SMF <= 1.1.4 COOKIE[topic] SQL-Injection Exploit

Здравствуйте, Зараза. Поддержим отечественного произодителя. SMF = 1.1.4 COOKIEtopic SQL-Injection Exploit www.simplemachines.org Уязвимость заключается в неопределенном параметре $topic. Атакующий может определить его значение и выполнить произольный SQL-запрос в базу данных приложения...

Family Connections CMS 1.4 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. ========================================================================== Family Connections CMS 1.4 Multiple Remote SQL Injection Vulnerabilities ========================================================================== ,--^----------,--------,-----,-------^-...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in BrowserCRM 5.002.00, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the bcrmpubroot parameter to 1 kb.php, 2 login.php, 3 index.php, 4 contactview.php, and 5 contact.php in pub/, different...

CVE-2008-2690

Multiple PHP remote file inclusion vulnerabilities in BrowserCRM 5.002.00, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the bcrmpubroot parameter to 1 kb.php, 2 login.php, 3 index.php, 4 contactview.php, and 5 contact.php in pub/, different...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in BigACE 2.4, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 GLOBALSBIGACEDIRaddon parameter to a addon/smarty/plugins/function.captcha.php and b system/classes/sql/AdoDBConnection.php; a...

Softpedia SiteXS CMS 0.1.1 Arbitrary File Upload Vulnerability

No description provided by source. SiteXS CMS Remote File Upload Vulnerability Discovered by : Ciph3r E-Mail : [email protected] CMS: sitexs-0.1.1 CMS All Version Vulnerable Download CMS : http://dfn.dl.sourceforge.net/sourceforge/sitexs/sitexs-0.1.1.tar.gz Sp TANX4 : google.com ;...

kernel-xen 3.1.1 virtual guest system denial of service (hypervisor crash) possibility

Xen 3.1.1 allows virtual guest system users to cause a denial of service hypervisor crash by using a debug register DR7 to set certain breakpoints...

Light into the light out of the Liunx Shellcode-exploit warning-the black bar safety net

/------------- Author:merry-go-round of wood the B. C. T [email protected] Date:2008/05/12 Website:www.bugshower.org -------------/ A: What is shellcode Saying one day some Patriotic hackers compiled a Nday overflow exploit program to attack the CNN, the input IP and enter after the discovery of...

Mega File Hosting Script 1.2 (fid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Mega File Hosting Script 1.2 fid Remote SQL Injection Vulnerability ===================================================================== Script: Mega File Hosting scrip...

BigACE 2.4 - Multiple Remote File Inclusions

BigACE 2.4 - Multiple Remote File Inclusions / \ @ /|\ /|\ |-| / | \ /|/\ / | \ @ | |--------------------/--|-voV---|'/--Vov-|-----------------------|-| |-| '^ o o '^ | | | | \Y/' |-| |-| | | | | -=ShAd0w-CrEw=- |-| |-| | | | | |-| ||| | @ l /\ / \ /\ l |-| l / V \ \ V \ l @ l/ \I \ /'...

megafile-sql.txt

Script: Mega File Hosting script Type: SQL Injection 1923TURK.ORG TURKiSHWARRiORR Step 1: Register an account Step 2: login and go to /members.php?folders=1 Step 3: Create a folder with any name Exploitation options: ADIM 1:...

PhpBlock a8.5 - Multiple Remote File Inclusions

??????????????????????????????????????????????????????????????????????????????? ?? C r a C k E r ?? ?? T H E C R A C K O F E T E R N A L M I G H T ?? ?????????????????????????????????????????????????????????????????????????????? ????? From The Ashes and Dust Rises An Unimaginable crack.... ?????...

SiteXS CMS Remote File Upload Vulnerability

Author : Hadi Kiamarsi ---------------------------------------------------------------------------------- Discovered by : Hadi Kiamarsi ---------------------------------------------------------------------------------- Exploited By : Hadi Kiamarsi...

CVE-2008-1675

The bdxioctlpriv function in the tehuti driver tehuti.c in Linux kernel 2.6.x before 2.6.25.1 does not properly check certain information related to register size, which has unspecified impact and local attack vectors, probably related to reading or writing kernel memory...

Design/Logic Flaw

The bdxioctlpriv function in the tehuti driver tehuti.c in Linux kernel 2.6.x before 2.6.25.1 does not properly check certain information related to register size, which has unspecified impact and local attack vectors, probably related to reading or writing kernel memory...

CVE-2008-1675

The bdxioctlpriv function in the tehuti driver tehuti.c in Linux kernel 2.6.x before 2.6.25.1 does not properly check certain information related to register size, which has unspecified impact and local attack vectors, probably related to reading or writing kernel memory...

interact 2.4.1 Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ============================================================= interact 2.4.1 Multiple Remote File Inclusion Vulnerabilities ============================================================= -========================================== ViVa Isla...

Unfixed XSS vulnerability at www.trybalworld.org

Security researcher PaPPy, has submitted on 29/04/2008 a cross-site-scripting XSS vulnerability affecting www.trybalworld.org, which at the time of submission ranked 8462555 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/04/2008. It is...

CVE-2008-1989

CVE-2008-1989 : PHP remote file inclusion in the 123 Flash Chat 6.8.0 module for e107 (123flashchat.php) allows remote code execution when register_globals is enabled. Exploitation occurs via a URL in the e107path parameter, enabling arbitrary PHP execution. The vulnerability is classified with a...

Unfixed XSS vulnerability at www.siteuptime.com

Security researcher PaPPy, has submitted on 26/04/2008 a cross-site-scripting XSS vulnerability affecting www.siteuptime.com, which at the time of submission ranked 70818 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/04/2008. It is current...