3119 matches found
cityadmin - links.php Blind SQL Injection
cityadmin - links.php Blind SQL Injection cityadmin links.php Blind Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : cityadmin .:. Download...
Adobe RoboHelp Server SQL Injection (CVE-2008-2991)
Adobe RoboHelp Server is a server-based Help solution that provides real-time end-user feedback on Help and knowledge bases. It gathers and logs data about what questions users ask, while searching content and how users navigate through topics. There exists an SQL injection vulnerability in Adobe...
HP-UX PHSS_38783 : HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Unauthorized Access to Data (HPSBMA02406 SSRT080100 rev.2)
s700800 11.X OV NNM7.53 IA-64 Intermediate Patch 21 : Potential security vulnerabilities have been identified with HP OpenView Network Node Manager OV NNM. The vulnerabilities could be exploited remotely to allow execution of arbitrary code or unauthorized access to data. %NASLMINLEVEL 70300 C...
HP-UX Update for Veritas VxFS 3.3/3.5 HPSBUX01218
Check for the Version of Veritas VxFS 3.3/3.5 OpenVAS Vulnerability Test HP-UX Update for Veritas VxFS 3.3/3.5 HPSBUX01218 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
scpig-sql.txt
SoftComplex PHP Image Gallery ctg Remote SQL Injection Velnerability Author: Hussin X Home : www.IQ-TY.com & www.TrYaG.cc MaiL : [email protected] script : http://www.softcomplex.com/products/phpimagegallery/demo2/ ExploiT & demo...
Flash Player vulnerable in handling cross-domain policy files
Overview Adobe Flash Player contains a vulnerability caused by improper handling of cross-domain policy files. Adobe Flash Player is a player for the Flash media format and enables frame-based animations with sound to be viewed within a web browser. According to Adobe's "About allowing cross-doma...
CaLogic Calendars 1.2.2 (langsel) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ==================================================================== CaLogic Calendars 1.2.2 langsel Remote SQL Injection Vulnerability ====================================================================...
XOOPS Module wfdownloads (cid) Remote SQL Injection Vulnerability
No description provided by source. XOOPS module wfdownloads SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl: "modules/wfdownloads/viewcat.php?cid" DORK 2 : allinurl: "modules/wfdownloads" EXPLOIT :...
Chatwm 1.0 - SelGruFra.asp SQL Injection
Chatwm 1.0 - SelGruFra.asp SQL Injection source: https://www.securityfocus.com/bid/21732/info Chatwm is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...
Creative Software UK Community Portal 1.1 - 'DiscReply.php?mid' SQL Injection
source: https://www.securityfocus.com/bid/17890/info Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an...
[security bulletin] SSRT4702 rev.0 - HP-UX running Veritas 3.3/3.5 unauthorized data access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01218 REVISION: 0 SSRT4702 rev.0 - HP-UX running Veritas 3.3/3.5 unauthorized data access NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. INITIAL RELEASE: 24 August 2005 POTENTIAL...
Hosting Controller 6.1 - resellerresources.asp?jresourceid SQL Injection
Hosting Controller 6.1 - resellerresources.asp?jresourceid SQL Injection source: https://www.securityfocus.com/bid/13806/info Hosting Controller is reported prone to multiple vulnerabilities. These issues can allow an attacker gain unauthorized access to data and carry out SQL injection attacks...
RHEL 3 : net-snmp (RHSA-2004:023)
Updated Net-SNMP packages are available to correct a security vulnerability and other bugs. The Net-SNMP project includes various Simple Network Management Protocol SNMP tools. A security issue in Net-SNMP versions before 5.0.9 could allow an existing user/community to gain access to data in MIB...
Phorum 3.4.x - Phorum_URIAuth SQL Injection
Phorum 3.4.x - PhorumURIAuth SQL Injection source: https://www.securityfocus.com/bid/10173/info Reportedly Phorum is affected by a remote SQL injection vulnerability. This issue is due to a failure of the application to properly sanitized user supplied URI input. This issue may allow a remote...
CVE-2003-0935
Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed...
Sun Java Plugin 1.4.2 _01 - Cross-Site Applet Sandbox Security Model Violation
source: https://www.securityfocus.com/bid/8857/info A vulnerability has been reported in Java implementations that may potentially allow Java applets from two different domains to violate the sandbox security model and share read/write access to data areas. This violates the principle of isolatio...
CVE-1999-1530
cgiwrap as used on Cobalt RaQ 2.0 and RaQ 3i does not properly identify the user for running certain scripts, which allows a malicious site administrator to view or modify data located at another virtual site on the same system...
FreeBSD-SA-01:30.ufs-ext2fs
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:30 Security Advisory FreeBSD, Inc. Topic: UFS/EXT2FS allows disclosure of deleted data Category: kernel Module: ufs/ext2fs Announced: 2001-03-22 Credits: Sven Berkvens ,...
