kwsphp-sql.txt

KwsPHP Module jeuxflash Remote SQL Injection Vulnerability AUTHOR : H-T Team HouSSamix ToXiC350 HOME : http://no-hack.fr & http://no-hack.net Site: http://koogar.alorys-hebergement.com/kwsphp/index.php?mod=downloads&filedl=30&before=8&pdl=1 Dork : inurl:index.php?mod=jeuxflash EXPLOITS :...

Woltlab Burning Board 2.3.5 - 'links.php' SQL Injection

!/usr/bin/perl use IO::Socket; print q Woltlab Burning Board 2.3.4 newProto="tcp", PeerAddr="$webpage", PeerPort="80" || die "+ Can't connect to Server\n"; print "+ Exploiting....\n"; print $sock "GET $wbbdir HTTP/1.1\n"; print $sock "Accept: /\n"; print $sock "User-Agent: Hacker\n"; print $sock...

Arki-DB 1.0 (catid) Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ======================================================== Arki-DB 1.0 catid Remote SQL Injection Vulnerabilities ======================================================== ArkiDB SQL Injection's ArkiDB catid Ramote SQL Injection's...

yabbSE.txt

Summary: YaBB SE is a PHP/MySQL port of the popular forum software YaBB yet another bulletin board. An SQL Injection vulnerability in the product allows a remote attacker to insert malicious SQL statements. Details: Vulnerable Systems: Yabb Se version 1.5.4 tested, 1.5.3tested maybe others Immune...

Microsoft Virtual Machine incorrectly parses the domain portion of URLs containing a colon

Overview Some versions of the Microsoft virtual machine Microsoft VM contain a flaw that could allow untrusted Java applets from an attacker's site to be run instead of the trusted applet from the intended site. Description The Microsoft virtual machine Microsoft VM enables Java programs to run o...

ansi outer join syntax in Oracle allows access to any data

Hi all I thought this list may be interested in this issue, apologies if its known here already. Oracle 9i includes the new ANSI outer join syntax. Oracle still supports the old syntax but in the new syntax there is a serious security issue that allows any user to view any data. here is an exampl...

security hole in os groupware suite PHProjekt

Overview PHProjekt is an open source groupware suite written in PHP4 with mysql/postgres/oracle/informix/ms-sql support: www.PHProjekt.com The security hole concernes the several modules. Details By modifying the ID number in links an user can view, moduify or delete data of other users randomly...

Microsoft Internet Explorer 4/5/5.5/5.0.1 - external.NavigateAndFind() Cross-Frame

Microsoft Internet Explorer 4.0 for WfW/Windows 3.1/Windows 95/Windows NT 3/Windows NT 4,Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4,Internet Explorer 5.5,Internet Explorer 5.0.1,Internet Explorer for Unix 5.0 external.NavigateAndFind Cross-Frame Vulnerability source...

ffingerd.txt

Date: Fri, 23 Apr 1999 19:26:13 +0300 From: Eilon Gishri To: [email protected] Subject: Ffingerd privacy issues Hi, I found a couple of bugs in ffingerd 1.19 which are related to privacy. Here goes: The permission on root's home directory are now 700 /home/root. ----- aristo/cc/eilonfinger...