sNews SNews.PHP验证绕过漏洞

sNews是一款基于PHP的WEB应用程序。 sNews不正确过滤用户提交的输入，远程攻击者可以利用漏洞绕过验证，获得管理员的访问。 问题是'SNews.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意数据作为参数，可导致重设管理员密码，获得对应用程序的控制。 sNews sNews 1.5.30 sNews sNews 1.5.29 目前没有解决方案提供： http://www.solucija.com/home/snews/ ?php printr'...

sNews <= 1.5.30 Remote Reset Admin Pass / Command Exec Exploit

Exploit for unknown platform in category web applications ============================================================== sNews = 1.5.30 Remote Reset Admin Pass / Command Exec Exploit ============================================================== ?php printr'...

CVE-2004-2675: Undefined Security Weakness

ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to cause a denial of service crash via a SITE PASS command with a long password parameter, which causes the database to be corrupted...

Enthrallweb eCoupons 1.0(myprofile.asp) Remote Pass Change Exploit

No description provided by source. form action="target/myprofile.asp" method="POST" name="form2" p/p table align="center" cellpadding="1" cellspacing="1" tr valign="baseline" td align="right" nowrap class="title"strongfont face="Verdana, Arial, Helvetica, sans-serif"PASSWORD:/font/strong/td Chang...

Enthrallweb eNews 1.0 Remote User Pass Change Exploit

Exploit for unknown platform in category web applications ===================================================== Enthrallweb eNews 1.0 Remote User Pass Change Exploit ===================================================== User Id: PASSWORD: FIRST: LAST:/fo...

Enthrallweb eCoupons 1.0 - myprofile.asp Remote Pass Change

Enthrallweb eCoupons 1.0 - myprofile.asp Remote Pass Change PASSWORD: Change Profile UserName= FIRST: LAST:...

Enthrallweb eNews 1.0 Remote User Pass Change Exploit

No description provided by source. form action="target/classifieds/myprofile.asp" method="POST" name="form2" User Id: input type="text" name="MMrecordId" value="1" p/p table align="center" cellpadding="1" cellspacing="1" tr valign="baseline" td align="right" nowrap class="title"strongfont...

Enthrallweb eNews 1.0 - Remote User Pass Change

Enthrallweb eNews 1.0 - Remote User Pass Change User Id: PASSWORD: FIRST: LAST:...

Enthrallweb eNews 1.0 - Remote User Pass Change

User Id: PASSWORD: FIRST: LAST: tr valign="baseline...

Enthrallweb eCoupons 1.0 - 'myprofile.asp' Remote Pass Change

PASSWORD: Change Profile UserName= FIRST: LAST: tr va...

Enthrallweb eClassifieds 1.0 Remote User Pass Change Exploit

No description provided by source. form action="target/myprofile.asp" method="POST" name="form2" p/p table align="center" cellpadding="1" cellspacing="1" tr valign="baseline" td align="right" nowrap class="title" Change Profile=Username input type="text" name="MMrecordId" value="ajann" /td td inp...

Enthrallweb eCoupons 1.0(myprofile.asp) Remote Pass Change Exploit

Exploit for unknown platform in category web applications ================================================================== Enthrallweb eCoupons 1.0myprofile.asp Remote Pass Change Exploit ================================================================== PASSWORD: Change Profile UserName= FIRST...

Enthrallweb eClassifieds 1.0 Remote User Pass Change Exploit

Exploit for unknown platform in category web applications ============================================================ Enthrallweb eClassifieds 1.0 Remote User Pass Change Exploit ============================================================ Change Profile=Username FIRST: LAST:...

CVE-2006-6605

Stack-based buffer overflow in the POP service in MailEnable Standard 1.98 and earlier; Professional 1.84, and 2.35 and earlier; and Enterprise 1.41, and 2.35 and earlier before ME-10026 allows remote attackers to execute arbitrary code via a long argument to the PASS command...

CVE-2006-6605: Undefined Security Weakness

Stack-based buffer overflow in the POP service in MailEnable Standard 1.98 and earlier; Professional 1.84, and 2.35 and earlier; and Enterprise 1.41, and 2.35 and earlier before ME-10026 allows remote attackers to execute arbitrary code via a long argument to the PASS command...

MailEnable POP3 server buffer overflow

Buffer overflow in POP3 PASS command...

[SECURITY] [DSA-1236-1] New enemies-of-carlotta package fix missing sanity checks

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1236-1 [email protected] http://www.debian.org/security/ Steve Kemp December 13, 2006 -...

Golden FTP server 1.92 (USER/PASS) Heap Overflow PoC

Exploit for unknown platform in category dos / poc ==================================================== Golden FTP server 1.92 USER/PASS Heap Overflow PoC ==================================================== ?php 23.07 03/12/2006 Golden FTP server 1.92 freeware edition USER/PASS heap based overfl...

CVE-2006-6450: Undefined Security Weakness

Multiple SQL injection vulnerabilities in dagent/downloadreport.asp in Novell ZENworks Patch Management ZPM before 6.3.2.700 allow remote attackers to execute arbitrary SQL commands via the 1 agentid and 2 pass parameters...

dudirBypass.txt

DUdirectory Admin Panel SQL Injection Download: http://www.duware.com/zips/productsnew/DUdirectory31.zip Search:"DUdrirectory" DUdirectory/admin/default.asp User:'or' Pass:'or' Testing; http://www.euconvention.be/DUdirectory/admin/default.asp...