5368 matches found
JVN#75899905 Fuktommy.com httpd.pl included in its HTML preprocessor vulnerable in allowing an attacker to view arbitrary CGI source code
Fuktommy.com httpd.pl included in its HTML preprocessor is an open source web server. It contains a vulnerability which may allow an attacker to view CGI source code in the server as it does not properly handle a specially crafted HTTP request. Impact An attacker may be able to view CGI source co...
ragnarok-bypass.txt
VaLiuS has reported a vulnerability in Ragnarok Online Control Panel, which can be exploited by malicious people to bypass certain security restrictions. The vulnerability is caused due to an error in the authentication process when checking page access. This can be exploited to bypass the...
Ragnarok Online Control Panel Authentication Bypass Vulnerability [new method]
VaLiuS has reported a vulnerability in Ragnarok Online Control Panel, which can be exploited by malicious people to bypass certain security restrictions. The vulnerability is caused due to an error in the authentication process when checking page access. This can be exploited to bypass the...
ISC BIND 8 - Remote Cache Poisoning (1)
ISC BIND 8 - Remote Cache Poisoning 1 source: https://www.securityfocus.com/bid/25459/info BIND 8 is prone to a remote cache-poisoning vulnerability because of weaknesses in its random-number generator. An attacker may leverage this issue to manipulate cache data, potentially facilitating...
Arcadem 2.01 Remote SQL Injection / RFI Vulnerabilties
Exploit for unknown platform in category web applications ====================================================== Arcadem 2.01 Remote SQL Injection / RFI Vulnerabilties ====================================================== Arcadem Remote File Inclusion Flaw / SQL Injection Software: Arcadem 2.01...
Move-2006_SP6 the latest vulnerability to obtain the administrator password-vulnerability warning-the black bar safety net
Ghost boy note: from 7j there to see, and there 7j write the received page. 7j:did not find he said the receiving page,only from have PHP write a. ? $filename = date"Ymd".". txt"; $time = @date"Y years m months d number of H points i points s seconds",time; $cookie = $POST'cookie'; $url =...
An online shopping system can traverse a directory vulnerability-vulnerability warning-the black bar safety net
Friends let help take a stand. Said for a long time..today only take the time to look at the next station..through the search sites keyword..view the page source to know this program called"mobile phone Online Sales website management system source code" Demo website: Download address: Under the...
The new network Union television system vulnerabilities-vulnerability warning-the black bar safety net
Today idle with nothing to do, went to the web to download Hu GE parodied the gold armor on the curse of the full overtime Group on the view. Inadvertently found that the station's software leaderboard on the new affiliate video system v2. 0 popularity index is quite high, so I just put this syst...
[ECHO_ADV_83$2007] PhpHostBot <= 1.06 (svr_rootscript) Remote File Inclusion Vulnerability
ECHOADV83$2007 ----------------------------------------------------------------------------------------- ECHOADV83$2007 PhpHostBot = 1.06 svrrootscript Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran...
Storesprite XSS vuln.
Storesprite XSS vuln. Vuln. discovered by : r0t Date: 10 August 2007 vendor:http://www.storesprite.com/ orginal advisory: http://pridels-team.blogspot.com/2007/08/storesprite-xss-vuln.html affected versions:Storesprite 7 and previous Storesprite contains a flaw that allows a remote Cross-Site...
phpMyAdmin multiple XSS vuln.
phpMyAdmin multiple XSS vuln. Vuln. discovered by : r0t Date: 10 August 2007 vendor:http://www.phpmyadmin.net/ orginal advisory: http://pridels-team.blogspot.com/2007/08/phpmyadmin-multiple-xss-vuln.html affected versions:2.10.3 latest stable version prior versions also can be affected. phpMyAdmi...
ariadnecms-rfi.txt
A R I A - S E C U R I T Y Ariadne CMS Remote File Inclusion Vendor: http://www.ariadne-cms.org/ Source Code: function LoadingDone parent.LoadingDone; PoC: http://site.com/path/view.php?ariadne=SHELL? Credits: Aria-Security Team http://Aria-Security.net http://outlaw.aria-security.info...
VisionProject Multiple XSS vuln.
VisionProject Multiple XSS vuln. Vuln. discovered by : r0t Date: 7 August 2007 vendor:www.visionproject.se orginal advsiory: http://pridels-team.blogspot.com/2007/08/visionproject-multiple-xss-vuln.html affected versions:VisionProject 3.1 and previous VisionProject contains a flaw that allows a...
PhpHostBot <= 1.06 (svr_rootscript) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ======================================================================= PhpHostBot = 1.06 svrrootscript Remote File Inclusion Vulnerability ======================================================================= \ /\ \ / | \ \ | / \ // /...
OpenWebMail Multiple XSS vuln.
OpenWebMail Multiple XSS vuln. Vuln. discovered by : r0t Date: 2 August 2007 vendor:openwebmail.org orginal advisory: http://pridels-team.blogspot.com/2007/08/openwebmail-multiple-xss-vuln.html affected versions:2.52 20060831 and previous OpenWebMail contains multiple flaws that allows a remote...
WebDirector XSS vuln.
WebDirector XSS vuln. Vuln. discovered by : r0t Date: 1 August 2007 vendor:www.webdirector.ru orginal advisory: http://pridels-team.blogspot.com/2007/08/webdirector-xss-vuln.html affected versions:2.2 and previous WebDirector contains a flaw that allows a remote Cross-Site Scripting attacks.Input...
corehttp-overflow.txt
/ corehttpv0.5.3alpha: httpd remote buffer overflow exploit. by: vade79/v9 [email protected] fakehalo/realhalo compile: gcc xcorehttp.c -o xcorehttp syntax: ./xcorehttp -r -h host -p port corehttp homepage/url: http://corehttp.sourceforge.net/ bughttp.c:...
CVE-2007-4025
Unspecified vulnerability in Sun Java System SJS Application Server 8.1 through 9.0 before 20070724 on Windows allows remote attackers to obtain JSP source code via unspecified vectors...
Code injection
Unspecified vulnerability in Sun Java System SJS Application Server 8.1 through 9.0 before 20070724 on Windows allows remote attackers to obtain JSP source code via unspecified vectors...
