2458 matches found
Slowloris Denial of Service Attack
Slowloris tries to keep many connections to the target web server open and hold them open as long as possible. It accomplishes this by opening connections to the target web server and sending a partial request. Periodically, it will send subsequent HTTP headers, adding to-but never completing-the...
Coppermine Photo Gallery <= 1.4.22 Remote Exploit
Exploit for unknown platform in category web applications ================================================= Coppermine Photo Gallery '; banner; $lwp-defaultheader'Accept-Language: en-us,en;q=0.5'; my $html = injrequest' WHERE x'; Wrong query to obtain an error ifnot defined $html print "- Request...
Webmedia Explorer 5.0.95.10 - Multiple Cross-Site Scripting Vulnerabilities
Webmedia Explorer 5.0.95.10 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/35368/info Webmedia Explorer is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these...
BLIND SQL INJECTION EXPLOIT--TemaTres 1.0.3-->
!/usr/bin/perl --------------------------------------------------- BLIND SQL INJECTION EXPLOIT--TemaTres 1.0.3-- --------------------------------------------------- CMS INFORMATION: --WEB: http://www.r020.com.ar/tematres/ --DOWNLOAD: http://sourceforge.net/projects/tematres/ --DEMO:...
php5 characteristics of the vulnerability-vulnerability warning-the black bar safety net
Use is PHP5,is because of the SERVER variables are not affected by the'quotes of the limit,even on a escape Vulnerabilities in User-Agent Second:the insert into a plurality of data insertion Hereinafter, the structure of the place is insert INTO $dbprefixsessions...
FreeBSD : Darwin Streaming Server denial-of-service vulnerability (c7cad0f0-671a-11d8-bdeb-000a95bc6fae)
An attacker can cause an assertion to trigger by sending a long User-Agent field in a request. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and...
Pligg 9.9.0 (editlink.php id) Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl Pligg v9.9 Blind SQL Injection vuln: editlink.php? SQL Injection: magicquotes off This exploit is possible because the $id variable in checkurl.php is taken from the url and then used in an SQL query without being sanitized. by Rohit Bansal...
Cross site scripting
Cross-site scripting XSS vulnerability in Ultimate PHP Board UPB 2.2.2, 2.2.1, and earlier 2.x versions allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header...
CVE-2008-6727: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Ultimate PHP Board UPB 2.2.2, 2.2.1, and earlier 2.x versions allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header...
php5 characteristics of the vulnerability-vulnerability warning-the black bar safety net
Use is PHP5,is because of the SERVER variables are not affected by the'quotes of the limit,even on a escape Vulnerabilities in User-Agent Second:the insert into a plurality of data insertion Hereinafter, the structure of the place is insert INTO $dbprefixsessions...
CLAN TIGER CMS--(module custompage.php) BLIND SQL INJECTION-->
!/usr/bin/perl ------------------------------------------------- module custompage.php BLIND SQL INJECTION ------------------------------------------------- CMS INFORMATION: --WEB: http://www.clantiger.com --DOWNLOAD: http://www.clantiger.com/download-clan-cms --DEMO: http://www.demo.clantiger.co...
FTPDMIN 0.96 - Arbitrary File Disclosure
FTPDMIN 0.96 - Arbitrary File Disclosure !/usr/bin/perl ftpdmin 0.96 Arbitrary File Disclosure Exploit Vulnerability Disclosure by 1 Slach or 2 Slach Tested on Win XP SP2 but it work in other box environment Abouts Exploit : first thing after we exec the application it make our box a simple ftp...
Mandriva Update for sarg MDVSA-2008:079 (sarg)
Check for the Version of sarg OpenVAS Vulnerability Test Mandriva Update for sarg MDVSA-2008:079 sarg Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
Cross site scripting
Cross-site scripting XSS vulnerability in Opencosmo VisualSentinel 0.7 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header $SERVER 'HTTPUSERAGENT', which is not properly handled when displaying log files...
CVE-2008-6645
Opencosmo VisualSentinel 0.7 contains an XSS vulnerability when processing the User-Agent header ($_SERVER['HTTP_USER_AGENT']), which is displayed in log files. This could allow injection of arbitrary script/HTML. The NVD reports CVSSv2 base score 4.3 (MEDIUM). No remediation details are provided...
CVE-2008-6645
Cross-site scripting XSS vulnerability in Opencosmo VisualSentinel 0.7 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header $SERVER 'HTTPUSERAGENT', which is not properly handled when displaying log files...
CVE-2008-6645: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Opencosmo VisualSentinel 0.7 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header $SERVER 'HTTPUSERAGENT', which is not properly handled when displaying log files...
Talk about browser sniffing and feature detection-vulnerability warning-the black bar safety net
| Talk about browser sniffing and feature detection --- Browser sniffing The first tips is to analyze the User Agent to obtain, for example, jQuery1. 3. 1 of the core. js: // Use of jQuery. browser is deprecated. // It's included for backwards compatibility and plugins, // although they should wo...
PHPizabi v0.848b C1 HFP1-3 Remote Command Execution Exploit
No description provided by source. !/usr/bin/php ?php / Found this after getting my inet back and noticing this http://www.milw0rm.com/exploits/6085 . The only problem with the remote command execution there is that it actually requires registerglobals = on. I saw the GLOBAL keyword, and actually...
PHPizabi 0.848b C1 HFP1-3 - Remote Command Execution
PHPizabi 0.848b C1 HFP1-3 - Remote Command Execution !/usr/bin/php ?php / Found this after getting my inet back and noticing this http://www.milw0rm.com/exploits/6085 . The only problem with the remote command execution there is that it actually requires registerglobals = on. I saw the GLOBAL...