2367 matches found
SQL In Invision Gallery 2.0.3
Credit: By aLMaSTeR HaCKeR [email protected] Vulnerable: Invision Gallery 2.0.3 EXPLIOT: http://www.site.com/index.php?automodule=gallery&cmd=sc&cat=26&sortkey=date&orderkey=DESC&prunekey=30&st=|aLMaSTeR The Error: mySQL query error: SELECT i., m.membersdisplayname AS name, m.id AS mid, r.id a...
CVE-2004-2355
Cross-site scripting XSS vulnerability in Crafty Syntax Live Help CSLH before 2.7.4 allows remote attackers to inject arbitrary web script or HTML via the name field of a livehelp or chat session...
CVE-2004-2355
Crafty Syntax Live Help (CSLH) prior to 2.7.4 is affected by a Cross-site scripting (XSS) vulnerability. The issue, described in CVE-2004-2355, allows remote attackers to inject arbitrary web script or HTML via the name field of a livehelp or chat session. Supported by NVD entry, the description ...
FreeBSD : vim -- vulnerabilities in modeline handling (bd9fc2bf-5ffe-11d9-a11a-000a95bc6fae)
Ciaran McCreesh discovered news ways in which a VIM modeline can be used to trojan a text file. The patch by Bram Moolenaar reads : Problem: Unusual characters in an option value may cause unexpected behavior, especially for a modeline. Ciaran McCreesh Solution: Don't allow setting termcap option...
Dragonfly Shopping Cart Multiple vulnerabilities
Dcrab 's Security Advisory http://icis.digitalparadox.org/dcrab http://www.hackerscenter.com/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc or even code them. Learn more at http://www.dbtech.org Severity: High Title: Dragonfly Shopping Cart Multiple vulnerabilities Date:...
CyberStrong eShop 4.2 - 10expand.asp SQL Injection
CyberStrong eShop 4.2 - 10expand.asp SQL Injection source: https://www.securityfocus.com/bid/14103/info CyberStrong eShop is prone to an SQL injection vulnerability. As a result, the attacker may modify the structure and logic of an SQL query that is made by the application. The attacker may...
Invision Board Multiple XSS and SQL Injection
Binary data 2879.prm...
PostNuke Phoenix 0.7x - SHOW SQL Injection
PostNuke Phoenix 0.7x - SHOW SQL Injection source: https://www.securityfocus.com/bid/12684/info PostNuke Phoenix is reported prone to an SQL injection vulnerability. This issue arises due to insufficient sanitization of user-supplied input. It is reported that issue presents itself when malicious...
CVE-2004-2355
Cross-site scripting XSS vulnerability in Crafty Syntax Live Help CSLH before 2.7.4 allows remote attackers to inject arbitrary web script or HTML via the name field of a livehelp or chat session...
Debian DSA-501-1 : exim - buffer overflow
Georgi Guninski discovered two stack-based buffer overflows. They can not be exploited with the default configuration from the Debian system, though. The Common Vulnerabilities and Exposures project identifies the following problems that are fixed with this update : - CAN-2004-0399 When...
DEBIAN-CVE-2004-0642
Double free vulnerabilities in the error handling code for ASN.1 decoders in the 1 Key Distribution Center KDC library and 2 client library for MIT Kerberos 5 krb5 1.3.4 and earlier may allow remote attackers to execute arbitrary code...
freebsd/x86 - connect 102 bytes
freebsd/x86 connect 102 bytes. Shellcode exploit for freebsdx86 platform ; Passive Connection Shellcode ; ; Coded by Scrippie - [email protected] - http://b0f.freebsd.lublin.pl ; Buffer0verfl0w Security ; Why? This evades firewalls... ; ; YES, this is for NASM, I detest AT&T syntaxis - it's gross...
Microsoft Windows Server 2000 - POSIX Subsystem Privilege Escalation (MS04-020)
/ Microsoft Windows POSIX Subsystem Local Privilege Escalation Exploit MS04-020 Tested on windows 2k sp4 CN,NT/XP/2003 NOT TESTED Posixexp.c By bkbll bkbll cnhonker net,bkbll tom com www cnhonker com 2004/07/16 thanks to eyas xfocus org C:\whoami VITUALWIN2K\test C:\posixexp Microsoft Windows POS...
DEBIAN-CVE-2004-0400
Stack-based buffer overflow in Exim 4 before 4.33, when the headerschecksyntax option is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code during the header check...
FreeBSD : exim buffer overflow when verify = header_syntax is used (43)
The following package needs to be updated: exim-ldap2 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg5f29c2e49f6a11d8abbc00e08110b673.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...
Cross-site scripting vulnerability in Crafy Syntax Live Help 2.7.3 and below
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The problem: Users are able to insert pieces of html both in their name when they request livehelp and in chat sessions. For example. If I where to input the following javascript inside a ""script"" tag and use it as my name...
Crafty Syntax Live Help 2.7.3 - Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/10463/info CSLH is prone to multiple HTML injection vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data. The problem presents itself in various modules of the application and can allow remote attackers to inject HTML...
Exim verify=header_syntax buffer overflow
Background Exim is an highly configurable message transfer agent MTA developed at the University of Cambridge. Description When the option "verify = headersyntax" is used in an ACL in the configuration file, Exim is vulnerable to a buffer overflow attack that can be triggered remotely by sending...