CVE-2008-6840

V-Webmail 1.6.4 is vulnerable to multiple PHP remote file inclusion (RFI) via untrusted URLs assigned to CONFIG[pear_dir] and CONFIG[includes] in various includes/*.php files (and related files in includes/pear/). The root cause is unsanitized or unvalidated parameters that allow attackers to sup...

CVE-2008-6840

Multiple PHP remote file inclusion vulnerabilities in V-webmail 1.6.4 allow remote attackers to execute arbitrary PHP code via a URL in the 1 CONFIGpeardir parameter to a Mail/RFC822.php, b Net/Socket.php, c XML/Parser.php, d XML/Tree.php, e Mail/mimeDecode.php, f Console/Getopt.php, g System.php...

System V Derived /bin/login Extraneous Arguments Buffer Overflow

This exploit connects to a system's modem over dialup and exploits a buffer overflow vulnerability in it's System V derived /bin/login. The vulnerability is triggered by providing a large number of arguments. This module requires Metasploit: https://metasploit.com/download Current source:...

Splog <= 1.2 Beta Multiple Remote SQL Injection Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ----------------------------------...

Small Pirates v-2.1 (XSS/SQL) Multiple Remote Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ------------------...

Small Pirate v-2.1 (XSS/SQL) Multiple Remote Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ----------------------------------...

212Cafe WebBoard 2.90 Beta - Remote File Disclosure

212Cafe WebBoard 2.90 Beta - Remote File Disclosure Webboard = v.2.90 beta Remote File Disclosure Vulnerability ============================================================= Author: MrDoug Email: mrdoug13 at gmail dot com Greetz to all my friends...

small pirate 2.1 - Cross-Site Scripting SQL Injection

small pirate 2.1 - Cross-Site Scripting SQL Injection || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

MULTIPLE REMOTE VULNERABILITIES --Small Pirates v-2.1-->

---------------------------------------------------------- MULTIPLE REMOTE VULNERABILITIES --Small Pirates v-2.1-- ---------------------------------------------------------- CMS INFORMATION: --WEB: http://spirate.net/foro/ --DOWNLOAD: http://spirate.net/foro/ --DEMO:...

Small Pirate v-2.1 (XSS/SQL) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ Small Pirate v-2.1 XSS/SQL Multiple Remote Vulnerabilities ============================================================...

small pirate 2.1 - Cross-Site Scripting / SQL Injection

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | MULTIPLE...

212Cafe WebBoard 2.90 Beta - Remote File Disclosure

Webboard = v.2.90 beta Remote File Disclosure Vulnerability ============================================================= Author: MrDoug Email: mrdoug13 at gmail dot com Greetz to all my friends ============================================================= There are 3 vulnerable calls to fopen in...

织梦(DedeCms) V 5.3 任意变量覆盖漏洞

看核心文件include/common.inc.php中的代码 //检查和注册外部提交的变量 foreach$REQUEST as $k=$v if strlen$k0 && eregi'^|cfg|GLOBALS',$k && !isset$COOKIE$k //程序员逻辑混乱了？ exit'Request var not allow!'; 这个地方可以通过提交COOKIE变量绕过cfg等关键字的过滤 接着是注册变量的代码 foreachArray'GET','POST','COOKIE' as $request foreach$$request as $k = $v $$k =...

COWON America jetCast 2.0.4.1109 (.mp3) Local Overflow Exploit

Exploit for unknown platform in category local exploits ============================================================== COWON America jetCast 2.0.4.1109 .mp3 Local Overflow Exploit ============================================================== ?php / COWON America jetCast 2.0.4.1109 .mp3 local hea...

MULTIPLE SQL INJECTION VULNERABILITIES --Shutter v-0.1.1-->

------------------------------------------------------------- MULTIPLE SQL INJECTION VULNERABILITIES --Shutter v-0.1.1-- ------------------------------------------------------------- CMS INFORMATION: --WEB: http://shutter.tenfourzero.net/ --DOWNLOAD: http://shutter.tenfourzero.net/ --DEMO:...

beLive v.0.2.3 (arch.php arch) Local File Inclusion Vulnerability

No description provided by source. Author: Kacper Email: [email protected] HomePage: http://devilteam.pl/ --------------- Script: beLive version: v.0.2.3 Vuln: http://page.pl/belive/arch.php?arch=../../../../../../../../etc/passwd%00 sorry ze tak malo napisane ale nie bylo czasu, wiecej na...

beLive v.0.2.3 (arch.php arch) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= beLive v.0.2.3 arch.php arch Local File Inclusion Vulnerability ================================================================= Author: Kacper --------------- Script: beLi...

AIX 530009 : U824790

The remote host is missing AIX PTF U824790 which is related to the security of the package devices.vdevice.IBM.v-scsi.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Absolute Form Processor XE-V 1.5 Password Changer

Absolute Form Processor XE-V 1.5 Remote Change Pasword Home:http://www.xigla.com E-mail : Username : Password : input type="password" name="pwd" size="40" value...

Absolute Form Processor XE-V 1.5 - Remote Change Password

Absolute Form Processor XE-V 1.5 Remote Change Pasword Home:http://www.xigla.com E-mail : Username : Password : td wid...