Multiple CiscoWorks Wireless LAN LAN Solution Engine / Cisco User Registration Tool / Cisco Hosting Solution Engine security vulnerabilities

Crossite scripting, command line escape...

Crafty Syntax Image Gallery <= 3.1g Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or at your option any later version. This...

Crafty Syntax Image Gallery 3.1g - Remote Code Execution

Crafty Syntax Image Gallery 3.1g - Remote Code Execution !/usr/bin/perl This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or at your option any...

1 1 4 Forum 2 0 0 5 The official version of the vulnerability-vulnerability warning-the black bar safety net

Article author: withered Ling rose Information source: evil octal information security teamwww.eviloctal.com to Keywords: "ALL RIGHTS RESERVED design and production: Web 1 1 4" Vulnerability description: Site 1 1 4 Forum 2 0 0 5 version of the official /edituserdb. asp To submit data and cooikes...

MyBB 1.3 NewSQL Injection

MyBB New SQL Injection D3vil-0x1 Devil-00 Milw0rm ID :- http://www.milw0rm.com/auth.php?id=1320 The Inf.File :- misc.php Linez :- code $buddies = $mybb-user'buddylist'; $namesarray = explode",",$buddies; ifisarray$namesarray whilelist$key, $buddyid = each$namesarray $sql .= "$comma'$buddyid'"; ==...

CVE-2006-0888

index.php in Invision Power Board IPB 2.0.1, with Code Confirmation disabled, allows remote attackers to cause an unspecified denial of service by registering a large number of users...

Code injection

index.php in Invision Power Board IPB 2.0.1, with Code Confirmation disabled, allows remote attackers to cause an unspecified denial of service by registering a large number of users...

CVE-2006-0888

index.php in Invision Power Board IPB 2.0.1, with Code Confirmation disabled, allows remote attackers to cause an unspecified denial of service by registering a large number of users...

CVE-2006-0501

The CVE-2006-0501 entry describes a cross-site scripting (XSS) vulnerability in MyCO Guestbook 1.0, exploitable via the Name field during user registration. The underlying issue is lack of proper input sanitization/escaping in the registration flow, enabling remote attackers to inject arbitrary s...

CVE-2006-0501

Cross-site scripting XSS vulnerability in MyCO Guestbook 1.0 allows remote attackers to inject arbitrary web script or HTML via the Name field, when registering a user...

[SA18544] MyBB "Allow HTML in Signatures" Script Insertion Security Issue

TITLE: MyBB "Allow HTML in Signatures" Script Insertion Security Issue SECUNIA ADVISORY ID: SA18544 VERIFY ADVISORY: http://secunia.com/advisories/18544/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: MyBB formerly MyBulletinBoard 1.x...

Night cat article system Version 2.1.0 cross site & injection vulnerability-vulnerability warning-the black bar safety net

Articles have been published in thehack the x-Files2 0 0 6 in the first period Cross-site vulnerability: night cat article system code amount is not very large, then we will from the most basic to start it, open the registration page to register. php see the following code if $POSTaction ==...

From PHP Forum the vulnerability of the endoscope security management-vulnerability warning-the black bar safety net

From: ReJeCt‘s Blog Blue magic Forum is a PHP Forum in the country is widely used. Due to its user registration module in some code defect that can lead to a malicious attacker will be normal users to elevate to administrator. First let's look at an invasion of the examples. The invasion paradigm...

CVE-2005-4007

Multiple unspecified vulnerabilities in SAPID CMS before 1.2.3.03, related to newly registered users and possibly authorization checks, have unknown impact and attack vectors involving 1 mvc/controller/userrequestanalysis.inc.php and 2 usr/xml/ddc/authorization.xml...

CVE-2005-4007

Multiple unspecified vulnerabilities in SAPID CMS before 1.2.3.03, related to newly registered users and possibly authorization checks, have unknown impact and attack vectors involving 1 mvc/controller/userrequestanalysis.inc.php and 2 usr/xml/ddc/authorization.xml...

CVE-2005-4007

SAPID CMS prior to 1.2.3.03 contains multiple unspecified vulnerabilities related to newly registered users and possible authorization checks, affecting the files mvc/controller/user_request_analysis.inc.php and usr/xml/ddc/authorization.xml. The exact impact and exploit paths are not detailed in...

PT-2005-4743 · Sapid · Sapid Cms

Name of the Vulnerable Software and Affected Versions: SAPID CMS versions prior to 1.2.3.03 Description: The issue involves multiple unspecified vulnerabilities related to newly registered users and possibly authorization checks. These vulnerabilities have unknown impact and attack vectors,...

CVE-2003-1252

The CVE-2003-1252 entry covers a vulnerability in register.php of S8Forum 3.0 where remote attackers can trigger arbitrary PHP execution by creating a user whose name ends in .php and placing commands in the E-mail field. This creates a web-accessible .php file that can be invoked to run commands...

[Full-disclosure] HYSA-2005-009 Elite Forum 1.0.0.0 XSS Vulnerability

------------------------------------------------------ HYSA-2005-009 h4cky0u.org Advisory 009 ------------------------------------------------------ Date - Tue Nov 1 2005 TITLE: ====== Elite Forum 1.0.0.0 XSS Vulnerability SEVERITY: ========= Medium SOFTWARE: ========= Elite Forum 1.0.0.0 INFO:...

Net Portal Dynamic System <= 5.0 (register users) Denial of Service

Exploit for multiple platform in category dos / poc =================================================================== Net Portal Dynamic System = 5.0 register users Denial of Service =================================================================== !/usr/bin/perl Type|+ Register multiple user...