JobSite Professional File.PHP SQL注入漏洞

JobSite Professional是一款基于PHP的WEB应用程序。 JobSite Professional不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL攻击，获得敏感信息或操作数据库。 问题是由于' File.PHP'脚本对用户提交的'id'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，攻击者可以获得敏感信息或操作数据库。 NetArt Media JobSite Professional 2.0 目前没有详细解决方案提供： http://www.jobsiteprofessional.com/...

JobSite Professional 2.0 file.php Remote SQL Injection Vulnerability

No description provided by source. JobSite Professional v2.0 Remote SQL Injection Vulnerability AUTHOR : ZynbER HOME : NoWhere Script WebSite: http://www.jobsiteprofessional.com Dork english version : inurl:index.php?page=enjobseekers Dork french version : inurl:index.php?page=frCandidats EXPLOIT...

jobsite-sql.txt

JobSite Professional v2.0 Remote SQL Injection Vulnerability AUTHOR : ZynbER HOME : NoWhere Script WebSite: http://www.jobsiteprofessional.com Dork english version : inurl:index.php?page=enjobseekers Dork french version : inurl:index.php?page=frCandidats EXPLOITS : Vulnerability in File.php?id=...

JobSite Professional 2.0 - file.php SQL Injection

JobSite Professional 2.0 - file.php SQL Injection JobSite Professional v2.0 Remote SQL Injection Vulnerability AUTHOR : ZynbER HOME : NoWhere Script WebSite: http://www.jobsiteprofessional.com Dork english version : inurl:index.php?page=enjobseekers Dork french version :...

JobSite Professional 2.0 file.php Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== JobSite Professional 2.0 file.php Remote SQL Injection Vulnerability ==================================================================== JobSite Professional v2.0 Remote...

JobSite Professional 2.0 - 'file.php' SQL Injection

JobSite Professional v2.0 Remote SQL Injection Vulnerability AUTHOR : ZynbER HOME : NoWhere Script WebSite: http://www.jobsiteprofessional.com Dork english version : inurl:index.php?page=enjobseekers Dork french version : inurl:index.php?page=frCandidats EXPLOITS : Vulnerability in File.php?id=...

CVE-2004-2727

MailEnable Professional (MEHTTPS/HTTPMail) versions 1.5–1.7 are affected by a heap/overflow issue triggered by an oversized HTTP GET request to the HTTPMail service, causing a denial of service (service crash). OpenVAS notes potential for arbitrary code execution, and some sources indicate a vend...

CVE-2004-2727

Buffer overflow in MEHTTPS HTTPMail of MailEnable Professional 1.5 through 1.7 allows remote attackers to cause a denial of service application crash via a long HTTP GET request...

Microsoft Visual FoxPro 6.0 - 'FPOLE.OCX' Arbitrary Command Execution

----------------------------------------------------------------------------- Microsoft Visual FoxPro 6.0 FPOLE.OCX Arbitrary Command Execution url: http://www.microsoft.com Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose...

Pegasus Imaging ImagXpress 8.0 Remote Arbitrary File Overwrite

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"----------------------------------------------------------------------------- bPegasus Imaging ImagXpress 8.0 Remote Arbitrary File Overwrite/b url:...

Pegasus Imaging ThumbnailXpress 1.0 - Arbitrary File Deletion

Pegasus Imaging ThumbnailXpress 1.0 - Arbitrary File Deletion ----------------------------------------------------------------------------- Pegasus Imaging ThumbnailXpress 1.0 Remote Arbitrary File Deletion url: http://www.pegasusimaging.com/ Author: shinnai mail: shinnaiatautisticidotorg site:...

Pegasus Imaging ImagXpress 8.0 - Arbitrary File Overwrite

----------------------------------------------------------------------------- Pegasus Imaging ImagXpress 8.0 Remote Arbitrary File Overwrite url: http://www.pegasusimaging.com/ Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational...

EDraw Office Viewer Component 5.3 FtpDownloadFile() Remote BoF

Exploit for unknown platform in category dos / poc ============================================================== EDraw Office Viewer Component 5.3 FtpDownloadFile Remote BoF ==============================================================...

EB Design Pty Ltd (EBCRYPT.DLL v.2.0) Multiple Remote Vulnerabilites

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"----------------------------------------------------------------------------- bEB Design Pty Ltd EBCRYPT.DLL v.2.0 Multiple Remote Vulnerabilites/b url:...

Microsoft MFC库CFileFind::FindFile缓冲区溢出漏洞

Microsoft Windows是一款流行的操作系统。 Microsoft Windows包含的MFC库处理CFileFind::FindFile方法存在缓冲区溢出，远程攻击者可以利用漏洞以链接此库的应用程序权限执行任意指令。 问题存在于MFC库包含的FindFile函数中，FindFile函数管理垮文件系统文件搜索，可指定文件类型进行搜索。FindFile函数为buffer1分配内存，buffer1用于存储function2的第一个参数，而没有对其大小进行检查。这个数据用于开始一个搜索。...

Yahoo! Messenger 8.1.0.421 - CYFT Object Arbitrary File Download

----------------------------------------------------------------------------- Yahoo! Messenger 8.1.0.421 CYFT Object ft60.dll Arbitrary File Download url: http://download.yahoo.com/dl/msgr8/us/ymsgr8us.exe Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was...

MW6 Technologies QRCode ActiveX 3.0 Remote File Overwrite Exploit

Exploit for unknown platform in category remote exploits ================================================================= MW6 Technologies QRCode ActiveX 3.0 Remote File Overwrite Exploit =================================================================...

Microsoft Visual Studio 6.0 (VBTOVSI.DLL 1.0.0.0) File Overwrite Exploit

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"---------------------------------------------------------------------------------------------------------...

Microsoft Visual Studio 6.0 - PDWizard.ocx Remote Command Execution

Microsoft Visual Studio 6.0 - PDWizard.ocx Remote Command Execution ------------------------------------------------------------------------------------------------------ Microsoft Visual Studio 6.0 PDWizard PDWizard.ocx url: http://www.microsoft.com author: shinnai mail: shinnaiatautisticidotorg...

msvb-vbto.txt

--------------------------------------------------------------------------------------------------------- Microsoft Visual Studio 6.0 VB To VSI Support Library VBTOVSI.DLL v. 1.0.0.0 Arbitrary File Overwrite url: http://www.microsoft.com author: shinnai mail: shinnaiatautisticidotorg site:...