Virgin Media SQL Injection

----------------------------------------------------------------------------------------------- + Virginmedia.com suffers from a remote SQL injection vulnerability + Author: Rohit Bansal --------------------------------------------------------------------------------------- Host Information Serve...

cmme-disclose.txt

WwW.BugReport.ir AmnPardaz Security Research & Penetration Testing Group Title: CMME Multiple Information disclosure vulnerabilities Vendor: http://cmme.oesterholt.net Bug: Information Disclosure Vulnerable Version: 1.19 prior versions also may be affected Exploitation: Remote with browser Exploi...

CMME Multiple Information disclosure vulnerabilities

WwW.BugReport.ir AmnPardaz Security Research & Penetration Testing Group Title: CMME Multiple Information disclosure vulnerabilities Vendor: http://cmme.oesterholt.net Bug: Information Disclosure Vulnerable Version: 1.19 prior versions also may be affected Exploitation: Remote with browser Exploi...

Mega File Hosting Script 1.2 (fid) Remote SQL Injection Vulnerability

No description provided by source. Script: Mega File Hosting script Type: SQL Injection 1923TURK.ORG TURKiSHWARRiORR Step 1: Register an account Step 2: login and go to /members.php?folders=1 Step 3: Create a folder with any name Exploitation options: ADIM 1:...

CVE-2003-1371

CVE-2003-1371 affects Nuked-Klan up to version 1.3b (and possibly earlier). A remote attacker can trigger phpinfo via the op parameter in the Team, News, or Liens modules, causing information disclosure about the server. The available documents do not specify a fixed patch or remediation. If need...

Novus 1.0 (notas.asp nota_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Novus 1.0 notas.asp notaid Remote SQL Injection Vulnerability ================================================================ Novus - Sistema de administracion y contenido...

DEBIAN-CVE-2007-4601

A regression error in tcp-wrappers 7.6.dbs-10 and 7.6.dbs-11 might allow remote attackers to bypass intended access restrictions when a service uses libwrap but does not specify server connection information...

LDAP Crafted Search Request Server Information Disclosure

By sending a search request with a filter set to 'objectClass=', it is possible to extract information about the remote LDAP server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid25701; scriptversion"1.25";...

MSSQL Ping Utility

This module simply queries the MSSQL Browser service for server information. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'MSSQL Ping Utility', 'Description' = 'This module simply queries the...

Hummingbird Collaboration - Crafted URL File Property Obscuration Download

Hummingbird Collaboration - Crafted URL File Property Obscuration Download source: https://www.securityfocus.com/bid/16195/info Hummingbird Enterprise Collaboration is prone to multiple vulnerabilities. The following specific issues were identified: The application reportedly allows remote...

Mailman Detection

The remote host is running Mailman, an open source, Python-based mailing list management package. This script was written by George A. Theall, . GPLv2 include"compat.inc"; if description scriptid16338; scriptversion"1.17"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...

[PersianHacker.net] Full Path Disclosure and PHP Injection In Pafiledb 3.1 Final

In the name of GOD Persianhacker.net Full Path Disclosure and PHP Injection In Pafiledb 3.1 Final PafileDB paFileDB is designed to allow webmasters have a database of files for download on their site. To add a download, all you do is upload the file using FTP or whatever method you use, log into...

Novell Netware Enterprise Web Server 5.16.0 - snoop.jsp Information Disclosure

Novell Netware Enterprise Web Server 5.16.0 - snoop.jsp Information Disclosure source: https://www.securityfocus.com/bid/9479/info Multiple vulnerabilities have been identified in Novell Netware Enterprise Web Server that may allow an attacker to carry out cross-site scripting attacks, disclose...

Web Server Crafted Request Vendor/Version Information Disclosure

The web server running on the remote host appears to be hiding its version or name, which is a good thing. However, using a specially crafted request, Nessus was able to discover the information. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11239; scriptversion...

Web Server info.php / phpinfo.php Detection

Many PHP installation tutorials instruct the user to create a PHP file that calls the PHP function 'phpinfo' for debugging purposes. Various PHP applications may also include such a file. By accessing such a file, a remote attacker can discover a large amount of information about the remote web...

phpBBmod contains an open phpinfo

phpBBmod http://phpbbmod.sourceforge.net, an enhanced version of phpBB contains an open phpinfo.php file. Going to phpinfo.php on any board using phpBBmod googling for "Boosted by phpBBmod" is around 48,000 results, i tried a few from google search and they all had a phpinfo.php file Solution:...

MandrakeSoft Mandrake Linux Apache default configuration sample programs disclose server information

Overview The default installation of Apache on MandrakeSoft Mandrake Linux includes sample programs which may unnecessarily disclose information about the server. Description MandrakeSoft produces a Linux distribution called Mandrake Linux that includes the Apache web server. The default...

CVE-1999-1260

mSQL Mini SQL 2.0.6 allows remote attackers to obtain sensitive server information such as logged users, database names, and server version via the ServerStats query...

CVE-1999-1538

The CVE-1999-1538 issue affects Microsoft IIS where, after upgrading IIS 2 or 3 to IIS 4, the ism.dll file is left in /scripts/iisadmin. This unmanaged file does not restrict access, enabling an unauthorized user to access sensitive server information, including the Administrator’s password, via ...

Shopping Cart Version 1.23

User can execute command, but can't use "../" www.server.com/cgi- local/shop.pl/SID=947626980.19094/page=;ls| XP-TEAM DonHuan [email protected]...