Chipmunk Newsletter Cross Site Scripting

view source print? Tested On: Windows Vista Note: For educational purposes only There’s probably a lot more vulnerabilities in their web apps, but I could not even get them to work out of the box.. http://server/newsletter/admin/addlist.php Look no sanitization: 8alert'i could get your...

Chipmunk Newsletter Persistant XSS Vulnerability

Exploit for unknown platform in category web applications ================================================ Chipmunk Newsletter Persistant XSS Vulnerability ================================================ Tested On: Windows Vista Note: For educational purposes only There’s probably a lot more...

Chipmunk NewsLetter - Persistent Cross-Site Scripting

Tested On: Windows Vista Note: For educational purposes only There’s probably a lot more vulnerabilities in their web apps, but I could not even get them to work out of the box.. http://server/newsletter/admin/addlist.php Look no sanitization: 8alert'i could get your cookie'&submit=submit...

SHTTPD <= 1.34 URI-Encoded POST Request Overflow (win32)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'SHTTPD %q Th...

Novell eDirectory DHost HTTPSTK buffer overflow

Added: 11/23/2009 BID: 37042 Background Novell eDirectory is a directory server which implements the LDAP protocol. eDirectory for Windows, Linux, and UNIX includes the DHost program, which runs under eDirectory and provides the functionality of the NetWare operating system. Problem A buffer...

Novell eDirectory DHost HTTPSTK buffer overflow

Added: 11/23/2009 BID: 37042 Background Novell eDirectory is a directory server which implements the LDAP protocol. eDirectory for Windows, Linux, and UNIX includes the DHost program, which runs under eDirectory and provides the functionality of the NetWare operating system. Problem A buffer...

Novell eDirectory DHost HTTPSTK buffer overflow

Added: 11/23/2009 BID: 37042 Background Novell eDirectory is a directory server which implements the LDAP protocol. eDirectory for Windows, Linux, and UNIX includes the DHost program, which runs under eDirectory and provides the functionality of the NetWare operating system. Problem A buffer...

Novell eDirectory DHost HTTPSTK buffer overflow

Added: 11/23/2009 BID: 37042 Background Novell eDirectory is a directory server which implements the LDAP protocol. eDirectory for Windows, Linux, and UNIX includes the DHost program, which runs under eDirectory and provides the functionality of the NetWare operating system. Problem A buffer...

PHP file upload DoS

POST request multipart/form-data with a large number of uploaded files causes resources exhaustion...

Cross site request forgery (csrf)

weblogin/login.fcgi aka the WebLogin login script in Stanford University WebAuth 3.5.5, 3.6.0, and 3.6.1 places passwords in URLs in certain circumstances involving conversion of a POST request to a GET request, which allows context-dependent attackers to discover passwords by reading 1 web-serve...

CVE-2009-2945

weblogin/login.fcgi aka the WebLogin login script in Stanford University WebAuth 3.5.5, 3.6.0, and 3.6.1 places passwords in URLs in certain circumstances involving conversion of a POST request to a GET request, which allows context-dependent attackers to discover passwords by reading 1 web-serve...

BF Survey Pro Component for Joomla! 'table' Parameter SQLi

The version of BF Survey Pro or BF Survey Pro Free for Joomla! running on the remote host is affected by a SQL injection vulnerability due to improper sanitization of user-supplied input to the 'table' parameter in a POST request when 'task' is set to 'updateOnePage' before using it to construct...

NetGear WNR2000 upg_restore.cgi脚本绕过认证漏洞

BUGTRAQ ID: 36094 WNR2000是美国网件针对小型企业及SOHO用户设计的一款低端无线路由产品。 WNR2000 Web管理界面的/cgi-bin/upgrestore.cgi脚本没有执行正确地验证，远程攻击者可以通过提交恶意的POST请求绕过认证执行管理操作。 Netgear WNR2000 1.2.0.8 厂商补丁： Netgear ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.netgear.com/...

Netgear WNR2000 Bypass

From: http://seclists.org/fulldisclosure/2009/Aug/280 --- From: Jean Trolleur Date: Thu, 20 Aug 2009 13:05:19 -0600 Dere be an audenticashun bypass vulnerability on de Netgear WNR2000 routa' runnin' firmware 1.2.0.8 dat kin allow fo' an attacka' to change da damn admin passwo'd fo' de web interfa...

CMailServer ActiveX Control Multiple Buffer Overflow Vulnerabilities

This host is installed with CMailServer ActiveX Control and is prone to Multiple Buffer Overflow vulnerabilities. OpenVAS Vulnerability Test $Id: secpodcmailserveractivexmultbofvuln.nasl 3898 2009-08-19 12:45:380Z aug CMailServer ActiveX Control Multiple Buffer Overflow Vulnerabilities Authors:...

Sourcefire 3D Sensor and DC, privilege escalation vulnerability

Affected product ---------------- Sourcefire 3D Sensor and Defense Center 4.8.x Tested on 4.8.0.3 and 4.8.0.4, 3D Sensor 2500 & DC 1000 All 4.8.x releases, up to and including 4.8.1, confirmed vulnerable by sourcefire. Vulnerability details --------------------- A privilege escalation vulnerabili...

Sourcefire 3D Sensor / Defense Center Privilege Escalation

Affected product ---------------- Sourcefire 3D Sensor and Defense Center 4.8.x Tested on 4.8.0.3 and 4.8.0.4, 3D Sensor 2500 & DC 1000 All 4.8.x releases, up to and including 4.8.1, confirmed vulnerable by sourcefire. Vulnerability details --------------------- A privilege escalation vulnerabili...

CVE-2009-2256

The administrative web interface on the Netgear DG632 with firmware 3.4.0ap allows remote attackers to cause a denial of service web outage via an HTTP POST request to cgi-bin/firmwarecfg...

Dell OpenManage POST Request Heap Overflow (win32)

This module exploits a heap overflow in the Dell OpenManage Web Server omws32.exe, versions 3.2-3.7.1. The vulnerability exists due to a boundary error within the handling of POST requests, where the application input is set to an overly long file name. This module will crash the web server,...

NETGEAR DG632 Router - Remote Denial of Service

NETGEAR DG632 Router - Remote Denial of Service Product Name: Netgear DG632 Router Vendor: http://www.netgear.com Date: 15 June, 2009 Author: [email protected] Original URL: http://www.tomneaves.co.uk/NetgearDG632RemoteDoS.txt Discovered: 18 November, 2006 Disclosed: 15 June, 2009 I. DESCRIPTIO...