PHPX 3.5.15/3.5.16 - 'forums.php' SQL Injection

source: https://www.securityfocus.com/bid/23033/info PHPX is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, execute arbitra...

Horde Framework and IMP 2.x/3.x - Cleanup Cron Script Arbitrary File Deletion

source: https://www.securityfocus.com/bid/22985/info Horde Framework and IMP are prone to a vulnerability that allows a local attacker to delete arbitrary files in the context of the user running the application. A successful attack can reduce the integrity of affected computers and may aid in...

Symantec 'SYMTDI.SYS' Device Driver - Local Denial of Service

source: https://www.securityfocus.com/bid/22977/info Symantec 'SYMTDI.SYS' device driver is prone to a local denial-of-service vulnerability. A local authenticated attacker may exploit this issue to crash affected computers, denying service to legitimate users. This issue is similar to the one...

softnews-rfi.txt

By Hasadya Raed Contact : [email protected] ------------------------------------ Script : SoftNews Media Group Dork : "Copyright © 2004,2006 SoftNews Media Group" Greetz : Only To Security Focus ------------------------------------ B.Files : init.php editnews.php ----------------------------------...

Weekly Drawing Contest 0.0.1 - 'Check_Vote.php' Local File Inclusion

source: https://www.securityfocus.com/bid/22937/info Weekly Drawing Contest is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view local files on the affected webserver. This issue...

PHP 5.2 - EXTFilter Function Remote Buffer Overflow

PHP 5.2 - EXTFilter Function Remote Buffer Overflow source: https://www.securityfocus.com/bid/22922/info PHP is prone to a remote buffer-overflow vulnerability because the application fails to perform boundary checks before copying user-supplied data to insufficiently sized memory buffers. An...

Remote File Include In Script SoftNews Media Group

By Hasadya Raed Contact : [email protected] ------------------------------------ Script : SoftNews Media Group Dork : "Copyright © 2004,2006 SoftNews Media Group" Greetz : Only To Security Focus ------------------------------------ B.Files : init.php editnews.php ----------------------------------...

Rediff Toolbar - ActiveX Control Remote Denial of Service

Rediff Toolbar - ActiveX Control Remote Denial of Service milw0rm.com 2007-03-08...

XXS in script Phorum

======================================================================= Script : Script Phorum Found By : Hasadya Raed Contact : [email protected] ================================================= exemple: http://www.site.com/path/admin.php?upgradefile="alert.;/script ====================== Greetz...

Oracle 9i/10g DBMS_METADATA.GET_DDL SQL Injection Exploit

No description provided by source. !/usr/bin/perl Remote Oracle DBMSMETADAT.GETDDL exploit 9i/10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: http://www.securityfocus.com/bid/16287 AUTHOR: Andrea "bunker"...

aWebNews 1.1 - listing.php?path_to_news Remote File Inclusion

aWebNews 1.1 - listing.php?pathtonews Remote File Inclusion source: https://www.securityfocus.com/bid/22781/info aWebNews is prone to multiple remote file-include vulnerabilities. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it...

aWebNews 1.1 - 'listing.php?path_to_news' Remote File Inclusion

source: https://www.securityfocus.com/bid/22781/info aWebNews is prone to multiple remote file-include vulnerabilities. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the...

3Com TFTP Service (3CTftpSvc) 2.0.1 - Long Transporting Mode

!/usr/bin/perl -w =============================================================================================== 3Com TFTP Service \n\n"; exit; $target = IO::Socket::INET-newProto='udp', PeerAddr=$ARGV0, PeerPort=$ARGV1 or die "Cannot connect to $ARGV0 on port $A...

Oracle 10g - KUPW$WORKER.MAIN SQL Injection (2)

Oracle 10g - KUPW$WORKER.MAIN SQL Injection 2 !/usr/bin/perl Remote Oracle KUPW$WORKER.MAIN exploit 10g - Version 2 - New "evil cursor injection" tip! - No "create procedure" privileg needed! - See: http://www.databasesecurity.com/ Cursor Injection Grant or revoke dba permission to unprivileged...

Oracle 10g KUPV$FT.ATTACH_JOB - SQL Injection (2)

Oracle 10g KUPV$FT.ATTACHJOB - SQL Injection 2 !/usr/bin/perl Remote Oracle KUPV$FT.ATTACHJOB exploit 10g - Version 2 - New "evil cursor injection" tip! - No "create procedure" privileg needed! - See: http://www.databasesecurity.com/ Cursor Injection Grant or revoke dba permission to unprivileged...

SQLiteManager 1.2 - main.php Multiple HTML Injection Vulnerabilities

SQLiteManager 1.2 - main.php Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/22731/info SQLiteManager is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues may allow an...

Oracle 10g KUPV$FT.ATTACH_JOB SQL Injection Exploit v2

Exploit for multiple platform in category remote exploits ====================================================== Oracle 10g KUPV$FT.ATTACHJOB SQL Injection Exploit v2 ====================================================== !/usr/bin/perl Remote Oracle KUPV$FT.ATTACHJOB exploit 10g - Version 2 - Ne...

Oracle 10g - KUPW$WORKER.MAIN SQL Injection (2)

!/usr/bin/perl Remote Oracle KUPW$WORKER.MAIN exploit 10g - Version 2 - New "evil cursor injection" tip! - No "create procedure" privileg needed! - See: http://www.databasesecurity.com/ Cursor Injection Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise...

Oracle 10g Database - 'SUBSCRIPTION_NAME' SQL Injection (2)

source: https://www.securityfocus.com/bid/13236/info Oracle database is prone to an SQL-injection vulnerability because the software fails to properly sanitize user-supplied data. The 'SUBSCRIPTIONNAME' parameter is vulnerable. Packages that employ this parameter execute with 'SYS' user privilege...

SolarPay - 'index.php' Local File Inclusion

source: https://www.securityfocus.com/bid/22722/info SolarPay is prone to a local file-include vulnerability because the utility fails to properly sanitize user-supplied input. Successfully exploiting this issue allows attackers to gain access to files located in directories they do not have...