mBlogger v1.0.04 (viewpost.php) SQL Injection Exploit

Exploit for php platform in category web applications ===================================================== mBlogger v1.0.04 viewpost.php SQL Injection Exploit ===================================================== !/usr/bin/python Exploit Title: mBlogger v1.0.04 viewpost.php SQL Injection Exploit...

Multiple Vulnerabilities in the IOS FTP Server

The Cisco IOS FTP Server feature contains multiple vulnerabilities that can result in a denial of service DoS condition, improper verification of user credentials, and the ability to retrieve or write any file from the device filesystem, including the device's saved configuration. This...

rapidCMS 2.0 - Authentication Bypass

Exploit Title: rapidCMS V2 Authentication Bypass Date: 18/07/2010 Author: Mahjong Software Link: www.rapidcms.de Version: V2 Tested on: Linux Found by: Mahjong E-Mail: [email protected] Greetings: Puddy, Ancolon ---------------------------------------------------------- Exploit Authentication Bypas...

NetWorld Alliance SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================= NetWorld Alliance SQL Injection Vulnerability ============================================= Exploit Title: NetWorld Alliance SQL InJection Date: 27/06/2010 Author: dev!l ghost Email: awsatlivedotit...

Cisco ASA Software HTTP Response Splitting Vulnerability

Cisco ASA Software versions prior to 8.12 contain a vulnerability that could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability exists due to improper handling of characters within URLs. An unauthenticated, remote attacker could exploit this...

Karkia SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0...

Live CMS - SQL Injection

Live CMS - SQL Injection / - Live CMS SQL Injection Vulnerability - ---Date : 2010-06-17 ---Author : ahwak2000 ---Email : z.u5athotmail.com - Script Info - ---Home : http://live-space.ru ---Demo : http://demo.live-space.ru/index.php - Vulnerability -...

CVE-2010-2291

Unspecified vulnerability in the web interface in snom VoIP Phone firmware 8 before 8.2.35 allows remote attackers to bypass intended restrictions and modify user credentials via unknown vectors. NOTE: some of these details are obtained from third party information...

Information disclosure

Unspecified vulnerability in the web interface in snom VoIP Phone firmware 8 before 8.2.35 allows remote attackers to bypass intended restrictions and modify user credentials via unknown vectors. NOTE: some of these details are obtained from third party information...

CVE-2010-2291

CVE-2010-2291 affects snom VoIP Phone firmware 8.x up to 8.2.34, where the web interface contains an unspecified vulnerability that allows remote attackers to bypass restrictions and modify user credentials. The public descriptions note the vectors are unknown, with an attacker able to alter cred...

CVE-2010-2291

Unspecified vulnerability in the web interface in snom VoIP Phone firmware 8 before 8.2.35 allows remote attackers to bypass intended restrictions and modify user credentials via unknown vectors. NOTE: some of these details are obtained from third party information...

Microsoft Office Excel SxView Record Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must open a malicious document. The specific flaw exists in the parsing of SXVIEW records in an...

Cyberoam SSL VPN Client - Plain-text Storage of Username and Password

Cyberoam SSL VPN Client - Plain-text Storage of Username and Password Vulnerability Summary: Product: Cyberoam SSL VPN Client v1.0 Vendor: eLiteCore Website: http://www.cyberoam.com/ Platform: Windows Vulnerability Classification: Insecure Storage of User Credentials Issue Fixed in Version:...

ConPresso 4.0.7 - SQL Injection

ConPresso 4.0.7 SQL Injection Vulnerability Author : Gamoscu Homepage : http://www.1923turk.com Blog : http://gamoscu.wordpress.com/ Script : ConPresso 4.0.7 Download : http://www.conpresso.de/conpresso/dedownloads/index.php?rubric=Download Vulnerable File firma.php?id= SQL XpL...

Abyss Web Server X1 - Cross-Site Request Forgery

Abyss Web Server X1 - Cross-Site Request Forgery http://osvdb.org/show/osvdb/64693 http://cross-site-scripting.blogspot.com/2010/05/abyss-web-server-x1-xsrf.html : Abyss Web Server X1 XSRF A cross-site request forgery vunlerability in the Abyss Web Server X1 management console can be exploited to...

Abyss Web Server X1 - Cross-Site Request Forgery

http://osvdb.org/show/osvdb/64693 http://cross-site-scripting.blogspot.com/2010/05/abyss-web-server-x1-xsrf.html : Abyss Web Server X1 XSRF A cross-site request forgery vunlerability in the Abyss Web Server X1 management console can be exploited to change both the username and password of the...

WeBProdZ CMS - SQL Injection

| \ | | | | | |/ / | | | | | // \ \ / / | | | | | | |/ | ' \ | |\ \ /\ V / | | || | || | | | | | | \| / /||,|||/|| || | | | || | | | | |/' || || | | |/ / | ' \ | /| |\ | | | / | | | | | | | \ |/ /./ / /|,|| || || / / $ Exploit Title : WeBProdZ CMS SQL Injection Vulnerability $ Date :...

PostNuke 0.764 Module modload SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================= PostNuke 0.764 Module modload SQL Injection Vulnerability ========================================================= PostNuke 0.764 Module modload SQL Injection Vulnerability Author :...

Joomla! Component JP Jobs 1.2.0 - 'id' SQL Injection

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- Joomla...

Nagios statuswml.cgi Command Injection

Added: 04/13/2010 CVE: CVE-2009-2288 BID: 35464 OSVDB: 55281 Background Nagios is a network host and service monitoring and management system. Problem The Nagios statuswml.cgi script passes unsanitized data to the ping and traceroute commands, resulting in shell command execution via...