Injection
Name : MX-System 2.7.3 index.php page Remote SQL Injection Vulnerability Author : cOndemned Dork : intext:Powered by MX-System 2.7.3 Greetz : ZaBeaTy, str0ke, doctor, Avantura /3 PoC : http://target/path/index.php?page=-1+union+select+1,2,3,4,5,concatwschar58,version,user,now/...
mxsystem-sql.txt
Name : MX-System 2.7.3 index.php page Remote SQL Injection Vulnerability Author : cOndemned Dork : intext:Powered by MX-System 2.7.3 Greetz : ZaBeaTy, str0ke, doctor, Avantura /3 PoC : http://target/path/index.php?page=-1+union+select+1,2,3,4,5,concatwschar58,version,user,now/...
MX-System 2.7.3 (index.php page) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications =================================================================== MX-System 2.7.3 index.php page Remote SQL Injection Vulnerability =================================================================== Name : MX-System 2.7.3 index.php page...
Adobe Flash CS3 Professional / Macromedia Flash MX code execution
Multiple code execution vulnerabilities on .FLV files parsing...
CVE-2008-1463: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the management GUI in Imperva SecureSphere MX Management Server 5.0 allows remote attackers to inject arbitrary web script or HTML via an invalid or prohibited request to a web server protected by SecureSphere, which triggers injection into the "correctiv...
Imperva SecureSphere 5.0 - Cross-Site Scripting
Imperva SecureSphere 5.0 - Cross-Site Scripting source: https://www.securityfocus.com/bid/28279/info Imperva SecureSphere is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitra...
CVE-2008-0644
Adobe ColdFusion MX 7.x (7.00, 7.01, 7.02) and ColdFusion 8 are affected by a cross‑site scripting bypass via the setEncoding function. The Seebug entry confirms remote attackers can trigger XSS through inadequate handling of CGI variables and setEncoding, with the impact being bypassed XSS prote...
CVE-2008-0644: Undefined Security Weakness
Adobe ColdFusion MX 7 and ColdFusion 8 allows remote attackers to bypass the cross-site scripting XSS protection mechanism for applications via unspecified vectors related to the setEncoding function...
CVE-2008-0643: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Adobe ColdFusion MX 7 and ColdFusion 8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2003-1469
The CVE: CVE-2003-1469 affects Macromedia ColdFusion MX. The default configuration enables Robust Exception Information, which allows remote attackers to obtain the web server’s full path via a direct request to CFIDE/probe.cfm, leaking the path in an error message. Affected component is the CFID...
CVE-2003-1469
The default configuration of ColdFusion MX has the "Enable Robust Exception Information" option selected, which allows remote attackers to obtain the full path of the web server via a direct request to CFIDE/probe.cfm, which leaks the path in an error message...
CVE-2003-1469: Exposure of Sensitive Information to an Unauthorized Actor
The default configuration of ColdFusion MX has the "Enable Robust Exception Information" option selected, which allows remote attackers to obtain the full path of the web server via a direct request to CFIDE/probe.cfm, which leaks the path in an error message...
mxbb233-rfi.txt
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + mxBB Module mxglance 2.3.3 Remote File Include Vulnerability + + + + Discovered by bd0rk || SOH-Crew + + + + www.soh-crew.it.tt + + + + The german Coding and IT-Security Ressource + + +...
Immunity Canvas: ADMINBOT_INCLUDE
Name| adminbotinclude ---|--- CVE| CVE-2007-2986 Exploit Pack| CANVAS Description| AdminBot-MX Remote file inclusion Notes| References: http://www.securityfocus.com/bid/24231 CVE Name: CVE-2007-2986 VENDOR: Nexen Notes: None Repeatability: Infinite Date public: 05/30/07 CERT Advisory: None CVE Ur...
Remote file inclusion
PHP remote file inclusion vulnerability in lib/livestatus.lib.php in AdminBot MX 9.0.5 allows remote attackers to execute arbitrary PHP code via a URL in the ROOT parameter...
CVE-2007-2986
PHP remote file inclusion vulnerability in lib/livestatus.lib.php in AdminBot MX 9.0.5 allows remote attackers to execute arbitrary PHP code via a URL in the ROOT parameter...
CVE-2007-2986
AdminBot MX 9.0.5 contains a PHP remote file inclusion vulnerability in lib/live_status.lib.php where the ROOT parameter can be used to load arbitrary PHP code, enabling remote code execution. Exploitation details and references are listed (e.g., Exploit-DB, X-Force). The documents do not specify...
CVE-2007-2986: Undefined Security Weakness
PHP remote file inclusion vulnerability in lib/livestatus.lib.php in AdminBot MX 9.0.5 allows remote attackers to execute arbitrary PHP code via a URL in the ROOT parameter...