Wordpress Pluging wp-footnotes 2.2 (admin_panel.php) Multiple Vulnerabilites

Wordpress Plugin wp-footnotes 2.2 adminpanel.php Multiple Vulnerabilities Founded: 1st, February 2008 Founder: NBBN 1 No Access Control. An attacker can access the adminpanel of the footnotes. http://site.tld/wordpress/wp-content/plugins/wp-footnotes/adminpanel.php The result - Many XSS...

wpfootnotes-multi.txt

Wordpress Plugin wp-footnotes 2.2 adminpanel.php Multiple Vulnerabilities Founded: 1st, February 2008 Founder: NBBN 1 No Access Control. An attacker can access the adminpanel of the footnotes. http://site.tld/wordpress/wp-content/plugins/wp-footnotes/adminpanel.php The result - Many XSS...

tvp-overflow.txt

/0day Total Video Player V1.03 .m3u file Local Buffer Overflow In this exploit you chose to bind a port or to spawn calc.exe. After I crafted a playlist I observed that the stack got corrupted. The corruption accured in some points,and overwriten a seh handler. I managed to get control of the ECX...

seagull-063-xss.txt

fuzion / // /\ / / : //\ /| : : .. / \ | | :: :: \ / | | :| || \ / | | || || |\ / | | || || | / | \ | || || | / /\ \ | || || | / / \ -/ -/ | |// \ --/ \ / / / / \ / \/ Product: Seagull STABLE 0.6.3 http://seagullproject.org/ Vulnerable: Seems that none of the theme css renderers sanatize...

deluxebb-xss.txt

Founded: 21, January 2008 Autor: NBBN Type: XSS DeluxeBB Version: 1.1 Register Globals: ON Magic Quotes; OFF poc: http://www.site.tld/path/templates/default/admincp/attachmentsheader.php?langlistofmatches=alert"XSS"...

DeluxeBB 1.1 XSS Vulnerabilitie

Founded: 21, January 2008 Autor: NBBN Type: XSS DeluxeBB Version: 1.1 Register Globals: ON Magic Quotes; OFF poc: http://www.site.tld/path/templates/default/admincp/attachmentsheader.php?langlistofmatches=scriptalert"XSS"/script...

FreeBSD : drupal -- XSS (register_globals) (f0fa19dd-c060-11dc-982e-001372fd0af2)

The Drupal Project reports : When theme .tpl.php files are accessible via the web and the PHP setting registerglobals is set to enabled, anonymous users are able to execute cross site scripting attacks via specially crafted links. Drupal's .htaccess attempts to set registerglobals to disabled and...

Member Area System (MAS) Remote File Include Vulnerability (view_func.php)

---------------------------------------------------------------------- Member Area System MAS Remote File Include Vulnerability viewfunc.php ---------------------------------------------------------------------- Author: ShipNX shipnx AT yahoo com Impact: Remote file include Status: Patch not...

mas-rfi.txt

---------------------------------------------------------------------- Member Area System MAS Remote File Include Vulnerability viewfunc.php ---------------------------------------------------------------------- Author: ShipNX Impact: Remote file include Status: Patch not available...

CVE-2007-5761

The NantSys device 5.0.0.115 in Motorola netOctopus 5.1.2 build 1011 has weak permissions for the \.\NantSys device interface nantsys.sys, which allows local users to gain privileges or cause a denial of service system crash, as demonstrated by modifying the SYSENTEREIPMSR CPU Model Specific...

CVE-2007-5761

The NantSys device 5.0.0.115 in Motorola netOctopus 5.1.2 build 1011 has weak permissions for the \.\NantSys device interface nantsys.sys, which allows local users to gain privileges or cause a denial of service system crash, as demonstrated by modifying the SYSENTEREIPMSR CPU Model Specific...

sinecms-lfiexec.txt

| | | / | |\ \ / | / |/ | | | | |/ \ | | | |||| | | /| / / | | Sine CMS Local File Inclusion / RCE Registerglobals: ON | | Version: PoC: Usually, this is a correctly code, with no possible exploitation. But if registerglobals is ON, we...

RunCMS Multiple Script lid Parameter SQL Injection

The version of this software installed on the remote host fails to sanitize user-supplied input to the 'lid' parameter of the 'modules/mydownloads/visit.php' script before using it in a database query. Regardless of PHP's 'magicquotesgpc' and 'registerglobals' settings, an attacker may be able to...

Loudblog loudblog/inc/parse_old.php template Parameter Arbitrary Remote Code Execution

The remote host is running Loudblog, a PHP application for publishing podcasts and similar media files. The version of Loudblog on the remote host fails to sanitize input to the 'template' parameter of the 'loudblog/inc/parseold.php' script before using it in an 'eval' statement to evaluate PHP...

SineCMS 2.3.5 - Local File Inclusion Remote Code Execution

SineCMS 2.3.5 - Local File Inclusion Remote Code Execution | | | / | |\ \ / | / |/ | | | | |/ \ | | | |||| | | /| / / | | Sine CMS Local File Inclusion / RCE Registerglobals: ON | | Version: = 2.3.5 | | Vendor: www.sinecms.net | | Discovered by: KiNgOfThEwOrLd | Intro: Sine cms is affected by a...

Cross-Site Scripting vulnerabilities in AwesomeTemplateEngine

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting уязвимостях в AwesomeTemplateEngine. XSS: http://site/templates/exampletemplate.php?datatitle=3C/title3E3Cscript3Ealertdocument.cookie3C/script3E...

SuSE 10 Security Update : xen (ZYPP Patch Number 4766)

This update fixes various Xen issues. Two security problems were fixed: CVE-2007-5906: Xen allowed virtual guest system users to cause a denial of service hypervisor crash by using a debug register DR7 to set certain breakpoints. - Xen 3.1.1 does not prevent modification of the CR4 TSC from...

[Full-disclosure] IBM Domino Web Access Upload Control dwa7w.dll Memory Corruption

The Domino Web Access Upload Module version 7.0.34.1 seems to suffer from a memory corruption issue that may allow the execution of arbitrary code. By setting the GeneralServerName property and calling the InstallBrowserHelperDll function it MAY be possible to control the ECX register and thereby...

CVE-2007-6496: Undefined Security Weakness

Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to register arbitrary users via a request to hosting/addsubsite.asp with the loginname and password parameters set, when preceded by certain requests to hosting/default.asp and hosting/selectdomain.asp, a related issue to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Bitweaver 2.0.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 users/register.php or 2 search/index.php, or an editcomments action in 3 wiki/index.php or 4 forums/index.php. NOTE: the error...