5128 matches found
USN-78-1: Mailman vulnerability
An path traversal vulnerability has been discovered in the "private" module of Mailman. A flawed path sanitation algorithm allowed the construction of URLS to arbitrary files readable by Mailman. This allowed a remote attacker to retrieve configuration and password databases, private list archive...
Mailman mailing lists manager directory traversal
It's possible to bypass filtering with URL like .../..../// and retrieve any file from from the system...
DelphiTurk FTP v1.0 Passwords to Local Users Exploit
Exploit for unknown platform in category local exploits ==================================================== DelphiTurk FTP v1.0 Passwords to Local Users Exploit ==================================================== / DelphiTurk FTP v1.0 Local Exploit by Kozan Application: DelphiTurk FTP v1.0...
DelphiTurk FTP 1.0 - Passwords to Local Users
DelphiTurk FTP 1.0 - Passwords to Local Users / DelphiTurk FTP v1.0 Local Exploit by Kozan Application: DelphiTurk FTP v1.0 Procuder: Delphiturk.com and Delphikitabi.com Vulnerable Description: DelphiTurk FTP v1.0 passwords to local users. Coded by: Kozan Web : www.netmagister.com Web2:...
PerlDesk 1.x SQL-Injection Exploit
Exploit for cgi platform in category web applications ================================== PerlDesk 1.x SQL-Injection Exploit ================================== !/usr/bin/perl Example: kb.cgi?view=0 UNION SELECT 1,3,password,username,3,7 FROM users Exploit is attached. ./pde.pl...
LiteForum 2.1.1 sql injection exploit
Exploit for unknown platform in category web applications ===================================== LiteForum 2.1.1 sql injection exploit ===================================== !/usr/bin/perl use LWP::UserAgent; LiteForum 2.1.1 http://www.softtime.ru sql injection exploit work on all mysql versions by...
Peer2Mail 1.4 - Encrypted Password Dumper
/ Peer2Mail Encrypt PassDumper Exploit v1.0 Discoveried & Coded By ATmaCA Copyright ©2002-2005 AtmacaSoft Inc. All Rights Reserved. Web: http://www.atmacasoft.com E-Mail: [email protected] / / Peer2Mail 1.4 and prior versions are affected. Tested for gmail account on Win XP SP2 / include include...
ITA Forum <= 1.49 SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; ITA Forum 1.49 sql injection exploit with one char bruteforce by 1dt.w0lf // r57 :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: example: r57ita.pl http://127.0.0.1/ITA...
Simple PHP Blog comments.php Traversal Arbitrary File Access
The remote version of Simple PHP Blog allows for retrieval of arbitrary files from the web server. These issues are due to a failure of the application to properly sanitize user-supplied input data. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
CVE-2004-2711
Multiple buffer overflows in Gyach Enhanced Gyach-E before 1.0.2 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to "avatar retrieval."...
CVE-2004-2024
The distribution of Zen Cart 1.1.4 before patch 2 includes certain debugging code in the Admin password retrieval functionality, which allows attackers to gain administrative privileges via passwordforgotten.php...
2Bgal : 2.4 & 2.5.1 SQL injection Vulnerability
2Bgal 2.5.1 SQL injection Vulnerability http://www.ben3w.com/ 12/22/2004 ---------------------------------------------------------------------- Description: ---------------------------------------------------------------------- 2Bgal is fully customizable photo gallery. It's seems to be vulnerabl...
Webmin - Brute Force / Command Execution
!/usr/bin/perl Webmin BruteForce + Command execution - By Di42lo usage ./bruteforce.webmin.pl ./bruteforce.webmin.pl 192.168.0.5 "uptime" + BruteForcing... + trying to enter with: admim + trying to enter with: admin + Found SID : f3231ff32849fa0c8c98487ba8c09dbb + Password : admin + Connecting to...
Mozilla and Opera information leak
By using localfiles object it's possible to obtain local files list. Under some conditions it' possible ot retrieve file content...
Blog Torrent btdownload.php file Variable Traversal Arbitrary File Retrieval
There is a remote directory traversal vulnerability in log Torrent, a web-based application that allows users to host files for Bit Torrents. A malicious user can leverage this issue by requesting files outside of the web server root directory with directory traversal strings such as '../'. This...
pntresmailer 6.0 - Directory Traversal
pntresmailer 6.0 - Directory Traversal source: https://www.securityfocus.com/bid/11767/info pnTresMailer is reported susceptible to a directory traversal vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input data. This vulnerability can be...
KorWeblog < 1.6.2 Multiple Vulnerabilities
The remote host is using KorWeblog, a web-based log application written in PHP. According to its banner, the installed version of KorWeblog is earlier than 1.6.2. Such versions are affected by reportedly affected by several vulnerabilities that may allow execution of arbitrary PHP code or retriev...
CVE-2004-0303
OWLS 1.0 allows remote attackers to retrieve arbitrary files via absolute pathnames in 1 the file parameter in /glossaries/index.php, 2 the filename parameter in /readings/index.php, or 3 the filename parameter in /multiplechoice/resultsignore.php, as demonstrated using /etc/passwd...