5312 matches found
common solutions csphonebook 1.02 'index.php' Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30485/info The 'csphonebook' program from common solutions is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitra...
WCMS 1.0b Arbitrary Add Admin Exploit
No description provided by source. !/usr/bin/perl ================================================= WCMS v.1.0b Arbitrary Add Admin Exploit ================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...
CoDeSys SCADA 2.3 - Webserver Stack Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Digger Solutions Newsletter Open Source SQL Injection Vulnerability
No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Diggersolutions Newsletter SQL injection Vulnerability Version:2.7.1 Vendor url:http://diggersolutions.com Published: 2010-11-02 Thanx to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic,...
Web4Future Portal Solutions Arhiva.PHP Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15718/info Portal Solutions is prone to a directory traversal vulnerability. This is due to a lack of proper sanitization of user-supplied input. This issue may be leveraged to read arbitrary files on an affected computer...
Pablo Software Solutions FTP Service 1.2 Plaintext Password Weakness
No description provided by source. source: http://www.securityfocus.com/bid/7801/info It has been reported that Pablo FTP Service stores FTP User account passwords in plaintext format. As a result, these credentials could be exposed to other users. It should be noted that while this weakness has...
PHP Script Directory Software (sbcat_id) SQL Injection Vulnerability
No description provided by source. == Author: BorN To K!LL - h4ck3r Contact: [email protected] == Script: PHP script directory software Version: n/a Link: http://www.softbizsolutions.com/script-directory-software.php == 3xploit: path/showcats.php?sbcatid=SQL-Injection 3xample:...
Simple PHP Blog <= 0.4.0 - Multiple Remote Exploits
No description provided by source. !/usr/bin/perl -w =============================================================================== Title: sphpblogvulns.pl Written by: Kenneth F. Belva, CISSP Franklin Technologies Unlimited, Inc. http://www.ftusecurity.com Date: August 25, 2005 Version: 0.1...
Openconstructor CMS 3.12.0 \'id\' Parameter Multiple SQL Injection
No description provided by source. Title: Openconstructor CMS 3.12.0 'id' parameter multiple SQL injection vulnerabilities Affected Software: http://www.openconstructor.org/ http://code.google.com/p/openconstructor/downloads/list...
Horizon Web Builder (fshow.php) SQL Injection Vulnerability
No description provided by source. Exploit Title: Horizon SQLi Google Dork: intext:Site by Horizon : inurl:uid=HORIZON3 Date: 03/05/2011 Author: Iolo Morganwg Category: Web App Version: PHP Tested on: Windows XP Vendor: http://www.horizonsolutions.tv/ Notes: Both params are vulnerable to union...
Ecommercemax Solutions Digital Goods Seller SQL Injection
No description provided by source. Author: R4dc0re Exploit Title:Ecommercemax Solutions Digital good seller Sql Injection Vulnerablity Date: 05-12-2010 Vendor or Software Link:http://www.ecommercemax.com/ Category:WebApp Version:1.5 Price:60$ Contact: [email protected] Website: www.1337db.com...
Automated Solutions Modbus/TCP OPC Server Remote Heap Corruption PoC
No description provided by source. !/usr/bin/python asmb-heap.py Automated Solutions Modbus/TCP OPC Server Remote Heap Corruption PoC Jeremy Brown 0xjbrown41-gmail-com Jan 2011 A specially crafted length field in a MODBUS packet header can trigger heap corruption. 00408312 | 8B5424 3C MOV EDX,DWO...
Macro Express Pro 4.2.2.1 MXE File Syntactic Analysis Buffer Overflow PoC
No description provided by source. !/usr/local/bin/perl Macro Express Pro 4.2.2.1 MXE File Syntactic Analysis Buffer Overflow PoC Vendor: Insight Software Solutions, Inc. Product web page: http://www.macros.com Affected version: 4.2.2.1 and 4.2.1.1 Summary: Macro Express is the premier Windows...
UtilMind Solutions Site News 1.1 Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11126/info Reportedly UtilMind Solutions Site News is affected by an authentication bypass vulnerability. This issue is due to an access validation error. An unauthenticated attacker can leverage this issue to display and...
Accelerated E Solutions SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15077/info Accelerated E Solutions is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...
Shape Web Solutions CMS SQL Injection Vulnerability
No description provided by source. Shape Web Solutions CMS SQL Injection Vulnerability Exploit Title: Shape Web Solutions CMS SQL Injection Vulnerability Author: Ashiyane Digital Security Team Date: 03-18-2011 Vendor or Software Link: http://www.shapeweb.com.br/ Version: All version Category::...
Yes Solutions - Webapp SQL Injection
No description provided by source. .:. Author : HackXBack [email protected] Lebanese Hacker .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : YES SOLUTIONS http://www.yessolutions.biz/files/index.php .:. Bug Type : Sql Injection .:. Dork : Powered by: Yes Solutions === Exploit ==...
Business Objects Crystal Reports 9/10 Web Form Viewer Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10260/info Crystal Reports and Crystal Enterprise Web Form Viewer is prone to a directory traversal vulnerability. This issue can allow an attacker to retrieve and delete files, allowing for information disclosure and...
CPA Site Solutions Remote File Upload Vulnerability
No description provided by source. |REMOTE FILE UPLOAD VULNERABILTY| .:|cpasitesolutions|::. AUTHOR : R3VANBASTARD SITE : www.sux0r.net PROVIDER: http://www.cpasitesolutions.com DORK : intext:Powered by CPA Site Solutions x EXPLOIT:...
Web4Future Portal Solutions Comentarii.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15716/info Portal Solutions is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...