CVE-2007-3201

Visual truncation vulnerability in Windows Privacy Tray WinPT 1.2.0 allows user-assisted remote attackers to install a key listed under the wrong user ID, and possibly cause the user to encrypt a victim's correspondence with this attacker-supplied key, via a key ID composed of the attacker's user...

Design/Logic Flaw

Visual truncation vulnerability in Windows Privacy Tray WinPT 1.2.0 allows user-assisted remote attackers to install a key listed under the wrong user ID, and possibly cause the user to encrypt a victim's correspondence with this attacker-supplied key, via a key ID composed of the attacker's user...

CVE-2007-3201

Visual truncation vulnerability in Windows Privacy Tray WinPT 1.2.0 allows user-assisted remote attackers to install a key listed under the wrong user ID, and possibly cause the user to encrypt a victim's correspondence with this attacker-supplied key, via a key ID composed of the attacker's user...

WinPT User ID Spoofing Vulnerability

WinPT User ID Spoofing Vulnerability Impact: Impersonation Where: Remote Status: Unpatched Product: Windows Privacy Tray WinPT http://wald.intevation.org/projects/winpt Visual representation of keys in WinPT 1.2.0 is susceptible to a user ID spoofing attack using keys with large amount of data in...

WindowsPT 1.2 - User ID Key Spoofing

source: https://www.securityfocus.com/bid/24412/info WinPT Windows Privacy Tray is prone to a key-spoofing vulnerability because it fails to properly display user-supplied key data. An attacker can exploit this issue to trick victim users into encrypting potentially sensitive information with a...

PBLang <= 4.67.16.a login.php lang Parameter Traversal Local File Inclusion

Binary data 4078.prm...

PBLang login.php lang Parameter Local File Inclusion

The remote host is running PBLang, a bulletin board system that uses flat files and is written in PHP. The version of PBLang installed on the remote host fails to sanitize user input to the 'lang' parameter before using it to include PHP code in 'login.php'. Regardless of PHP's 'registerglobals'...

PNPHPBB2 1.2 - index.php SQL Injection

PNPHPBB2 1.2 - index.php SQL Injection C:\usr\php\php.exe c:\php.php Content-type: text/html X-Powered-By: PHP/4.3.9 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Usage: php c:\php.php host path OPTIONS host: target server ip/hostname path: PNphpBB2 path Options:...

wp213-ajax.txt

?php errorreportingEALL; $normdelay = 0; /////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////////////////////////////// // WordPress 2.1.3 "admin-ajax.php" sql injection blind fishing exploit // written by Janek Vind "waraxe" //...

psipuss 1.0 - 'editusers.php' Remote Change Admin Password

?php / '/ -.- --------------------oOO------OOo------------------- | Y! Underground Group | | www.dj7xpl.2600.ir | | Dj7xpl @ 2600.ir | ------------------------------------------------------ ! Portal : psipuss version 1.0 ! Vendor : http://www.psi-labs.com/photosimagesuploadscript.html ! Author :...

Papoo 3.02 (kontakt menuid) Remote SQL Injection Exploit

No description provided by source. ? / Autor: Kacper Contact: [email protected] Homepage: http://www.rahim.webd.pl/ Irc: irc.milw0rm.com:6667 devilteam Pozdro dla wszystkich z kanalu IRC oraz forum DEVIL TEAM. //dork: \"Help Contact Imprint Sitemap\" | \"powered by papoo\" | \"powered...

PortailPhp 2.0 (idnews) Remote SQL Injection Exploit

No description provided by source. use LWP::Simple; print " Exploit Coded c by xoron Portail PHP v20 index.php Remote SQL Injection Exploit Languages: Turkish, English Plz Select Language:"; $dil = stdin; %eng = "site" = "Enter The Victim Without http://:", "path" = "Plz Select Path:", "id" = "Pl...

PortailPhp 2.0 (idnews) Remote SQL Injection Exploit

No description provided by source. use LWP::Simple; print " Exploit Coded c by xoron Portail PHP v20 index.php Remote SQL Injection Exploit Languages: Turkish, English Plz Select Language:"; $dil = stdin; %eng = "site" = "Enter The Victim Without http://:", "path" = "Plz Select Path:", "id" = "Pl...

revenge_proftpd_ctrls_24.pl.txt

!/usr/bin/perl -w $Id: revengeproftpdctrls24.pl, v1.0 2007/02/18 19:24:22 revenge Exp $ ProFTPD v1.3.0/1.3.0a Controls Buffer Overflow Exploit Old style school sploit against gcc 3.x and linux kernel 2.4 Original Advisory : http://www.coresecurity.com/?action=item&id=1594 Exploitation condition -...

webSPELL 4.01.02 (showonly) Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== webSPELL 4.01.02 showonly Remote Blind SQL Injection Exploit ============================================================== !/usr/bin/perl use LWP::UserAgent; use Getopt::Long;...

PT-2007-2302 · Local · Local Calendar System

Name of the Vulnerable Software and Affected Versions: local Calendar System version 1.1 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the TEMPLATE DIR parameter to files such as showinvoices.php, showmonth.php, showevents.php, retrieveinvoice.php,...

CVE-2007-0575

Multiple SQL injection vulnerabilities in the administrative login page admin/login.asp in ASPCode.net AdMentor allow remote attackers to execute arbitrary SQL commands via the 1 Userid and 2 Password fields...

Oreon lang/index.php file Parameter Remote File Inclusion

The remote host is running Oreon, a web-based network supervision program based on Nagios. The installation of Oreon on the remote host fails to sanitize input to the 'file' parameter of the 'lang/index.php' script before using it to include PHP code. Regardless of PHP's 'registerglobals' setting...

Jinzora Multiple Script include_path Parameter Remote File Inclusion

The remote host is running Jinzora, a web-based media streaming and management system written in PHP. The installation of Jinzora on the remote host fails to sanitize input to the 'includepath' parameter of several scripts before using it in the 'jzBackend.php' script to include PHP code. Provide...

Acronym Mod v0.9.5 Remote SQL Injection Vulnerability

Acronym Mod v0.9.5 Remote SQL Injection Vulnerability Download: http://www.codemonkeyx.net Found By: the master exploit: http://Target/Path/admin/adminacronyms.php?mode=edit&id=-120UNION20SELECT20null,userpassword,null20FROM20phpbbusers20where20userid=2&sid=AdminHash Greetz: str0ke , Dr Max Virus...