30 matches found
Binary vulnerability in the Information Technology Exam Practice System for Shincao Middle Schools (Middle Schools in Shandong Province)
Xinkao Middle School Information Technology Exam Practice System is an information technology exam practice system developed by Jinan Kaoyuan Information Technology Co. A binary vulnerability exists in Xinkao Middle School Information Technology Exam Practice System Middle School in Shandong...
CVE-2008-6631
Multiple cross-site scripting XSS vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 user parameter in a sendmessage action and the 2 username parameter when registering a new user, different vectors than CVE-2008-0679...
cameralife-upload.txt
CameraLife-2.6.2b4 Arbitrary File Upload Vulnerability + Author:Mi4night + Version:cameralife-2.6.2b4 + Download Script: + http://sourceforge.net/project/showfiles.php?groupid=70910&packageid=70316&releaseid=628868 + Exploit: +...
Wordpress 2.6.1 (SQL Column Truncation) Admin Takeover Exploit
Exploit for unknown platform in category web applications ============================================================== Wordpress 2.6.1 SQL Column Truncation Admin Takeover Exploit ============================================================== !/usr/bin/php =5.2.1 you'll need to be as well, in...
Code injection
Direct static code injection vulnerability in index.php in Flat PHP Board 1.2 and earlier allows remote attackers to inject arbitrary PHP code via the 1 username, 2 password, and 3 email parameters when registering a user account, which can be executed by accessing the user's php file for this...
[Reversemode Advisory] Kaspersky Anti-Virus Privilege Escalation
Hi, Kaspersky Products are prone to a local privilege escalation. Unprivileged users can exploit this flaw in order to execute arbitrary code with Kernel privileges. Kaspersky implements its NDIS-TDI Hooking Engine using two drivers, which rely on an internal system of plugins. Plugin registering...
PHP-Fusion extract() Global Variable Overwriting
The version of PHP-Fusion on the remote host supports registering variables from user-supplied input in the event that PHP's 'registerglobals' setting is disabled, which is the default in current versions of PHP. Unfortunately, the way that this has been implemented in the version on the remote...
bingbox.txt
Bingbox.com Homepage: http://www.bingbox.com Affected files: Profile input boxes: - City input Registering Viewing Birthdays Adding a friend Viewing people online ----------------------------------------------- XSS with cookie disclosure via inviting friends:...
Cross site scripting
Cross-site scripting XSS vulnerability in Russcom Network Loginphp Russcom.Loginphp allows remote attackers to inject arbitrary web script or HTML via the username field when registering...