6617 matches found
free QBoard 1.1 - features.php?qb_path Remote File Inclusion
free QBoard 1.1 - features.php?qbpath Remote File Inclusion source: https://www.securityfocus.com/bid/18780/info Plume CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows the attacker t...
Randshop <= 1.1.1 (header.inc.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ==================================================================== Randshop = 1.1.1 header.inc.php Remote File Include Vulnerability ==================================================================== Title : randshop = 1.1.1 Remote Fil...
[Kurdish Security # 10 ] MF Piadas 1.0 Remote File Include Vulnerability
Kurdish Security Advisory MF Piadas 1.0 Remote File Include Vulnerability "Ey Tarih ya sana basarilar atfedecegiz ya da seni yasanmamis sayacagiz ." Abdullah Ocalan STOP THE MASSACRE IN THE TURKEY! FREEDOM FOR KURDISTAN ! Contact : irc.gigachat.net kurdhack & www.PatrioticHackers.com &...
BlueDragon Server 6.2.1 - .cfm Denial of Service
BlueDragon Server 6.2.1 - .cfm Denial of Service source: https://www.securityfocus.com/bid/18624/info BlueDragon is prone to a remote denial-of-service vulnerability. This issue is due to the application's failure to efficiently handle malformed GET requests. An attacker can exploit this issue to...
Opera 9 (long href) Remote Denial of Service Exploit
Exploit for multiple platform in category dos / poc ==================================================== Opera 9 long href Remote Denial of Service Exploit ==================================================== a...
jobline.txt
SaVSaK.CoM | SpC-x - TheBeKiR | Jobline 1 1 1 Version - Remote File Include Vulnerability Risk : High Class: Remote Script : Jobline Credits : SpC-x Thanks : TheBeKiR - Ejder - FasTBoY - ERNE - RMx Code : if fileexists "$mosConfigabsolutepath/components/$option/language/$mosConfiglang.php"...
sendmail security update
CentOS Errata and Security Advisory CESA-2006:0515 Updated sendmail packages are now available to fix a denial of service security issue. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 27 June 2006 The sendmail-docs packages for Red H...
[Kil13r-SA-20060609-1] Daum Search Cross-Site Scripting Vulnerability
Title: Kil13r-SA-20060609-1 Daum Search Cross-Site Scripting Vulnerability Author: Kil13r - http://www.kil13r.info/ Local / Remote: Remote Timeline: 2006/06/09 - Discovery 2006/06/09 - Vendor notification 2006/06/09 - Release Affected version: Not affected version: Description: Daum is internet...
[Full-disclosure] MDaemon NOT vulnerable .. sorry for the advisory.. QBik Wingate is vulnerable
Hello this is kcope, recently I thought I had discovered a remote preauth vulnerability in MDaemon latest version 9.0.1/9.0.2. And it really looked like one in the debugger OllyDbg .. so I posted it to full disclosure. Afterwards I tried to write an exploit, and yes I succeeded! But the problem i...
PT-2006-3508 · Zyxel · Zyxel P-335Wt
Name of the Vulnerable Software and Affected Versions: ZyXEL P-335WT router affected versions not specified Description: The issue allows remote attackers to bypass access restrictions and conduct unauthorized operations. This is achieved via a UPnP request with a modified InternalClient paramete...
SAPwebas.txt
Release Date: 03/01/2006 Affected Applications: SAP WebAS Kernel up to version 7.00 Affected Platforms: Platform-Independant Local / Remote: Remote Severity: Medium to High Author: A. Grossmann arnold.grossmann at gmail.com Vendor Status: Confirmed Product Overview cited from SAP :...
[Full-disclosure] Novell NDPS Remote Vulnerability (Server & Client)
Summary: There's an integer overflow present that affects Novell Windows clients and Novell Netware server and Novell Open Enterprise server. Impact: Remote, unauthenticated, super-user privileges. Affected software: Novell Netware All versions Novell Open Enterprise Server All NetWare based...
[SA20043] EImagePro SQL Injection Vulnerabilities
TITLE: EImagePro SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA20043 VERIFY ADVISORY: http://secunia.com/advisories/20043/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: EImagePro http://secunia.com/product/9843/ DESCRIPTION: DjEyes has reported som...
[SECURITY] [DSA 1045-1] New OpenVPN packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1045-1 [email protected] http://www.debian.org/security/ Martin Schulze April 27th, 2006 http://www.debian.org/security/faq -...
[eVuln] vCounter - sourceworkshop SQL Injection Vulnerability
New eVuln Advisory: vCounter - sourceworkshop SQL Injection Vulnerability http://evuln.com/vulns/108/summary.html --------------------Summary---------------- eVuln ID: EV0108 CVE: CVE-2006-1499 Software: vCounter Sowtware's Web Site: http://www.sourceworkshop.com/ Versions: 1.0 Critical Level:...
[SA19383] PHP "html_entity_decode()" Information Disclosure Vulnerability
TITLE: PHP "htmlentitydecode" Information Disclosure Vulnerability SECUNIA ADVISORY ID: SA19383 VERIFY ADVISORY: http://secunia.com/advisories/19383/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: PHP 4.3.x http://secunia.com/product/922/ PHP 4.4.x...
Plume CMS <= 1.0.2 Remote File Inclusion Vulnerability
The remote host is running a PHP application that is prone to local and remote file inclusion attacks. Description : The system is running Plume CMS a simple but powerful content management system. The version installed does not sanitize user input in the 'PXconfigmanagerpath' parameter in the...
Vtiger < 4.5 Alpha 2 Multiple Vulnerabilities - Active Check
Vtiger is prone to arbitrary code execution, directory traversal, SQL injection SQLi allowing authentication bypass and cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...
[SECURITY] [DSA 1006-1] New wzdftpd packages fix arbitrary shell command execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1006-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 16th, 2005 http://www.debian.org/security/faq -...
[DRUPAL-SA-2006-002] Drupal 4.6.6 / 4.5.8 fixes XSS issue
---------------------------------------------------------------------------- Drupal security advisory DRUPAL-SA-2006-002 ---------------------------------------------------------------------------- Advisory ID: DRUPAL-SA-2006-002 Project: Drupal core Date: 2006-03-13 Security risk: less critical...