Lucene search
+L

2457 matches found

Exploit DB
Exploit DB
•added 2007/05/26 12:00 a.m.•44 views

Mazens PHP Chat V3 (basepath) - Remote File Inclusion

Mazen's PHP Chat V3.0.0 Beta1 Remote file inclusion Download script : http://www.scriptbrasil.com.br/script/php/batepapo/mazenphpopenchmt221.tar.gz Thanks Str0ke :D Exploit : http://victim.com/chatpath/include/pear/ITX.php?basepath=shell.txt?...

6.8CVSS5.8AI score0.64028EPSS
SaveExploits2
Exploit DB
Exploit DB
•added 2007/03/23 12:00 a.m.•34 views

RoseOnlineCMS 3 beta2 - 'op' Local File Inclusion

!/usr/bin/perl RoseOnlineCMS v3 B1opLocal File Inclusion Exploit P.Script: http://heanet.dl.sourceforge.net/sourceforge/rosecms/RoseOnlineCMSv3B1.rar V.Code: $op = !isset$GET'op' ? home : $GET'op' ; if isfile"modules/".$op.".php" include"modules/".$op.".php"; use IO::Socket; use LWP::Simple; ripp...

7.5CVSS5.8AI score0.0295EPSS
SaveExploits2
Fedora
Fedora
•added 2007/02/26 10:03 p.m.•41 views

[SECURITY] Fedora Core 5 Update: nss-3.11.5-0.5.0.fc5

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

6.8CVSS1.4AI score0.50611EPSS
SaveExploits0
NVD
NVD
•added 2007/02/12 11:28 a.m.•24 views

CVE-2006-6995

mycontacts.php in V3 Chat allows remote authenticated users to gain privileges as other users via a modified membername parameter...

6CVSS6.5AI score0.01615EPSS
SaveExploits1References3
CVE
CVE
•added 2007/02/12 11:00 a.m.•74 views

CVE-2006-6995

The CVE-2006-6995 issue affects V3 Chat’s mycontacts.php where an authenticated user can alter the membername parameter to gain privileges of another user. The vulnerability is described as a privilege escalation via parameter tampering, enabling access to other user accounts. Sources cited in th...

6CVSS6.5AI score0.01615EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2007/02/12 11:00 a.m.•38 views

CVE-2006-6995

mycontacts.php in V3 Chat allows remote authenticated users to gain privileges as other users via a modified membername parameter...

6.5AI score0.01615EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/02/12 12:00 a.m.•5 views

CVE-2006-6995: Undefined Security Weakness

mycontacts.php in V3 Chat allows remote authenticated users to gain privileges as other users via a modified membername parameter...

6CVSS5.8AI score0.01615EPSS
SaveExploits1References1
Packet Storm
Packet Storm
•added 2007/01/27 12:00 a.m.•30 views

makit-sql.txt

Title : makit news/blog poster =v3newspage.asp Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.makit.net $$ : Free SQL--------------------------------------------------------- http://target/path//newspage.asp?uid=SQL Example:...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2007/01/27 12:00 a.m.•43 views

aspnews3-sql.txt

Title : ASP NEWS = V3 newsdetail.asp Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.planetgraphic.de/ SQL--------------------------------------------------------- http://target/path//newsdetail.asp?id=SQL Example:...

7.4AI score
SaveExploits0
Prion
Prion
•added 2007/01/26 1:28 a.m.•26 views

Code injection

The Motorola MOTORAZR V3 phone allows remote attackers to cause a denial of service continual modal dialogs and UI unavailability by repeatedly trying to OBEX push a file over Bluetooth, as demonstrated by ussp-push...

3.3CVSS7.2AI score0.00683EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2007/01/26 1:28 a.m.•27 views

CVE-2007-0522

The Motorola MOTORAZR V3 phone allows remote attackers to cause a denial of service continual modal dialogs and UI unavailability by repeatedly trying to OBEX push a file over Bluetooth, as demonstrated by ussp-push...

3.3CVSS6.7AI score0.00683EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2007/01/26 1:00 a.m.•40 views

CVE-2007-0522

The Motorola MOTORAZR V3 phone allows remote attackers to cause a denial of service continual modal dialogs and UI unavailability by repeatedly trying to OBEX push a file over Bluetooth, as demonstrated by ussp-push...

6.7AI score0.00683EPSS
SaveExploits0References3
CVE
CVE
•added 2007/01/26 1:00 a.m.•60 views

CVE-2007-0522

CVE-2007-0522 affects the Motorola MOTORAZR V3 via a flaw in OBEX push over Bluetooth that can trigger repeated file transfers (ussp-push) and cause denial of service through continual modal dialogs and UI unavailability. Impact is UI blocking; CVSS metrics indicate low base score (3.3) with adja...

3.3CVSS6.7AI score0.00683EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/01/26 12:00 a.m.•4 views

CVE-2007-0522: Improper Input Validation

The Motorola MOTORAZR V3 phone allows remote attackers to cause a denial of service continual modal dialogs and UI unavailability by repeatedly trying to OBEX push a file over Bluetooth, as demonstrated by ussp-push...

3.3CVSS5.8AI score0.00683EPSS
SaveExploits0References2
seebug.org
seebug.org
•added 2007/01/25 12:00 a.m.•29 views

ASP NEWS <= v3 (news_detail.asp) Remote SQL Injection Vulnerability

No description provided by source. Title : ASP NEWS = V3 newsdetail.asp Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.planetgraphic.de/ SQL--------------------------------------------------------- http://target/path//newsdetail.asp?id=SQL Example:...

7.1AI score
SaveExploits0
zdt
zdt
•added 2007/01/24 12:00 a.m.•41 views

ASP NEWS <= v3 (news_detail.asp) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== ASP NEWS = v3 newsdetail.asp Remote SQL Injection Vulnerability =================================================================== Title : ASP NEWS = V3 newsdetail.asp...

7.1AI score
SaveExploits0
securityvulns
securityvulns
•added 2007/01/24 12:00 a.m.•73 views

ASP NEWS &lt;= V3 &#40;news_detail.asp&#41; Remote SQL Injection Vulnerability

Title : ASP NEWS = V3 newsdetail.asp Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.planetgraphic.de/ SQL--------------------------------------------------------- http://target/path//newsdetail.asp?id=SQL Example:...

1.6AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2007/01/17 12:00 a.m.•32 views

Fedora Core 5 : nss-3.11.3-0.5.fc5 (2006-979)

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

4CVSS7.3AI score0.0228EPSS
SaveExploits0References1
Packet Storm
Packet Storm
•added 2006/12/28 12:00 a.m.•33 views

luckybot3-rfi.txt

LuckyBot v3 Remote File Include Exploerd by: RedCasper Critical : Very DangerousFile inlusion Download : www.hostscripts.com Proofing: www.Example.com/Lucky/run.php?dir=SHELL?&file= www.Example.com/Lucky/classes/ircbot.class.php?dir=SHELL?&file= GreetZ: ISlamic Defenders Crew :BrokeN-ProXy my bes...

7.4AI score
SaveExploits0
securityvulns
securityvulns
•added 2006/12/26 12:00 a.m.•62 views

LuckyBot v3 Remote File Include

LuckyBot v3 Remote File Include Exploerd by: RedCasper Critical : Very DangerousFile inlusion Download : www.hostscripts.com Proofing: www.Example.com/Lucky/run.php?dir=SHELL?&file= www.Example.com/Lucky/classes/ircbot.class.php?dir=SHELL?&file= GreetZ: ISlamic Defenders Crew :BrokeN-ProXy my bes...

3.4AI score
SaveExploits0
Rows per page
Query Builder