1819 matches found
CVE-2007-1981
The safevoidvsnprintf function in Metamod-P 1.19p29 and earlier on Windows allows remote attackers to cause a denial of service daemon crash via a long meta list command...
CVE-2007-1981
The safevoidvsnprintf function in Metamod-P 1.19p29 and earlier on Windows allows remote attackers to cause a denial of service daemon crash via a long meta list command...
CVE-2007-1981
The CVE-2007-1981 issue affects Metamod-P 1.19p29 and earlier on Windows, where the safevoid_vsnprintf function can be triggered by a long meta list command to cause a denial of service (daemon crash). The available connected data confirms the affected component and the impact as described (DoS)....
CVE-2007-1981
The safevoidvsnprintf function in Metamod-P 1.19p29 and earlier on Windows allows remote attackers to cause a denial of service daemon crash via a long meta list command...
Battle.net Clan Script for PHP 1.5.1 - SQL Injection
Battle.net Clan Script for PHP 1.5.1 - SQL Injection script : Battle.net Clan Script 1.5 file : login.php attack : injection sql auteur : h a c k e r X code : ------------------------------------------------------------------------------------------ line 9 -- $user = $POST'user'; line 10-- $pass ...
Sql injection
SQL injection vulnerability in modules/myalbum/viewcat.php in the myAlbum-P 2.0 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...
CVE-2007-1807
SQL injection vulnerability in modules/myalbum/viewcat.php in the myAlbum-P 2.0 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...
CVE-2007-1807
CVE-2007-1807 involves an SQL injection in the myAlbum-P 2.0 and earlier module for Xoops, specifically in modules/myalbum/viewcat.php via the cid parameter. Remote attackers could potentially execute arbitrary SQL commands. The description confirms the vulnerable component (myAlbum-P module for ...
CVE-2007-1807
SQL injection vulnerability in modules/myalbum/viewcat.php in the myAlbum-P 2.0 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...
XOOPS Module myAlbum-P <= 2.0 (cid) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================ XOOPS Module myAlbum-P : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit...
XOOPS Module myAlbum-P <= 2.0 (cid) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: XOOPS Module myAlbum-P = 2.0 cid Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : Dork : myAlbum-P 2.0 original Example S. : http://www.google.com.tr/search?q=+myAlbum-P+2.0+++original&hl=tr&start=0&sa=N...
XOOPS Module myAlbum-P 2.0 - 'cid' SQL Injection
!/usr/bin/perl Script Name: XOOPS Module myAlbum-P : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User ID uid: "; $id = ; chop $id; $target =...
PHP <= 4.4.6 mssql_[p]connect() Local Buffer Overflow Exploit
No description provided by source...
CVE-2006-7114
P-News 2.0 stores db/user.txt under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and password hashes via a direct request. NOTE: this might be the same issue as CVE-2006-6888...
CVE-2006-7114
P-News 2.0 stores db/user.txt under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and password hashes via a direct request. NOTE: this might be the same issue as CVE-2006-6888...
CVE-2006-7113
Unrestricted file upload vulnerability in P-News 2.0 allows remote attackers to upload and execute arbitrary files via an avatar file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-7114
In CVE-2006-7114, P-News 2.0 stores db/user.txt under the web document root, exposing user credentials due to insufficient access control. This allows remote attackers to directly request the file and obtain usernames and password hashes. The issue is corroborated by the NVD entry; no additional ...
CVE-2006-7113
CVE-2006-7113 : Unrestricted file upload in P-News 2.0 allows remote attackers to upload and execute arbitrary files via an avatar file. The CVSSv2 base score is 7.5 (HIGH) with network access, low attack complexity, and no authentication required; impacts include partial conf., integrity, and av...
CVE-2006-6888
P-News 1.16 and 1.17 store sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the administrative account name and password hash via a direct request for db/user.dat...
CVE-2006-6888
CVE-2006-6888 affects P-News 1.16 and 1.17, where sensitive data is stored under the web root with insufficient access control. The issue allows remote attackers to directly request db/user.dat and obtain the administrative account name and password hash. This is a direct information-disclosure a...