3896 matches found
Ultimate PHP Board <= 2.0b1 (chat/login.php) Code Execution Exploit
Exploit for unknown platform in category web applications =================================================================== Ultimate PHP Board 23: $filename = "text.php"; + - 24: $fileAr= file$filename; + - 25: exec"cat /dev/null '$filename'"; + - 26: $fd...
CVE-2006-6380
Cross-site scripting XSS vulnerability in index.asp in Ultimate HelpDesk allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...
CVE-2006-6381
Directory traversal vulnerability in getfile.asp in Ultimate HelpDesk allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...
CVE-2006-6380
Cross-site scripting XSS vulnerability in index.asp in Ultimate HelpDesk allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...
CVE-2006-6381
Directory traversal vulnerability in getfile.asp in Ultimate HelpDesk allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...
CVE-2006-6381
The CVE-2006-6381 entry describes a directory traversal vulnerability in Ultimate HelpDesk, specifically in getfile.asp, where remote attackers can read arbitrary files by supplying a .. (dot dot) in the filename parameter. The affected software/component is Ultimate HelpDesk (getfile.asp). Root ...
CVE-2006-6380
CVE-2006-6380 concerns a Cross-site Scripting (XSS) vulnerability in Ultimate HelpDesk’s index.asp, exploitable via the keyword parameter. The issue allows remote attackers to inject arbitrary web script or HTML into the page, with the potential to affect users’ sessions and data depending on the...
timate HelpDesk (XSS/Local File Disclosure) Vulnerabilities
No description provided by source. Title : Ultimate HelpDesk All Version Source/XSS Vulnerabilities Author : ajann Contact : : Login Before Vulnerabilities.: SOURCE------------------------------------------------------ http://target/path//getfile.asp?filename=SQL Example:...
CVE-2006-6194
Multiple SQL injection vulnerabilities in index.asp in Ultimate Survey Pro allow remote attackers to execute arbitrary SQL commands via the 1 cat or 2 did parameter...
CVE-2006-6194
Multiple SQL injection vulnerabilities in index.asp in Ultimate Survey Pro allow remote attackers to execute arbitrary SQL commands via the 1 cat or 2 did parameter...
CVE-2006-6194
The CVE-2006-6194 entry describes multiple SQL injection vulnerabilities in index.asp of Ultimate Survey Pro, allowing remote attackers to execute arbitrary SQL commands via the (1) cat or (2) did parameters. Affected software: Ultimate Survey Pro (web component index.asp). Root cause: unsafely c...
Ultimate HelpDesk (XSS/Local File Disclosure) Vulnerabilities
Exploit for unknown platform in category web applications ============================================================= Ultimate HelpDesk XSS/Local File Disclosure Vulnerabilities ============================================================= Title : Ultimate HelpDesk All Version Source/XSS...
Ultimate HelpDesk - Cross-Site Scripting / Local File Disclosure
Title : Ultimate HelpDesk All Version Source/XSS Vulnerabilities Author : ajann Contact : : Login Before Vulnerabilities.: SOURCE------------------------------------------------------ http://target/path//getfile.asp?filename=SQL Example: //getfile.asp?filename=../index.asp...
Ultimate HelpDesk (XSS/Local File Disclosure) Vulnerabilities
No description provided by source. Title : Ultimate HelpDesk All Version Source/XSS Vulnerabilities Author : ajann Contact : : Login Before Vulnerabilities.: SOURCE------------------------------------------------------ http://target/path//getfile.asp?filename=SQL Example:...
aria-ultimate.txt
Aria-Security Team Advisory Original Advisory : http://www.aria-security.com/forum/showthread.php?t=38 ----------------------------------------------------------- Software: Ultimate Survey Pro. Vendor: fisasp.com Method: SQL Injection PoC: http://target/path/index.asp?cat=SQL INJECTION...
[Aria-Security Team] Ultimate Survey Pro SQL Injection
Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory : http://www.aria-security.com/forum/showthread.php?t=38 ----------------------------------------------------------- Software: Ultimate Survey Pro. Vendor: fisasp.com Method: SQL...
Ultimate PHP Board <= 2.0 (header_simple.php) File Include Exploit
Exploit for unknown platform in category web applications ================================================================== Ultimate PHP Board = 2.0 headersimple.php File Include Exploit ================================================================== ? print ' ::::::::: :::::::::: ::: :::...
Dove gray ultimate free kill tutorial-vulnerability warning-the black bar safety net
To this station also quite a few days, learned a lot of knowledge. Here today, I also want to talk about yourself tofree to killperception. A week ago,I dofree to killby Kabbah, rising, Kingsoft, Norton, etc. files and memory. I'm very excited about thefree to killmethod in the online publication...
CVE-2006-3206
register.php in Ultimate PHP Board UPB 1.9.6 and earlier allows remote attackers to create arbitrary accounts via the "NR" sequence in the signature field, which is used to separate multiple records...