1065 matches found
Woltlab Burningboard Addon Kleinanzeigenmarkt SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w Woltlab Burningboard Addon Kleinanzeigenmarkt SQL Injection Exploit Exploit by fred777 full np stuff 3 Greez to all teh l33t sh1t like : Core.am Back2hack.cc Free-hack.com fred777.de Usage: exploit.pl page userid Example: perl exploit.pl...
FileBound 6.2 Privilege Escalation Vulnerability
No description provided by source. Sense of Security - Security Advisory - SOS-12-010 Release Date. 10-Oct-2012 Last Update. - Vendor Notification Date. 14-Aug-2012 Product. FileBound On-Site Platform. Windows Affected versions. All versions prior to 6.2 Severity Rating. High Impact. Privilege...
Kerio MailServer 5.6.3 - Remote Buffer Overflow Exploit
No description provided by source. / Remote Buffer Overflow Exploit for Kerio MailServer 5.6.3 / / ========================================= / / By B-r00t / / / / In response to the Kerio Mailserver vulnerabilities / / discovered by David F.Madrid. / / / / Although this exploit requires valid...
PHP Gift Registry 1.5.5 - SQL Injection
No description provided by source. Exploit Title: PHP Gift Registry 1.5.5 SQL Injection Date: 02/22/12 Author: G13 Software Link: https://sourceforge.net/projects/phpgiftreg/ Version: 1.5.5 Category: webapps php Vulnerability The userid parameter in the users.php file is vulnerable to SQL...
ASPNuke <= 0.80 (article.asp) SQL Injection Exploit
No description provided by source. !/usr/bin/perl T r a p - S e t U n d e r g r o u n d H a c k i n g T e a m EXPLOIT FOR: ASPNuke ASP Portal Expl0it By: [email protected] Discovered By: Trap-Set Underground Hacking Team oilKarchacK GR33tz T0 == Alphaprogrammer -- oilKarchack -- theCephaleX --...
Easy File Management Web Server Stack Buffer Overflow
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking Reliable memory corruption include...
webSPELL <= 4.01.01 Database Backup Download Vulnerability
No description provided by source. WebSPELL = 4.01.01 Accessible Database Backup Download Exploit Discovered by: Trex Visit: www.SecuritySector.org / www.UnderGround.ag Exploit: http://SITE/PATH/admin/database.php?action=write&userID=1 Solution: http://cms.webspell.org/index.php?site=files&file=1...
ISC INN 2.x Command-Line Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/2620/info The innfeed utility, part of ISC InterNetNews, has an exploitable buffer overflow in its command-line parser. Specifically, innfeed will overflow if an overly long -c option is passed to it. A local attacker in...
phpArcadeScript <= 3.0RC2 (userid) SQL Injection Vulnerability
No description provided by source. phpArcadeScript all version Remote Sql Injection Exploit AUTHOR:SoSo H H Iraqi-Cracker Script Site: http://www.phparcadescript.com/ Price:$30.00 Tested on: Versions:1.0,2.0,3.0 RC1 &RC2 Dorks:Powered by phpArcadeScript v1.0 Powered by phpArcadeScript v2.0 Powere...
OvBB 0.x profile.php userid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/15566/info OvBB is prone to multiple SQL injection vulnerabilities. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit...
Stack overflow
Stack-based buffer overflow in Easy File Sharing EFS Web Server 6.8 allows remote attackers to execute arbitrary code via a long string in a cookie UserID parameter to vfolder.ghp...
CVE-2014-3791
CVE-2014-3791 affects Easy File Sharing Web Server (EFS) Web Server, with a stack-based buffer overflow in the SESSIONID cookie handling (UserID) in vfolder.ghp, enabling remote code execution. The Red Hat entry reiterates the same description for EFS Web Server 6.8. Exploitation details are not ...
CVE-2014-3791
Stack-based buffer overflow in Easy File Sharing EFS Web Server 6.8 allows remote attackers to execute arbitrary code via a long string in a cookie UserID parameter to vfolder.ghp...
PT-2014-5503
Name of the Vulnerable Software and Affected Versions Easy File Sharing EFS Web Server version 6.8 Description The issue is a stack-based buffer overflow that allows remote attackers to execute arbitrary code. This is achieved by sending a long string in the UserID parameter to the "vfolder.ghp"...
CVE-2014-3791: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in Easy File Sharing EFS Web Server 6.8 allows remote attackers to execute arbitrary code via a long string in a cookie UserID parameter to vfolder.ghp...
TCCMS SQL注入 一个文件多处注入之二
简要描述： 之前看了厂商的回复说的是文章列表那个页面有问题，这次我提交的是图片列表页面存在注入 详细说明： app\controller\picture.class.php 代码如下 public function all $Obj = M$this-objName; $categoryObj = M"category"; $Obj-pageSize = 20; $where = "1=1"; $key = $POST'key'; $cid = $GET'cid'; if $key != "" $where .= " and id = '" . $key . "' or title li...
Sql injection
Multiple SQL injection vulnerabilities in Classifieds Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to demo/classifieds/product.asp, or 2 UserID or 3 Password field to demo/classifieds/admin.asp...
CVE-2013-7216
Multiple SQL injection vulnerabilities in Classifieds Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to demo/classifieds/product.asp, or 2 UserID or 3 Password field to demo/classifieds/admin.asp...
PT-2013-6296
Name of the Vulnerable Software and Affected Versions Classifieds Creator version 2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the ID parameter to "demo/classifieds/product.asp", or the UserID or Password field to...
PT-2013-6292
Name of the Vulnerable Software and Affected Versions Dynamic Biz Website Builder QuickWeb affected versions not specified Description The issue concerns SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands. This can be achieved through the id parameter to t...