CVE-2009-3255

Technical details about CVE-2009-3255 are not publicly available in the provided documents. Monitor for updates; the supplied materials do not reveal affected products/versions, root cause specifics, exploit information, or remediation guidance.

Gazelle CMS 1.0 Multiple Vulnerabilities / RCE Exploit

No description provided by source. !/bin/bash Gazelle CMS 1.0 Multiple Vulnerabilities Script Download: http://www.anantasoft.com/index.php?Gazelle%20CMS/Download Found by whitesheep on 11/08/2009 Contact: [email protected] - https://www.ihteam.net Need magicquotegpc Off for RCE and LFI...

perl-DBD-Pg: dequote_bytea memory leak

Memory leak in the dequotebytea function in quote.c in the DBD::Pg aka DBD-Pg or libdbd-pg-perl module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service memory consumption by fetching data with BYTEA columns...

phpslash <= 0.8.1.1 Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q ?php phpslash = 0.8.1.1 Remote Code Execution Exploit - - - - - - - - - - - - - - - - - - - - - - - - - RCE with no special rights guest. No special PHP conditions required. - - - - - - - - - - - - - - - - - - - - - - - - - 0 It was a private...

ASPired2Quote Database Disclosure

--------------------------------------------------------- Portal Name: ASPired2Quote Vendor : http://thenetguys.us/Home/Quote.asp Author : PouyaServer , [email protected] Vulnerability : DD --------------------------------------------------------- DD: http://site.com/Path/admin/quote.mdb...

ASPired2Quote - Remote Database Disclosure

ASPired2Quote - Remote Database Disclosure --------------------------------------------------------- Portal Name: ASPired2Quote Vendor : http://thenetguys.us/Home/Quote.asp Author : PouyaServer , [email protected] Vulnerability : DD --------------------------------------------------------- D...

CVE-2008-5080

awstats.pl in AWStats 6.8 and earlier does not properly remove quote characters, which allows remote attackers to conduct cross-site scripting XSS attacks via the querystring parameter. NOTE: this issue exists because of an incomplete fix for CVE-2008-3714...

PT-2008-6232 · Awstats · Awstats

Name of the Vulnerable Software and Affected Versions: AWStats versions 6.8 and earlier Description: The issue allows remote attackers to conduct cross-site scripting XSS attacks via the query string parameter, due to the incomplete removal of quote characters by awstats.pl. This problem exists...

Debian: Security Advisory (DSA-1671-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Foundation Security Advisory 2008-58

Mozilla Foundation Security Advisory 2008-58 Title: Parsing error in E4X default namespace Impact: Low Announced: November 12, 2008 Reporter: Chris Evans Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.0.4 Firefox 2.0.0.18 Thunderbird 2.0.0.18 SeaMonkey 1.1.13 Description Security...

MindDezign Photo Gallery 2.2 (index.php id) SQL Injection Vulnerability

No description provided by source. ================================================================================== MindDezign Photo Gallery 2.2 index.php id Remote SQL Injection Vulnerability ==================================================================================...

minddezignpg-sql.txt

================================================================================== MindDezign Photo Gallery 2.2 index.php id Remote SQL Injection Vulnerability ================================================================================== ,--^----------,--------,-----,-------^--, | |||||||||...

MindDezign Photo Gallery 2.2 - SQL Injection

================================================================================== MindDezign Photo Gallery 2.2 index.php id Remote SQL Injection Vulnerability ================================================================================== ,--^----------,--------,-----,-------^--, | |||||||||...

MindDezign Photo Gallery 2.2 - SQL Injection

MindDezign Photo Gallery 2.2 - SQL Injection ================================================================================== MindDezign Photo Gallery 2.2 index.php id Remote SQL Injection Vulnerability ==================================================================================...

212cafe Board 0.07 (view.php qID) SQL Injection Vulnerability

No description provided by source. =================================================================== 212cafe Board view.php qID Remote SQL Injection Vulnerability =================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' ...

PromoteWeb MySQL (go.php id) Remote SQL Injection Vulnerability

No description provided by source. =================================================================== PromoteWeb MySQL go.php id Remote SQL Injection Vulnerability =================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' ...

ultimatewebboard-sql.txt

================================================================================ Ultimate Webboard webboard.php Category Remote SQL Injection Vulnerability ================================================================================ ,--^----------,--------,-----,-------^--, | |||||||||...

PromoteWeb MySQL - 'id' SQL Injection

=================================================================== PromoteWeb MySQL go.php id Remote SQL Injection Vulnerability =================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Ultimate WebBoard 3.00 - 'Category' SQL Injection

================================================================================ Ultimate Webboard webboard.php Category Remote SQL Injection Vulnerability ================================================================================ ,--^----------,--------,-----,-------^--, | |||||||||...

PromoteWeb MySQL - id SQL Injection

PromoteWeb MySQL - id SQL Injection =================================================================== PromoteWeb MySQL go.php id Remote SQL Injection Vulnerability =================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------'...