alstrasoft E-Friends <= 4.98 (seid) Multiple SQL Injection Vulnerabilities

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV85$2007 ----------------------------------------------------------------------------------------- ECHOADV85$2007 alstrasoft E-Friends = 4.98 seid Multiple Remote SQL...

Esselbach Storyteller CMS System 1.8 - SQL Injection Vulnerability

No description provided by source. Exploit Title: Esselbach Storyteller CMS System Version 1.8 page.php Remote SQL Injection Vulnerability Date: March, 9th 2011 GMT +7 Author: Shamus Software Link: http://www.esselbach.com/ Version : Esselbach Storyteller CMS System Version 1.8 Tested on: windows...

Wu-imapd 2000/2001 Partial Mailbox Attribute Remote Buffer Overflow Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/4713/info Wu-imapd is vulnerable to a buffer overflow condition. This has been reported to occur when a valid user requests partial mailbox attributes. Exploitation may result in the execution of arbitrary code as the...

Apple Mac OS X 10.4.8 - DMG UFS FFS_MountFS Integer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/21993/info Apple Mac OS X is prone to a remote integer-overflow vulnerability. This issue occurs when the UFS filesystem handler fails to handle specially crafted DMG images. A successful exploit can allow a remote attack...

Samhain Labs 1.x HSFTP Remote Format String Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9715/info hsftp has been found to be prone to a remote print format string vulnerability. This issue is due to the application improper use of a format printing function. Ultimately this vulnerability could allow for...

LDU <= 8.x (polls.php) Remote SQL Injection Vulnerability

No description provided by source. Title : LDU = 8.x polls.php Remote SQL Injection Vulnerability Author : ajann Contact : : Dork : Powered by LDU SQL------------------------------------------------------ http://target/path/polls.php?id= Example: //...

Nullsoft SHOUTCast 1.8.9 - Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4934/info Nullsoft SHOUTcast Server is used to broadcast Shoutcast music. SHOUTcast Server is available for Windows, Linux and a number of other Unix based platforms. A remote buffer overflow vulnerability has been report...

elkagroup (pid) Remote SQL Injection Vulnerability

No description provided by source. elkagroup pid Remote SQL Injection Vulnerability || Author: Hussin X || Home : WwW.IQ-TY.CoMhttp://WwW.IQ-TY.CoM || email: darkangelg85atYahooDoTcom ||| script : http://www.elkapax.com & http://www.elkagroup.com ||| DorK : Powered by :...

GREED 0.81 GRX File List Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12034/info greed Get and Resume Elite Edition is prone to unauthorized command execution. This issue is exposed when the application processes a GRX file list that specifies shell metacharacters and commands in file names...

Orenosv HTTP/FTP Server 0.8.1 FTP Commands Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13546/info The FTP server shipped with Orenosv HTTP/FTP is prone to a remote buffer-overflow vulnerability. This issue presents itself when the application handles excessive values supplied as filenames through various FT...

xtell 1.91.1/2.6.1 - Multiple Remote Buffer Overflow Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/4193/info xtell is a simple network messaging program. It may be used to transmit terminal messages between users and machines. xtell is available for Linux, BSD and most other Unix based operating systems. Multiple buffe...

list Web (addlink.php id) Remote SQL Injection Vulnerability

No description provided by source. | | list Web addlink.php id Remote SQL Injection Vulnerability | | |-------------------- Hussin X -------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoMhttp://WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | script : http://maker.ir | |...

GNU UnRTF 0.19.3 - Font Table Conversion Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12030/info GNU UnRTF is prone to a buffer overflow vulnerability. This issue is exposed when the program converts RTF font table data. Since RTF documents may originate from an external or untrusted source, this...

Lotus Domino 7.0.x/8.0/8.5 LDAP Message Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17669/info Lotus Domino LDAP server is prone to a remote denial-of-service vulnerability when handling malformed requests. Lotus Domino 7.0 is vulnerable; earlier versions may also be affected. UPDATE January 14, 2010: Th...

DGNews 2.1 - SQL Injection Vulnerability

No description provided by source. Remote SQL Injection Vulnerability name : DGNews v 2.1 Author : kalashnikov dork : inurl:news.php?go=fullnews&newsid admincp : admin/login.php // the user is admin===========MYSQL INJ======= http://localhost/pach/news.php?go=fullnews&newsid=1'...

TinyMCE 2.0.1 - (index.php menuID) Remote SQL Injection Vulnerability

No description provided by source. removed from the frontend, the product affected isn't TinyMCE. if you know which CMS this is please contact me /str0ke TinyMCE Remote SQL Injection Prodcut: TinyMCE Version 2.0.1 Home : http://tinymce.moxiecode.com Vunlerability : 2/ SQL Injection Risk : high !!...

BEA WebLogic 7.0/8.1 Administration Console Error Page Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13794/info BEA WebLogic Server And WebLogic Express are affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the error page. A...

Absolute News Feed 1.0 - Remote Insecure Cookie Handling Vulnerability

No description provided by source. Discovered by : Hakxer Script : Absolute News Feed http://www.xigla.com/absolutenf/demo.htm Greetz : Allah , All My friend ,www.educ-up.com ------------------------------- Poc : javascript:document.cookie=xlaAFSuser=p=admin; Exploit Go To admin login :...

HP Operations Manager Default Manager 8.1 Account Remote Security Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/36253/info HP Operations Manager is prone to a remote security vulnerability. Operations Manager 8.1 for Windows is vulnerable; other versions may also be vulnerable. NOTE: This issue may be related to the issue documente...

AutomatedShops WebC 2.0/5.0 Script Name Remote Buffer Overrun Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7268/info It has been reported that a boundary condition error exists in WebC. Because of this, it may be possible for a remote attacker to gain unauthorized access to a vulnerable host. / AutomatedShops WebC 2.011 - 5.00...