Synergiser 1.2 RC1 - Local File Inclusion / Full Path Disclosure

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Synergiser...

HP-UX Security Patch : PHCO_26020

top1 cumulative patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26246; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/01/11";...

Web Server Transmits Cleartext Credentials

The remote web server contains several HTML form fields containing an input of type 'password' which transmit their information to a remote web server in cleartext. An attacker eavesdropping the traffic between web browser and server may obtain logins and passwords of valid users. C Tenable Netwo...

SecurityReporter < 4.6.3p1 Multiple Vulnerabilities

The 'file.cgi' script included with the version of SecurityReporter installed on the remote host fails to sanitize input to the 'name' parameter before returning the contents of the specified file and supports bypassing authentication using specially crafted arguments. An unauthenticated, remote...

Unrestricted file upload

Unrestricted file upload vulnerability in banner-upload.php in Szymon Kosok Best Top List allows remote attackers to upload and execute arbitrary PHP files in banners/...

CVE-2007-4376

Unrestricted file upload vulnerability in banner-upload.php in Szymon Kosok Best Top List allows remote attackers to upload and execute arbitrary PHP files in banners/...

CVE-2007-4376

CVE-2007-4376 describes an unrestricted file upload vulnerability in banner-upload.php of the Szymon Kosok Best Top List. This allows remote attackers to upload and execute arbitrary PHP files in the banners/ directory. The provided documents do not include explicit root-cause details beyond the ...

Best Top List Remote File Upload Vulnerability

Best Top List Remote File Upload Vulnerability ---------------------------------------------- Script : Best Top List Version : All Version Site : http://besttoplist.sourceforge.net Closed Founder : Rizgar Contact : [email protected] and irc.gigachat.net kurdhack Thanks : KHC, PH , ColdHackers...

php123-sql.txt

--==+================================================================================+==-- --==+ PHP123 Top Sites SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: N/A DORK: allintext:"Browse...

Sql injection

SQL injection vulnerability in category.php in PHP123 Top Sites allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2007-4054

CVE-2007-4054 is a SQL injection vulnerability in PHP123 Top Sites affecting category.php via the cat parameter. The vulnerability enables remote attackers to alter SQL commands due to improper input handling in the affected function, allowing access to or manipulation of the database. The NVD en...

CVE-2007-4054

SQL injection vulnerability in category.php in PHP123 Top Sites allows remote attackers to execute arbitrary SQL commands via the cat parameter...

PHP123 Top Sites (category.php cat) Remote SQL Injection Vuln

No description provided by source. --==+================================================================================+==-- --==+ PHP123 Top Sites SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog...

PHP123 Top Sites - category.php?cat SQL Injection

PHP123 Top Sites - category.php?cat SQL Injection --==+================================================================================+==-- --==+ PHP123 Top Sites SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR:...

PHP123 Top Sites - 'category.php?cat' SQL Injection

--==+================================================================================+==-- --==+ PHP123 Top Sites SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: N/A DORK: allintext:"Browse...

Article Directory - 'index.php' Remote File Inclusion

dork:inurl:index.php%"Submit%Articles"%"Member%Login"%"Top%Authors" dork:inurl:index.php?pagedb=rss expl:index.php?page=shell? original post:http://darkcode.ath.cx/f0rum/ind3x.php?action=vthread&forum=12&topic=114 author:[email protected] greetz:d3hydr8, whoami pace milw0rm.com 2007-07-24...

Unfixed XSS vulnerability at www.webometrics.info

Security researcher MaXWeL, has submitted on 17/05/2007 a cross-site-scripting XSS vulnerability affecting www.webometrics.info, which at the time of submission ranked 63770 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/05/2007. It is...

Monster Top List 1.4.2 - functions.php?root_path Remote File Inclusion

Monster Top List 1.4.2 - functions.php?rootpath Remote File Inclusion !/usr/bin/perl Monster Top List hTTp://RSTZONE.NET .\n"; print ". coded by fluffybunny - [email protected] .\n"; print "...............................................................\n\n"; my...

Monster Top List <= 1.4.2 (functions.php root_path) RFI Exploit

Exploit for unknown platform in category web applications =============================================================== Monster Top List = 1.4.2 functions.php rootpath RFI Exploit =============================================================== !/usr/bin/perl Monster Top List = 1.4.2 remote...

caid-msgeng.txt

!/usr/bin/python This one was listed in the SANS TOP 20 and I needed an exploit for analysis. I couldnt find a reliable exploit for my analysis and so came up with this. Remote exploit for the CA BrightStor msgeng.exe service stack overflow vulnerability as described in LS-20060330.pdf on...