Kravchuk letter script 1.0 (scdir) Remote File Inclusion Vulnerabilities

No description provided by source. ++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++ + K-letter 1.0 Remote File include + +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + DownloadScript: http://www.scripts.com.ua/download.php?ID=813 +...

MS Windows GDI+ ICO File Remote Denial of Service Exploit

No description provided by source. Author : kad Mail : kadathighsecudotcom Site : http://www.highsecu.com highsecu.ico - Microsoft GDI+ Integer division by zero flaw handling .ICO files http://www.milw0rm.com/sploits/06072007-CVE-2007-2237.zip sebug.net...

AdminBot 9.0.5 (live_status.lib.php ROOT) RFI Vulnerability

No description provided by source. AdminBot-MX Remote file inclusion Download script : http://download.nexen.org/tools/adminbot/adminbothttp-mxb2.tar.gz Thanks Str0ke :D Exploit : http://127.0.0.1/adminbotpath/lib/livestatus.lib.php?ROOT=shell.txt? Discovered by ThE TiGeR MiroTigeratHotmail.com...

OpenBASE 0.6a (root_prefix) Remote File Inclusion Vulnerabilities

No description provided by source. DeltaSecurityTEAM WwW.DeltaSecurity.iR Portal Name = OpenBASE Alpha 0.6 Class = Remote File Inclusion Risk = High Remote File Execution Download = Http://openbase.sourceforge.net Discoverd By = DeltahackingTEAM User In Delta Team = Dav00dCracker Conatact =...

TROforum 0.1 (admin.php site_url) Remote File Inclusion Vulnerability

No description provided by source. TROforum 0.1 = Remote File Inclusion Vulnerability Dork:http://www.google.com.tr/search?hl=tr&q=%22TROforum+0.1%22&meta= Vuln Code ERROR1:admin/admin.php include "$siteurl/trofimov.php"; include "$siteurl/narod.php"; RFI...

FlaP 1.0b (pachtofile) Remote File Inclusion Vulnerabilities

No description provided by source. FlaP v.1.0. Beta = Remote File Inclusion Vulnerability Vuln Code ERROR1:skin/html/table.php ? include "$pachtofile/leftmenu.php"; RFI CODE BUG1: Example1:http://victim.com/path/skin/html/tab...

vBulletin vBGSiteMap 2.41 (root) Remote File Inclusion Vulnerabilities

No description provided by source. ============================================= vBulletin Google Site Map Creator base Remote File Include Vulnerability ============================================= Found by : Host4vb.com & Cold z3ro Contact : [email protected] , [email protected] Homepage :...

LeadTools Thumbnail Browser控件lttmb14E.ocx远程栈溢出漏洞

LeadTools Thumbnail Browser是用于生成缩略图的ActiveX控件。 LEAD Thumbnail Browser Control（lttmb14E.ocx）ActiveX控件在处理BrowseDir方式时存在栈溢出漏洞，如果用户受骗访问了恶意页面并向该方式传送了超长参数的话，就可以触发这个溢出，导致执行任意代码 LeadTools Thumbnail Browser Control 14.5.0.44 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

LeadTools Thumbnail Browser Control (lttmb14E.ocx) Remote BoF Exploit

No description provided by source. span style="font: 14pt Courier New;"p align="center"b2007/05/19/b/p/span pre codespan style="font: 10pt Courier New;"span class="general1-symbol"---------------------------------------------------------------------------------------------------- bLeadTools...

Woltlab Burning Board Lite Pms.PHP SQL注入漏洞

Woltlab Burning Board Lite是一款基于PHP的WEB应用程序。 Woltlab Burning Board Lite不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Pms.PHP'脚本对用户提交的'$POST'pmid''参数缺少过滤，提交恶意SQL脚本代码作为参数数据，可更改原来的SQL逻辑，导致获得敏感信息。 Woltlab Burning Board Lite 1.0.2pl3e 目前没有解决方案提供：...

IBM WebSphere Host On-Demand绕过认证执行管理功能漏洞

IBM WebSphere Host On-Demand（HOD）允许从启用了Java的Web浏览器访问主机应用和数据。 HOD在用户认证的实现上存在设计问题，远程攻击者可能利用此漏洞轻易绕过访问验证非授权操作管理功能。 HOD中用于处理用户认证的applet通常位于https://server/hod/HODAdmin.html...

Microsoft IE COM对象实例化daxctle.ocx堆破坏漏洞（MS06-067）

Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer在处理某些COM对象的畸形参数时存在堆破坏漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 当Internet Explorer在处理DirectAnimation.PathControl COM对象（daxctle.ocx）的Spline方式时，如果将第一个参数设置为0xffffffff的话就会触发堆溢出漏洞，导致拒绝服务或执行任意指令。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0...

FilePocket 1.2 Local Proxy Password Disclosure Exploit

No description provided by source. / FilePocket v1.2 Local Proxy Password Disclosure Exploit by Kozan Application: FilePocket 1.2 probably prior versions Vendor: ExoticSoft - www.exoticsoft.com Vulnerable Description: FilePocket v1.2 discloses proxy passwords to local users. Discovered & Coded by...