XChat <= 2.8.7b (URI Handler) Remote Code Execution Exploit (ie6/ie7)

Exploit for unknown platform in category remote exploits ===================================================================== XChat Welcome to my personal webs...

XChat 2.8.7b - URI Handler Remote Code Execution (Internet Explorer 67)

XChat 2.8.7b - URI Handler Remote Code Execution Internet Explorer 67 Xchat Welcome to my personal website document.location='ircs://[email protected]" --command "shell calc"' milw0rm.com 2008-06-13...

XChat 2.8.7b - 'URI Handler' Remote Code Execution (Internet Explorer 6/7)

Xchat Welcome to my personal website document.location='ircs://[email protected]" --command "shell calc"' milw0rm.com 2008-06-13...

XChat 2.8.7b - 'ircs://' URI Command Execution

source: https://www.securityfocus.com/bid/29696/info XChat is prone to a vulnerability that allows remote attackers to execute arbitrary commands in the context of the vulnerable user. This issue may lead to a remote compromise. The issue arises because of improper handling of the 'ircs://' URI...

Sql injection

SQL injection vulnerability in the KeyWordsList function in includes/incroutines.asp in Realm CMS 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the kwrd parameter in a kwl action to the default URI...

CVE-2008-2679

SQL injection vulnerability in the KeyWordsList function in includes/incroutines.asp in Realm CMS 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the kwrd parameter in a kwl action to the default URI...

Directory traversal

Multiple directory traversal vulnerabilities in ErfurtWiki R1.02b and earlier, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 ewikiid and 2 ewikiaction parameters to fragments/css.php, and possibly the 3 id parameter ...

CVE-2008-2636

The HTTP service on the Cisco Linksys WRH54G with firmware 1.01.03 allows remote attackers to cause a denial of service management interface outage or possibly execute arbitrary code via a URI that begins with a "/./" sequence, contains many instances of a "frontpage" sequence, and ends with a...

CVE-2008-2636

The HTTP service on the Cisco Linksys WRH54G with firmware 1.01.03 allows remote attackers to cause a denial of service management interface outage or possibly execute arbitrary code via a URI that begins with a "/./" sequence, contains many instances of a "frontpage" sequence, and ends with a...

PHPInv 0.8.0 (LFI/XSS) Multiple Remote Vulnerabilities

No description provided by source. ========================================================= PHPInv 0.8.0 LFI/XSS Multiple Remote Vulnerabilities ========================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hackin...

Apple QuickTime SMIL qtnext Redirect File Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The specific flaw exists in the handling of SMIL text embedded in video...

phpinv-lfixss.txt

========================================================= PHPInv 0.8.0 LFI/XSS Multiple Remote Vulnerabilities ========================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

PHPInv 0.8.0 (LFI/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ====================================================== PHPInv 0.8.0 LFI/XSS Multiple Remote Vulnerabilities ====================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

phpinv 0.8.0 - Local File Inclusion / Cross-Site Scripting

========================================================= PHPInv 0.8.0 LFI/XSS Multiple Remote Vulnerabilities ========================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

phpinv 0.8.0 - Local File Inclusion Cross-Site Scripting

phpinv 0.8.0 - Local File Inclusion Cross-Site Scripting ========================================================= PHPInv 0.8.0 LFI/XSS Multiple Remote Vulnerabilities ========================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O...

Design/Logic Flaw

Incomplete blacklist vulnerability in Skype 3.6.0.248, and other versions before 3.8.0.139, allows user-assisted remote attackers to bypass warning dialogs and possibly execute arbitrary code via a file: URI that ends in an executable extension that is not covered by the blacklist...

CVE-2008-2545

Skype 3.6.0.248, and other versions before 3.8.0.139, uses a case-sensitive comparison when checking for dangerous extensions, which allows user-assisted remote attackers to bypass warning dialogs and possibly execute arbitrary code via a file: URI with a dangerous extension that uses a different...

CVE-2008-2545

CVE-2008-2545 affects Skype 3.6.0.248 and earlier than 3.8.0.139. The issue is a case-sensitive comparison in the file: URI handling for dangerous extensions, which can bypass warning dialogs and potentially allow user-assisted remote code execution when a crafted file: URI with a mismatched case...

CVE-2008-1805

CVE-2008-1805 affects Skype: incomplete blacklist in the file:// URI handling allows user-assisted remote attackers to bypass the security warning and possibly execute arbitrary code via a URL ending in an executable extension not covered by the blacklist. Reported for Skype 3.6.0.248 and other v...

CVE-2008-2545

Skype 3.6.0.248, and other versions before 3.8.0.139, uses a case-sensitive comparison when checking for dangerous extensions, which allows user-assisted remote attackers to bypass warning dialogs and possibly execute arbitrary code via a file: URI with a dangerous extension that uses a different...