CVE-2007-3588: Undefined Security Weakness

SQL injection vulnerability in reply.php in VBZooM 1.12 allows remote attackers to execute arbitrary SQL commands via the UserID parameter to sub-join.php. NOTE: this may be the same as CVE-2006-3691.4...

vbzoom-sql.txt

Discovered By: Hasadya Raed Contact : [email protected] Israel --------------------------- Script : VBZooM V1.12 VBZooM V1.12 "reply.php" SQL Injection Dork : POWERED BY VBZooM V1.12 --------------------------- B.File : reply.php --------------------------- Exploit :...

CVE-2007-1606: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in w-Agora Web-Agora allow remote attackers to inject arbitrary web script or HTML via 1 the showuser parameter to profile.php, the 2 searchforum or 3 searchuser parameter to search.php, or 4 the userid parameter to changepassword.php...

IBM DB2 < 9 Fix Pack 2 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 running on the remote host allows unsafe access to several setuid-root binaries. A local attacker can exploit this to crash the affected database server or possibly even gain root-level access. In addition, the fenced userid may be able to...

CVE-2007-0575: Undefined Security Weakness

Multiple SQL injection vulnerabilities in the administrative login page admin/login.asp in ASPCode.net AdMentor allow remote attackers to execute arbitrary SQL commands via the 1 Userid and 2 Password fields...

Woltlab Burning Board &lt;= 1.0.2, 2.3.6 search.php SQL Injection Exploit 3

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use HTTP::Response; $| = 1; print " Woltlab Burning Board 2.3.6 = / Lite Exploit Coded by 666 http://blueshisha.mutebox.net Bug by trew \n"; if$ARGV 0 print "x Usage: wbbsploit.pl Target Userid Searchstring\n"; exit; print "...

IBM DB2 < 8.1 Fix Pack 14 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 running on the remote host may crash when processing specially crafted SQLJRA packets because it attempts to dereference a NULL pointer in the sqledb2raasrecvrequest function. A remote attacker can send such packets without authentication to...

CVE-2002-2219: Undefined Security Weakness

chetcpasswd.cgi in Pedro Lineu Orso chetcpasswd before 2.1 allows remote attackers to read the last line of the shadow file via a long user userid field...

CVE-2006-6007: Undefined Security Weakness

saveprofile.asp in WebEvents Online Event Registration Template 2.0 and earlier allows remote attackers to change the profiles, passwords, and other information for arbitrary users via a modified UserID parameter...

Online Event Registration 2.0 - save_profile.asp Pass Change

Online Event Registration 2.0 - saveprofile.asp Pass Change User Name Email Phone Fax Password = ID Next Click "Profile" ajann,Turkey ... Im Not Hacker! -- milw0rm.com 2006-11-13...

CVE-2006-4782: Undefined Security Weakness

src/index.php in WebSPELL 4.01.01 and earlier, when registerglobals is enabled, allows remote attackers to bypass authentication and gain sensitive information stored in the database via a modified userID parameter in a write action to admin/database.php...

CVE-2006-4634

Cross-site scripting XSS vulnerability in index.php in VBZooM allows remote attackers to inject arbitrary web script or HTML via the UserID parameter, a different vector than CVE-2006-1133 and CVE-2005-2441...

CVE-2006-4634: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in VBZooM allows remote attackers to inject arbitrary web script or HTML via the UserID parameter, a different vector than CVE-2006-1133 and CVE-2005-2441...

XXS in Powered by vbzoom

vbzoom ==== index.php info: file:index.php thank to www.lezr.com/vb google ====== powered by vbzoom inurl:index.php?UserID= Exp: http://traget/path/index.php?UserID="scriptalert1;/script =================================== by Crackman...

publically available usernames are a security risk

The login username of users is revealed all over the place in URLs that link to user profile, or user's list of assigned open bugs etc. This seems to be a big security risk, because you have given away half of the user identification to strangers. Anybody can look up a user in the issue tracker a...

publically available usernames are a security risk

The login username of users is revealed all over the place in URLs that link to user profile, or user's list of assigned open bugs etc. This seems to be a big security risk, because you have given away half of the user identification to strangers. Anybody can look up a user in the issue tracker a...

publically available usernames are a security risk

The login username of users is revealed all over the place in URLs that link to user profile, or user's list of assigned open bugs etc. This seems to be a big security risk, because you have given away half of the user identification to strangers. Anybody can look up a user in the issue tracker a...

CVE-2006-3971

Cross-site scripting XSS vulnerability in visitor/livesupport/chat.php in Scott Weedon Ajax Chat, possibly 0.1, allows remote attackers to inject arbitrary web script or HTML via the userid parameter...

CVE-2006-3971: Undefined Security Weakness

Cross-site scripting XSS vulnerability in visitor/livesupport/chat.php in Scott Weedon Ajax Chat, possibly 0.1, allows remote attackers to inject arbitrary web script or HTML via the userid parameter...

CVE-2006-3691: Undefined Security Weakness

Multiple SQL injection vulnerabilities in VBZooM 1.11 and earlier allow remote attackers to execute arbitrary SQL commands via the UserID parameter to 1 ignore-pm.php, 2 sendmail.php, 3 reply.php or 4 sub-join.php...