ToendaCMS 1.0.0 - FCKeditor Arbitrary File Upload

ToendaCMS 1.0.0 - FCKeditor Arbitrary File Upload !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; retur...

CVE-2006-3546

Patrice Freydiere ImgSvr aka ADA Image Server allows remote attackers to cause a denial of service daemon crash via a long HTTP POST request. NOTE: this might be the same issue as CVE-2004-2463...

imgsvrDoS.txt

I have provided the fillowing proof of concept.. Afected-softwear Credit's :n00b. http://freshmeat.net/projects/imgsvr/ Exploit, !/usr/bin/perl Proof of concept. Credit's:to n00b for finding this bug. Afected :ImgSvr.exe Download softwear: http://freshmeat.net/projects/imgsvr/ Crash the server wi...

ImgSvr 0.6.5 - POST Denial of Service

!/usr/bin/perl Proof of concept. Credit's:to n00b for finding this bug. Afected :ImgSvr.exe Download softwear: http://freshmeat.net/projects/imgsvr/ Crash the server with overly long http post request.. Main site of affected product. http://freshmeat.net/projects/imgsvr/ Sending an overly long po...

Cisco Secure ACS 2.3 - LoginProxy.cgi Cross-Site Scripting

Cisco Secure ACS 2.3 - LoginProxy.cgi Cross-Site Scripting source: https://www.securityfocus.com/bid/18449/info Cisco Secure ACS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage...

WinGate proxy server buffer overflow

Buffer overflow on oversized POST request...

ozjournals.txt

OZJournals 1.2 alert"lol";&vemail=mail%40mail.it&vlocation=test&vcomment=test ---------------------------------------------------------------------------------------------- Credit Author: Kiki Site: http://kiki91.altervista.org IRC Channel: irc.azzurra.org 6667 system...

Cross site scripting

Bitrix Site Manager 4.1.x allows remote attackers to redirect users to other websites via a modified backurl during a HTTP POST request. NOTE: this issue has been referred to as "cross-site scripting," but that is inconsistent with the common use of the term...

punBB1211.txt

PunBB 1.2.11 Cross-Site Scripting File name :- misc.php Action :- Send Email Line :- 123 php redirect$POST'redirecturl', $langmisc'E-mail sent redirect'; /php The $POST'redirecturl' = Unfilter Input Exploit :- Send POST Request code GET :- /PunBB/misc.php?email=2 POST :-...

PunBB 1.2.11 Cross-Site Scripting

PunBB 1.2.11 Cross-Site Scripting File name :- misc.php Action :- Send Email Line :- 123 php redirect$POST'redirecturl', $langmisc'E-mail sent redirect'; /php The $POST'redirecturl' = Unfilter Input Exploit :- Send POST Request code GET :- /PunBB/misc.php?email=2 POST :-...

sBlog 0.7.2 - 'comments_do.php' Multiple POST Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/17044/info sBlog is prone to HTML-injection vulnerabilities. The application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would be executed in the context of the...

Noah's Classifieds 1.0/1.3 - Search Page SQL Injection

source: https://www.securityfocus.com/bid/16773/info Noah's Classifieds is prone to an SQL-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromise the application, access...

Noahs Classifieds 1.01.3 - Search Page SQL Injection

Noahs Classifieds 1.01.3 - Search Page SQL Injection source: https://www.securityfocus.com/bid/16773/info Noah's Classifieds is prone to an SQL-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...

Trend Micro ServerProtect Management Console isaNVWRequest.dll chunked POST buffer overflow

Added: 01/24/2006 CVE: CVE-2005-1929 BID: 15865 OSVDB: 21771 Background ServerProtect is a virus scanner for servers. Problem A buffer overflow in ServerProtect Management Console could allow a remote attacker to execute commands using a chunked POST request to isaNVWRequest.dll. Resolution Use t...

webftpInclude.txt

SYSCP WEBFTP LOCAL FILE INCLUSION VULNERABILITY Thomas Henlich DESCRIPTION Thomas Henlich has discovered a vulnerability in WebFTP, which can be used by remote attackers to disclose potentially sensitive information and to compromise a vulnerable system. Input passed to the "webftplanguage"...

Make Apache/1.3. x + php_4. 0. 6 Server denial of service-vulnerability warning-the black bar safety net

PHP supports multipart/form-data POST request, referred to as POST file upload. But phpmimesplit a function of the presence of a plurality of vulnerabilities, the exploitation of these vulnerabilities may make on the target system of the Apache denial of service. The code is as follows: include...

Cerberus Helpdesk 2.649 - 'addresses_export.php?queues' SQL Injection

source: https://www.securityfocus.com/bid/16062/info Cerberus Helpdesk is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are the result of inadequate validation of user-supplied input that will be included in site output or in SQL queries. The cross-site...

Cerberus Helpdesk 2.649 - addresses_export.php?queues SQL Injection

Cerberus Helpdesk 2.649 - addressesexport.php?queues SQL Injection source: https://www.securityfocus.com/bid/16062/info Cerberus Helpdesk is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are the result of inadequate validation of user-supplied input that...

[Full-disclosure] [ACSSEC-2005-11-25-0x4] FTGate 4.4 [Build 4.4.000 Oct 26 2005] St ack Buffer Overflow

-=+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++=- ACS Security Assessment Advisory - Stack Buffer Overflow ID: ACSSEC-2005-11-25 - 0x4 Class: Stack based Buffer Overflow Package: FTGate 4.4 Build 4.4.000 Oct 26 2005 Build: Windows NT/2k/XP/2k3 Notified: Dec 01, 2005 Released: Dec 20...

SimpleBBS <= 1.1 Remote Commands Execution Exploit (c code)

No description provided by source. / SimpleBBS = v1.1 remote commands execution in c coded by: unitedasia v.Dec.7.2005 greetz: iloveyouma http://geography.about.com/library/maps/blrasia.htm http://www.lib.utexas.edu/maps/middleeastandasia/asiapol00.jpg $ gcc -o bbs bbs.c Usage ./bbs host /folder/...