Yellow Swordfish Simple Forum 1.x - sf-profile.php SQL Injection

Yellow Swordfish Simple Forum 1.x - sf-profile.php SQL Injection source: https://www.securityfocus.com/bid/27854/info Simple Forum is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Dokeos 1.8.4 - mainadminsession_list.php?cmessage Cross-Site Scripting

Dokeos 1.8.4 - mainadminsessionlist.php?cmessage Cross-Site Scripting source: https://www.securityfocus.com/bid/27792/info Dokeos is prone to multiple input-validation vulnerabilities including five SQL-injection issues, one HTML-injection issue, three cross-site scripting issues, and one...

Dokeos 1.8.4 - '/main/admin/session_list.php?cmessage' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27792/info Dokeos is prone to multiple input-validation vulnerabilities including five SQL-injection issues, one HTML-injection issue, three cross-site scripting issues, and one arbitrary-file-upload issue. Attackers can exploit these issues to execute...

Dokeos 1.8.4 - mainadmincourse_category.php?category Cross-Site Scripting

Dokeos 1.8.4 - mainadmincoursecategory.php?category Cross-Site Scripting source: https://www.securityfocus.com/bid/27792/info Dokeos is prone to multiple input-validation vulnerabilities including five SQL-injection issues, one HTML-injection issue, three cross-site scripting issues, and one...

artmedic webdesign weblog - Multiple Local File Inclusions

artmedic webdesign weblog - Multiple Local File Inclusions source: https://www.securityfocus.com/bid/27797/info artmedic webdesign weblog is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. Exploiting these issues may allow an attacke...

citrix-overflow.txt

Citrix Presentation Server Client WFICA.OCX ActiveX Component Heap Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

Citrix Presentation Server Client - WFICA.OCX ActiveX Heap Buffer Overflow

Citrix Presentation Server Client - WFICA.OCX ActiveX Heap Buffer Overflow Citrix Presentation Server Client WFICA.OCX ActiveX Component Heap Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var...

Citrix Presentation Server Client WFICA.OCX ActiveX Heap BOF Exploit

Exploit for unknown platform in category remote exploits ==================================================================== Citrix Presentation Server Client WFICA.OCX ActiveX Heap BOF Exploit ==================================================================== Citrix Presentation Server Client...

artmedic weblog index.php jahrneu Parameter XSS

artmedic weblog index.php jahrneu Parameter XSS. CVE-2008-0765. Webapps exploit for php platform source: http://www.securityfocus.com/bid/27745/info artmedic webdesign weblog is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An...

hi

hi i have a bung in sandbox 1.4.1 script www.by-f10.com/bug.txt here is the bug you can downloaded the bug an took the bug is RFI is in the /lib/jpgraph/jpgrapherrhandler.inc.php file can you post it in securityfocus pleas...

Citrix Presentation Server Client - 'WFICA.OCX' ActiveX Heap Buffer Overflow

Citrix Presentation Server Client WFICA.OCX ActiveX Component Heap Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

PKs Movie Database 3.0.3 XSS / SQL Injection Vulnerabilities

No description provided by source. ------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo -------- ------------------------------------------------------------- = Author : HouSSaMix From H-T Team = Script : PKs Movie Database version 3.0.3 =...

Joovili 2.1 - 'members_help.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/27693/info Joovili is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the contex...

Immunity Canvas: PORTALLWEBPHP_INCLUDE

Name| portallwebphpinclude ---|--- CVE| CVE-2008-0645 Exploit Pack| CANVAS Description| Portail Web Php remote file include Notes| CVE Name: CVE-2008-0645 VENDOR: Portail Web Repeatability: Infinite References: http://www.securityfocus.com/bid/27616 CVE Url:...

Portail Web PHP 2.5.1 - 'item.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/27616/info Portail Web Php is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...

Domain Trader 2.0 - 'catalog.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27571/info Domain Trader is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...

Immunity Canvas: SMARTPUB_EXEC

Name| smartpubexec ---|--- CVE| CVE-2008-0503 Exploit Pack| CANVAS Description| Smart Publisher 1.0.1 exec Notes| CVE Name: CVE-2008-0503 VENDOR: Smart Publisher Notes: Try using nc -e /bin/sh as your command and having a nc -vlp Repeatability: Infinite References:...

Joomla! / Mambo Component com_buslicense - 'aid' SQL Injection

source: https://www.securityfocus.com/bid/27508/info The 'combuslicense' component for Mambo/Joomla is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

MegaBBS 1.5.14b - 'upload.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27368/info MegaBBS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Toshiba Surveillance Surveillix DVR MeIpCamX.dll 1.0 - ActiveX Control Buffer Overflow

Toshiba Surveillance Surveillix DVR MeIpCamX.dll 1.0 - ActiveX Control Buffer Overflow source: https://www.securityfocus.com/bid/27360/info Surveillix DVR 'MeIpCamX.DLL' ActiveX control is prone to multiple buffer-overflow vulnerabilities because the application fails to perform adequate boundary...