8285 matches found
Cacti Copy_Cacti_User.PHP SQL注入漏洞
Cacti是一款基于PHP的WEB应用程序。 Cacti不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'CopyCactiUser.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意脚本代码作为参数数据，可导致获得敏感信息。 Cacti Cacti 0.8.6i 目前没有解决方案提供： http://cacti.net/ ?php printr' --------------------------------------------------------------------------- Cacti 0.8.6i...
aspbb.txt
Discovered By: Aria-Security Team Vendor: http://www.aspbb.org/ Risk: Low Type:Remote Password Disclosure PoC: http://TARGET/PATH/db/aspbb.mdb Contact: [email protected]...
openforum.txt
Discovered: Aria-Security Team Vendor: http://www.2enetworx.com/dev/projects/openforum.asp Risk: Low Type:Remote Password Disclosure PoC: http://TARGET/path/openforum.mdb Contact: [email protected]...
rblog-db.txt
Discovered: Aria-Security Team Vendor:http://mike.dewolfe.bc.ca/scripts/rblog/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/data/admin.mdb http://TARGET/path/data/rblog.mdb Contact: [email protected]...
RBlog 1.0 - 'admin.mdb' Remote Password Disclosure
Discovered: Aria-Security Team Vendor: http://mike.dewolfe.bc.ca/scripts/rblog/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/data/admin.mdb http://TARGET/path/data/rblog.mdb Contact: [email protected] milw0rm.com 2007-01-01...
Cacti 0.8.6i (copy_cacti_user.php) SQL Injection Create Admin Exploit
No description provided by source. ?php printr' --------------------------------------------------------------------------- Cacti 0.8.6i "copycactiuser.php" sql injection create new admin exploit by rgod dork: intitle:"login to cacti" mail: retrog at alice dot it site:...
About the database the simple intrusion and rogue damage-vulnerability warning-the black bar safety net
For domestic and foreign a lot of news, BBS and e-Commerce site using ASP+SQL design, and write an ASP programmer many many have just graduated, so, ASP+SQL attack success rate is relatively high. This type of attack method with the NT version and SQL version is not much relationship, there is no...
Integrity Clientless Security (ICS) Update 3.7.120.0
Check Point Integrity Clientless Security ICS protects your Web site by detecting and disabling spyware processes and allowing you to enforce security policies before a user logs onto your network. Using ICS you can prevent users with potentially harmful software from accessing your Web site, a...
Integrity Clientless Security (ICS) Update 3.7.111.0
Check Point Integrity Clientless Security ICS protects your Web site by detecting and disabling spyware processes and allowing you to enforce security policies before a user logs onto your network. Using ICS you can prevent users with potentially harmful software from accessing your Web site, a...
Gene6 FTP Server本地权限提升漏洞
Gene6 FTP Server是一款非常流行的Microsoft Windows平台的FTP Server。 默认安装后，本地的非特权用户可以修改Gene6 FTP Server的设置，例如添加新的SITE命令。由于Gene6 FTP Server是以SYSTEM权限运行的，因此攻击者可以轻易的提升权限。 Gene6 G6 FTP Server http://marc.theaimsgroup.com 1. 以非特权用户的身份登陆。 2. 打开Gene6 FTP Server控制台，添加FTP用户帐号，如“test” 3. 对FTP...
CVE-2006-5791
Multiple cross-site scripting XSS vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to inject arbitrary HTML or web script via 1 the filename for downloading, which is not quoted in an error message by the sendfiledirect function, and 2 the Type or Category values in a N...
CVE-2006-5791
Multiple cross-site scripting XSS vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to inject arbitrary HTML or web script via 1 the filename for downloading, which is not quoted in an error message by the sendfiledirect function, and 2 the Type or Category values in a N...
iPrimal Forums (admin/index.php) Change User Password Exploit
No description provided by source. !perl http://ipigroup.org/downloads/forums.zip Bl0od3r Germany shoutzz to all members of dC3 crew ,matrixkiller,eddie14 special to str0ke use IO::Socket; if @ARGV4 else &start ; sub start $host=$ARGV0; $path=$ARGV1; $user=$ARGV2; $passwd=$ARGV3;...
CVE-2006-5653
Cross-site scripting XSS vulnerability in the errorHTML function in the index script in Sun Java System Messenger Express 6 allows remote attackers to inject arbitrary web script or HTML via the error parameter. NOTE: this issue might be related to CVE-2006-5486, however due to the vagueness of t...
Cross Site Scripting (XSS) Vulnerability in iPlanet Messaging Server Messenger Express by "Sun"
·= Security Advisory =· Issue: Cross Site Scripting XSS Vulnerability in iPlanet Messaging Server Messenger Express by "Sun" Discovered Date: 25/09/2006 Author: Tal Argoni, LegendaryZion. talargoni at gmail.com Product Vendor: http://www.sun.com/ Details: iPlanet Messaging Server Messenger Expres...
Light Blog Remote Multiple Vulnerabilities Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "\r\n"; echo "Light Blog Multiple Vulnerabilities Exploit\r\n"; echo "by BlackHawk [email protected]\r\n"; echo "Thanks to rgod for the php code and Marty for the Love\r\n\r\n"; if $argc4 echo "Usage: php ".$argv0."...
New technologies, new threats ten Web2. 0 under attack-vulnerability warning-the black bar safety net
Web2. 0 is the expression of a new generation of network applications fresh terminology. Start.com,Google maps,Writely and MySpace. com is the use of Web2. 0 paradigm. The level of technology advances, to promote the web2. 0 application development. In the network service context, it has...
The history of the easiest Windows password rescue can't login-bug warning-the black bar safety net
Forgot Windows login password? On the Internet about solution are numerous, but after trying you will find that many methods are simply not effective, and some may even cause the system to collapse completely. By the author in Windows 2 0 0 0 and Windows XP in the repeated research and testing,...
OpenSSH 4.4 is available
OpenSSH 4.4 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100 complete SSH protocol version 1.3, 1.5 and 2.0 implementation and includes sftp client and server support. Once again, we would like to thank the OpenSSH community...
CVE-2006-4652
1 Amazing Little Poll and 2 Amazing Little Picture Poll have a default password of "dsapoll", which allows remote attackers to create a new poll by entering default credentials via lpadmin.php...