3531 matches found
CVE-2008-5851
CVE-2008-5851 describes an SQL injection in the MyPHP Baseball Stats (MyPBS) application. The vulnerability is in index.php via the seasonID parameter, allowing remote attackers to alter the backend database by issuing arbitrary SQL. The NVD data lists a base score of 7.5 (HIGH) with NETWORK atta...
CVE-2008-5851: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in My PHP Baseball Stats MyPBS allows remote attackers to execute arbitrary SQL commands via the seasonID parameter...
CVE-2008-5793
Multiple PHP remote file inclusion vulnerabilities in the Clickheat - Heatmap stats comclickheat component 1.0.1 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the 1 GLOBALSmosConfigabsolutepath parameter to a install.clickheat.php, b Cache.php and c...
CVE-2008-5793: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in the Clickheat - Heatmap stats comclickheat component 1.0.1 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the 1 GLOBALSmosConfigabsolutepath parameter to a install.clickheat.php, b Cache.php and c...
Ho' Detector Promiscuous mode detector shellcode 56 bytes
Ho' Detector Promiscuous mode detector shellcode 56 bytes. Shellcode exploit for linx86 platform / â–▄∙ â–„ â–„â–„â–„ . â– â–„ ∙ â–Œ â–„ ·. ▄∙ â–„â–Œ â–„â–„â–„â–„â–„ ▄▄▄· █▌█▌■▀▄.▀· ∙█▌â–â–ˆ ■·██ â–███■█■██▌ ∙██ â–â–ˆ...
Ultrastats 0.2.1440.3.11 - serverid SQL Injection
Ultrastats 0.2.1440.3.11 - serverid SQL Injection ||| ||| ||| ||| ||| |||| ||| |||||||||||| +++++++++++ ++++++++++++ ++++++++++++ | ++++++++++++| | ++++++++ | | ++ | |+| Ultrastats exploit by eeee eeee e e -------------------- 8 8 8 8 8eee 8eee 8eee8e 88 88 88 8 88ee 88ee 88 8 --- mail: hexdez@nm...
irc-info NSE Script
Gathers information from an IRC server. It uses STATS, LUSERS, and other queries to obtain this information. Example Usage nmap -sV -sC Script Output 6665/tcp open irc | irc-info: | server: asimov.freenode.net | version: ircd-seven-1.1.320111112-b71671d1e846,charybdis-3.4-dev. asimov.freenode.net...
Nuked-klaN 1.7.7 / SP4.4 - Multiple Vulnerabilities
URL: http://real.o-n.fr/ Date: 14/10/2008 Special thanks to Louis for remembering me I had to finish it = VULNERABILITY DETAILS --------------------- Nuked-klaN suffers from a vulnerability due to HTTPREFERER, which is not correctly filtered before being inserted in nukedstatsvisitor table. If HT...
Cross site scripting
Cross-site scripting XSS vulnerability in Bitweaver 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to 1 edit.php and 2 list.php in articles/; 3 listblogs.php and 4 rankings.php in blogs/; 5 calendar/index.php; 6 calendar.php, 7 index.php, and 8...
CVE-2008-4337: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Bitweaver 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to 1 edit.php and 2 list.php in articles/; 3 listblogs.php and 4 rankings.php in blogs/; 5 calendar/index.php; 6 calendar.php, 7 index.php, and 8...
CVE-2008-4246
Unspecified vulnerability in Denora IRC Stats Server before 1.4.1 allows remote IRC servers to cause a denial of service application crash via a crafted CTCP response...
Design/Logic Flaw
Unspecified vulnerability in Denora IRC Stats Server before 1.4.1 allows remote IRC servers to cause a denial of service application crash via a crafted CTCP response...
CVE-2008-4246
Unspecified vulnerability in Denora IRC Stats Server before 1.4.1 allows remote IRC servers to cause a denial of service application crash via a crafted CTCP response...
CVE-2008-4246
Affected software: Denora IRC Stats Server (before 1.4.1). Vulnerability: Unspecified issue allowing remote IRC servers to trigger a denial of service (application crash) via a crafted CTCP response. Root cause / vectors: Documented across multiple sources; CTCP response handling is the trigger. ...
CVE-2008-4246: Undefined Security Weakness
Unspecified vulnerability in Denora IRC Stats Server before 1.4.1 allows remote IRC servers to cause a denial of service application crash via a crafted CTCP response...
PT-2008-5534 · Denora · Denora Irc Stats Server
Name of the Vulnerable Software and Affected Versions: Denora IRC Stats Server versions prior to 1.4.1 Description: The issue allows remote IRC servers to cause a denial of service, resulting in an application crash, by sending a crafted CTCP response. Recommendations: For versions prior to 1.4.1...
HIOX Browser Statistics 2.0 Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications =============================================================== HIOX Browser Statistics 2.0 Remote File Inclusion Vulnerability =============================================================== HIOX Browser Statistics 2.0 Remote File Inclusi...
CVE-2008-2106
Summary: CVE-2008-2106 affects Call of Duty 4 (CoD4) v1.5 and earlier. The issue allows remote authenticated users to cause a denial of service (crash) by sending a type 7 stats packet that triggers a memcpy with a negative value. This is the concrete vulnerability described in the connected docu...
CVE-2008-2106: Improper Input Validation
Call of Duty 4 CoD4 1.5 and earlier allows remote authenticated users to cause a denial of service crash via a type 7 stats packet, which triggers a memcpy with a negative value...
PHP-Stats 0.1.9.1 - admin.php Multiple Cross-Site Scripting Vulnerabilities
PHP-Stats 0.1.9.1 - admin.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/28824/info Php-Stats is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. Attackers may leverage these issues to...