PHPDirector <= 0.21 (videos.php id) Remote SQL Injection Vulnerability

No description provided by source. PHPDirector = 0.21 SQL injection/Upload SHELL Remote Vulnerabilities WEB APP: PHPDirector 0.21 SITE: http://www.phpdirector.co.uk/site/ DORK: "Powered by PHP Director" AUTHOR: Kw3rLn tehlostbyteatYaHoOd0tCom Romanian Security Team Ethical Hacking -...

PHPDirector <= 0.21 (videos.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================================== PHPDirector = 0.21 videos.php id Remote SQL Injection Vulnerability ====================================================================== PHPDirector = 0.21 SQL...

ArcadeBuilder Game Portal Manager 1.7 Remote SQL Injection Vuln

No description provided by source. --==+================================================================================+==-- --==+ Game Portal Manager v1.7 SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZ...

Ingres Unauthenticated Pointer Overwrite 1

======= Summary ======= Name: Ingres remote unauthenticated pointer overwrite 1 Release Date: 25 June 2007 Reference: NGS00391 Discover: Chris Anley [email protected] Vendor: Ingres Vendor Reference: Ingres bug 115927, CVE-2007-3336, CAID 35450 Systems Affected: Ingres 2006 9.0.4 and prior...

elkagroup Image Gallery 1.0 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== elkagroup Image Gallery 1.0 Remote SQL Injection Vulnerability ==============================================================...

LiteWEB Web Server 2.7 - Invalid Page Remote Denial of Service

source: https://www.securityfocus.com/bid/24628/info LiteWeb webserver is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker can exploit this issue to crash the affected application, denying further service to legitimate...

W1L3D4 WEBmarket 0.1 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= W1L3D4 WEBmarket 0.1 Remote SQL Injection Vulnerability ======================================================= /////////////////////////////////////////////////////////////////////...

CVE-2007-3166

Buffer overflow in Qualcomm Eudora 7.1.0.9 allows user-assisted, remote IMAP servers to execute arbitrary code via a long FLAGS response to a SELECT INBOX command...

movieplay-overflow.txt

!/usr/bin/env ruby MoviePlay 4.76 .lst file Local buffer over-flow. Credit to n00b for writing poc code..Pmsl Tested on :Win xp sp2 eng. Vendor web site: Netfarer.com MoviePlay 4.76 Buffer-over flow reported : Jan 02 2007 12:00AM Credit goes to Parvez Anwar for finding the bug. MoviePlay is prone...

Comicsense 0.2 (index.php epi) Remote SQL Injection Vulnerability

No description provided by source. Comicsense SQL Injection Advisory/Exploit by s0cratex [email protected] http://plexinium.net - ComicSense is a script using php / mySQL. It allows you to easily host an Online Comic or Image shack. You can download it from www.gayadesign.nl/comicsense/ - The...

[SECURITY] [DSA 1297-1] New gforge-plugin-scmcvs packages fix arbitrary shell command execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1297-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 24th, 2007 http://www.debian.org/security/faq -...

Ol Bookmarks Manager 0.7.4 Remote SQL Injection Vulnerability

No description provided by source. ========================================================================== Ol Bookmarks Manager 0.7.4 root Remote SQL Injection Vulnerabilities ========================================================================== Found by: Cyber-Security...

CVE-2007-2715

Admin/users.php in Snaps! Gallery 1.4.4 allows remote attackers to change arbitrary usernames and passwords via the 1 username, or the 2 password and password2 parameters in an edit action...

DeWizardX - DEWizardAX.ocx Arbitrary File Overwrite

DeWizardX - DEWizardAX.ocx Arbitrary File Overwrite 2007/05/15 ----------------------------------------------------------------------------------- DB Software Laboratory DeWizardX DEWizardAX.ocx Remote Arbitrary File Overwrite url: http://www.dbsoftlab.com price: $100 author: shinnai mail:...

iG Shop 1.4 (page.php) Remote SQL Injection Vulnerability

No description provided by source. Discovered by: gsy & kerem125 Website: www.kerem125.com Script Download: http://www.igeneric.co.uk/ig-shopping-cart.html exploit:/shop/page.php?pagetype=catalognavigate&typeid=-99%20union//select//password//from//users/...

VulnCheck KEV: CVE-2007-0870

Unspecified vulnerability in Microsoft Word 2000 allows remote attackers to cause a denial of service crash via unknown vectors, a different vulnerability than CVE-2006-5994, CVE-2006-6456, CVE-2006-6561, and CVE-2007-0515, a variant of Exploit-MS06-027...

DEBIAN-CVE-2007-2488

The IAX2 channel driver chaniax2 in Asterisk before 20070504 does not properly null terminate data, which allows remote attackers to trigger loss of transmitted data, and possibly obtain sensitive information memory contents or cause a denial of service application crash, by sending a frame that...

[SECURITY] [DSA 1287-1] New ldap-account-manager packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1287-1 [email protected] http://www.debian.org/security/ Noah Meyerhans May 07, 2007 - ------------------------------------------------------------------------ Package : ldap-account-manager...

PostNuke pnFlashGames Module 1.5 Remote SQL Injection Vulnerability

No description provided by source. ============================================================ PostNuke pnFlashGames Module v1.5 REmote SQL Injection ============================================================ Bulan: xoron xoron.biz + Love's the funeral of hearts The funeral of hearts And a ple...

EsForum 3.0 (forum.php idsalon) Remote SQL Injection Vulnerability

No description provided by source. ------------------------------------------------------------------------------------------------------------------- AYYILDIZ.ORG PreSents... Script: EsForum 3.0 Script Download: http://www.editeurscripts.com/scripts/dl-esforum-3.html Contact: ilker Kandemir...