serendipity SQL Injection vulnerability

ADZ Security Team =================== Info Program: serentdipity web blog system Version: 0.8beta4 Module: exit.php Bug type: SQL Injection Vendor site: http://www.s9y.org/ Vendor Informed: Yes =================== Bug Info // code start //....... $links = serendipitydbquery"SELECT link FROM...

Serendipity 0.8beta4 exit.php SQL Injection Exploit

No description provided by source. !/usr/bin/perl Serendipity 0.8beta4 exit.php SQL Injection exploit c ADZ Security Team 2004-2005 c kreon 2005 http://adz.void.ru/ [email protected] Public : print "\n\n"; print " Serendipity 0.8beta4 exit.php SQL Injection exploit\n"; print " C ADZ Security Team...

S9Y Serendipity 0.8beta4 - exit.php SQL Injection

S9Y Serendipity 0.8beta4 - exit.php SQL Injection !/usr/bin/perl Serendipity 0.8beta4 exit.php SQL Injection exploit c ADZ Security Team 2004-2005 c kreon 2005 http://adz.void.ru/ [email protected] Public : print "\n\n"; print " Serendipity 0.8beta4 exit.php SQL Injection exploit\n"; print " C ADZ...

DoKuWiki file-upload vulnerabilities

ADZ Security Team =================== Info Program: DoKuWiki Version: 2005-02-18 Module: media.php Bug type: File Upload bug Vendor site: http://wiki.splitbrain.org/ Vendor Informed: Yes =================== Bug Info Remote user with file-upload privileges can upload anyone file with any...

junkbuster -- heap corruption vulnerability and configuration modification vulnerability

A Debian advisory reports: James Ranson discovered that an attacker can modify the referrer setting with a carefully crafted URL by accidently overwriting a global variable. Tavis Ormandy from the Gentoo Security Team discovered several heap corruptions due to inconsistent use of an internal...

S9Y Serendipity 0.8beta4 - 'exit.php' SQL Injection

!/usr/bin/perl Serendipity 0.8beta4 exit.php SQL Injection exploit c ADZ Security Team 2004-2005 c kreon 2005 http://adz.void.ru/ [email protected] Public : print "\n\n"; print " Serendipity 0.8beta4 exit.php SQL Injection exploit\n"; print " C ADZ Security Team 2004-2005\n"; print " C kreon 2005\n";...

AzDGDatingPlatinum multiple vulnerabilities

ADZ Security Team =================== Info Program: AzDGDatingPlatinum Version: tested 1.1.0 Modules: view.php, members/index.php Bug type: SQL Injection, XSS Vendor site: http://www.azdg.com/ Vendor Informed: Yes =================== Bug Info SQL Injection: At module view.php I've found a logical...

The Includer CGI <= 1.0 Remote Command Execution (new version)

No description provided by source. !/usr/bin/perl Target - The Includer CGI = 1.0 Based on - http://www.milw0rm.com/id.php?id=862 Info about bug - Stupid use "Open" function. If you want know more visit our home page at nst.void.ru use IO::Socket; if @ARGV 3 print " \n Includer CGI = 1.0 Network...

The Includer CGI 1.0 - Remote Command Execution (2)

!/usr/bin/perl Target - The Includer CGI \n\n"; print " - Host name of taget.\n"; print " - If not in dir type / symbol.\n"; print " - command for execution.\n\n"; print " Examples:\n\n"; print " incl10.pl 127.0.0.1 /cgi-bin/ "ls -la"\n"; print " incl10.pl 127.0.0.1 / "uname -a"\n"; print "...

Information leak in the Linux kernel ext2 implementation

Description: Information leak in the Linux kernel ext2 implementation References: CAN-2005-0400 Authors: Mathieu Lafon [email protected] Romain Francoise [email protected] Arkoon Security Team Advisory - March 25, 2005 http://arkoon.net/advisories/ext2-make-empty-leak.txt Revision: 1.0 1...

SPECTral Personal SMTP Server 0.4.2 - Denial of Service

!/usr/bin/perl use IO::Socket; Small config If service not DoSeD try to increase this value. Number of trys for DoS. $trys = 10; Quantity signs for atack. $buf = 200000; if @ARGV port \n"; print " Coded by GreenwooD Network Security Team \n\n"; print " ======================= \n"; print " /\n";...

phpMyFamily 1.4.0 SQL vulnerabilities

ADZ Security Team =================== Info Program: phpMyFamily Version: 1.4.0 Modules: people.php, track.php, edit.php, document.php, census.php, passthru.php and other.. Bug type: SQL Injection Vendor site: http://www.phpmyfamily.net/ Vendor Informed: Yes =================== Bug Info Basic...

USN-98-1: OpenSLP vulnerabilities

The SuSE Security Team discovered several buffer overflows in the OpenSLP server and client library. By sending specially crafted SLP packets, a remote attacker could exploit this to crash the SLP server or execute arbitrary code with the privileges of the "daemon" user. Likewise, a malicious SLP...

wfsections107.txt

Program: wfsections Verion: 1.07 Bug Type: SQL Injection Bug Discription: ================================= In file class/wfsfiles.php, we can see this function: //START function getAllbyArticle$articleid $db =& Database::getInstance; $table = $db-prefix"wfsfiles"; $ret = array; $sql = "SELECT FR...

Ethereal remote buffer overflow #2

LSS Security Advisory LSS-2005-03-05 http://security.lss.hr --- Title : Ethereal remote buffer overflow 2 Advisory ID : LSS-2005-03-05 Date : 2005-03-10 Advisory URL: : http://security.lss.hr/index.php?page=details&ID=LSS-2005-03-05 Impact : DoS and maybe possible code execution Risk level : Medi...

UBB.threads 6 SQL Injection

ADZ Security Team =================== Info Program: UBB.threads Version: 6 Module: editpost.php Bug type: SQL Injection Vendor site: http://www.ubbcentral.com/ubbthreads/ =================== Bug discription at editpost.php we can see this code: // START $Cat = getinput"Cat","get"; $Board =...

Wfsection 1.07 vulnerabilities

Program: wfsections Verion: 1.07 Bug Type: SQL Injection Bug Discription: ================================= In file class/wfsfiles.php, we can see this function: //START function getAllbyArticle$articleid $db =& Database::getInstance; $table = $db-prefix"wfsfiles"; $ret = array; $sql = "SELECT FR...

OpenBSD 2.0 3.6 - TCP Timestamp Remote Denial of Service

OpenBSD 2.0 3.6 - TCP Timestamp Remote Denial of Service define BSDSOURCE include include include include include include include include include include include / edited by /str0ke ! milw0rm.com to compile under linux / ifndef TCPOPTLEN define TCPOPTLEN 12 endif define UMASK 0xffff define...

Microsoft Windows XP/2003 - Remote Denial of Service

/ Added Line 1 - BSDSOURCE!!!! /str0ke / define BSDSOURCE include include include include include include include include include include include / Windows Server 2003 and XP SP2 remote DoS exploit Tested under OpenBSD 3.6 at WinXP SP 2 Vuln by Dejan Levaja , http://security.nnov.ru/docs7998.html...

SDtraverse.txt

..:x0n3-h4ck Italian Security Team:.. /Advisories\ / Application: SD Server Url Vendor: http://www.gdsoftware.dk/ Version: = 4.0.70 Platforms: Windows Bug: Directory Traversal Exploitation: Remote Author: CorryL Email Author: [email protected] Url Author: www.x0n3-h4ck.org \ Description The SD...