CVE-2010-2838

The SendCombinedStatusInfo implementation in Cisco Unified Communications Manager aka CUCM, formerly CallManager 7.0SU before 7.02aSU3, 7.1 before 7.15, and 8.0 before 8.03 allows remote attackers to cause a denial of service process failure via a malformed SIP REGISTER message, aka Bug ID...

Command injection

The SendCombinedStatusInfo implementation in Cisco Unified Communications Manager aka CUCM, formerly CallManager 7.0SU before 7.02aSU3, 7.1 before 7.15, and 8.0 before 8.03 allows remote attackers to cause a denial of service process failure via a malformed SIP REGISTER message, aka Bug ID...

CVE-2010-2838

CVE-2010-2838 affects Cisco Unified Communications Manager (CUCM). The vulnerability is caused by the SendCombinedStatusInfo implementation in CUCM’s SIP handling, where a malformed SIP REGISTER message can trigger a denial of service (process failure). Affected CUCM versions are 7.0(2a)SU3, 7.1(...

AneCMS SQL Injection Vulnerability

Exploit for php platform in category web applications ================================== AneCMS SQL Injection Vulnerability ================================== Exploit Title: anecms SQli Date: 23/08/2010 Author: Sweet Contact : email protected Software Link: anecms.com Download:...

AneCMS 1.0/1.3 - 'register/next' SQL Injection

source: https://www.securityfocus.com/bid/42615/info AneCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, ...

AneCMS - registrenext SQL Injection

AneCMS - registrenext SQL Injection Exploit Title: anecms SQli Date: 23/08/2010 Author: Sweet Contact : [email protected] Software Link: anecms.com Download: anecms.com/anecms.zip Version: All Tested on: WinXp sp3 Description : anecms is an open source blog manager...

GejoSoft Image Hosting Script Persistent XSS

Exploit for php platform in category web applications ============================================ GejoSoft Image Hosting Script Persistent XSS ============================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

webNetwork Persistent XSS Vulnerability

Exploit for php platform in category web applications ======================================= webNetwork Persistent XSS Vulnerability ======================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

Easy RM To MP3 2.7.3.7000 Buffer Overflow

Exploit Title: Easy RM to MP3 2.7.3.700 Local Buffer Overflow .m3u , .pls , .smi , .wpl , .wax , .wvx , .ram Date: 4 / 8 / 2010 Author: Oh Yaw Theng Software Link: http://www.exploit-db.com/application/10642/ Version: 2.7.3.700 Tested on: Windows XP SP 1 CVE : N / A !/usr/bin/python This exploit...

Taobao Dr mutual brush platform Alliance upload vulnerability-vulnerability warning-the black bar safety net

In fact, this vulnerability is a dynamic Shopping Mall that upload issue. if session“useridname””" or session“AdminName””" then this is uploadflash. the asp file to access the authentication, you'll need to register a user can upload. With a bright kid direct upload. Find a keyword, but you can...

Zeus Botnet Using Windows LNK Flaw

Isolated strains of mainstream malware that took advantage of how the zero-day Windows flaw first exploited by the sophisticated Stuxnet worm began appearing late last week. The same approach has since been applied by the dodgy sorts behind Zeus, a family of sophisticated toolkits frequently used...

nuBuilder - Remote File Inclusion

nuBuilder - Remote File Inclusion Software: nuBuilder 10.04.x and lowermaybe? Type: Remote File Inclusion Download: http://sourceforge.net/projects/nubuilder/files/ Author: Ahlspiess Email: [email protected] Vulnerable file: report.php report.php file content 1 ?php 2 / 3 File: report.php...

Joomla com_jomestate Persistent XSS Vulnerability

Exploit for php platform in category web applications ================================================= Joomla comjomestate Persistent XSS Vulnerability ================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /...

Zeejobsite Upload Vulnerability

Exploit for php platform in category web applications =============================== Zeejobsite Upload Vulnerability =============================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' ...

PHPBB MOD 2.0.19 Invitation Only PassCode Bypass Vulnerability

Exploit for php platform in category web applications ============================================================== PHPBB MOD 2.0.19 Invitation Only PassCode Bypass Vulnerability ==============================================================...

phpBB MOD 2.0.19 - Invitation Only (PassCode Bypass)

PHPBB MOD 2.0.19 Invitation Only PassCode Bypass vulnerability ------------------------------------------------------------------------------- 0 | | | | | | TM 1 | | | | | | 0 | / | ' \ / | ' \ / |/ | |/ / \ '| ' \ / \ | 1 / / | | | | / | | | | | | | / | | | | | / | 0 //|| ||| || ||,|||\|||...

phpBB MOD 2.0.19 - Invitation Only (PassCode Bypass)

phpBB MOD 2.0.19 - Invitation Only PassCode Bypass PHPBB MOD 2.0.19 Invitation Only PassCode Bypass vulnerability ------------------------------------------------------------------------------- 0 | | | | | | TM 1 | | | | | | 0 | / | ' \ / | ' \ / |/ | |/ / \ '| ' \ / \ | 1 / / | | | | / | | | | |...

Freelancers Marketplace Script Cross Site Scripting

Name : Freelancers Marketplace Script Persistent XSS Vulnerability Date : july 17,2010 Critical Level : HIGH vendor URL :http://www.guruscript.com/ google dork:Powered by Guruscript.com Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd...

Subrion Auto Classifieds Cross Site Scripting

Name :Subrion Auto Classifieds Persistent Xss Vulnerability Date : july 17,2010 Critical Level : HIGH vendor URL :http://www.subrion.com/product/autos.html google dork:© 2010 Powered by Subrion CMS Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd...

Subrion Auto Classifieds Persistent Xss Vulnerability

Exploit for php platform in category web applications ===================================================== Subrion Auto Classifieds Persistent Xss Vulnerability ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /'...