752 matches found
Hanso Player 1.4.0 - '.m3u' Denial of Service
=================================================== Hanso Player Version 1.4.0 .m3u Denial of Service Vulnerability =================================================== .....................X-SHADOW ; ThBa7 ; KloofQ8 ; LeGEnD ; abada ... .......................................Fuck ALL lamers...
Hanso Converter v 1.4.0 (.ogg) Buffer Overflow Vulnerability
Exploit for windows platform in category local exploits ============================================================ Hanso Converter v 1.4.0 .ogg Buffer Overflow Vulnerability ============================================================ || || | || o,7 || . o7 || 4||| ow, : / /...
[SECURITY] [DSA 1795-1] New ldns packages fix arbitrary code execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1795 [email protected] http://www.debian.org/security/ Devin Carraway May 07, 2009 http://www.debian.org/security/faq -...
Scout Portal Toolkit <= 1.4.0 (ParentId) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Scout Portal Toolkit = 1.4.0 ParentId Remote SQL Injection Exploit Discovered & Coded by JosS Contact: sys-projectathotmail.com Spanish Hackers Team / Sys - Project / EspSeC http://www.spanish-hackers.com rgod forever :D print " "; print " Scout...
CSRF through HTML message in squirrelmail
Cross-site request forgery CSRF vulnerability in compose.php in SquirrelMail 1.4.0 through 1.4.9a allows remote attackers to send e-mails from arbitrary users via certain data in the SRC attribute of an IMG element...
BirdBlog 1.4 - adminadmincore.php?msg Cross-Site Scripting
BirdBlog 1.4 - adminadmincore.php?msg Cross-Site Scripting source: https://www.securityfocus.com/bid/21184/info BirdBlog is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have...
BirdBlog 1.4 - '/admin/entries.php?month' Cross-Site Scripting
source: https://www.securityfocus.com/bid/21184/info BirdBlog is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an...
phpMyFamily <= 1.4.0 Admin Bypass SQL Injection
Exploit for unknown platform in category web applications =============================================== phpMyFamily = 1.4.0 Admin Bypass SQL Injection =============================================== Tested with version 1.2.5 /str0ke Login as admin without pass: Login: "' OR 'a'='a' AND...
PT-2004-3152 · Phpmyfaq · Phpmyfaq
Name of the Vulnerable Software and Affected Versions: phpMyFAQ version 1.4.0 Description: The issue allows remote attackers to access the Image Manager without authorization, enabling them to upload or delete images via a direct request. Recommendations: For phpMyFAQ version 1.4.0, consider...
[SA13414] PHP Gift Registry "message" Cross-Site Scripting Vulnerabilities
TITLE: PHP Gift Registry "message" Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA13414 VERIFY ADVISORY: http://secunia.com/advisories/13414/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: PHP Gift Registry 1.x http://secunia.com/product/4369/...
phpBB does not adequately validate user input for language selection thereby allowing user to execute arbitrary php code
Overview phpBB is an open-source bulletin board program. A user input validation problem exists with regard to language settings. An intruder can excute arbitrary php code and gain a shell with the privileges of the web server on the system. Description Version 1.4.0 and earlier have a user input...
PT-2001-2561 · Phpbb · Phpbb
Name of the Vulnerable Software and Affected Versions: phpBB versions 1.4.0 and earlier Description: The issue allows remote authenticated users to execute arbitrary PHP code via an invalid language value. This prevents the variables $l statsblock in prefs.php or $l privnotify in auth.php from...