VMware Serve Directory Traversal Vulnerability - Nov09 (Linux)

The host is installed with VMWare products and is prone to multiple vulnerability. OpenVAS Vulnerability Test $Id: gbvmwareservdirtravvulnnov09lin.nasl 6518 2017-07-04 13:49:06Z cfischer $ VMware Server Directory Traversal Vulnerability - Nov09 Linux Authors: Sharath S Copyright: Copyright c 2009...

SeaMonkey < 2.0 Multiple Vulnerabilities

Binary data 5219.prm...

Joomla JD-WordPress Vulnerability File Inclusion Version 2.0 RC2

REGISTER GLOBALS ON wp-feed.php?mosConfigabsolutepath= Version 2.0 RC2 UPDATE IT ! !/usr/bin/perl + Author : Don Tukulesto [email protected] + Date : October 20, 2009 + Homepage : http://www.indonesiancoder.com + Vendor : www.joomladeveloping.org + version : 2.0 RC2 + Method : Remote File...

Millenium MP3 Studio 2.0 Stack Overflow

Vulnerability : .m3u File Local Stack Overflow Universal Exploit SEH + Product : Millenium MP3 Studio + Versions affected : v2.0 + Download : http://www.software112.com/products/mp3-millennium+download.html + Method : seh + Tested on : Windows XP SP2 En, Windows XP SP3 En, Windows Vista SP1 Swe +...

PHPGenealogie 2.0 'CoupleDB.php' RFI Vulnerability

PHPGenealogie is prone to a remote file inclusion RFI vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

BPAutoSales 2.0 SQL Injection

x========================================================================================================================================x | AntiSecuritydotorg |...

DvBBS 2.0 - 'boardrule.php' SQL Injection

source: https://www.securityfocus.com/bid/36282/info DvBBS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, o...

DVBBS 2.0 SQL Injection

Securitylab.ir Application Info: Name: DVBBS php Version: 2.0 Vendor: http://p.dvbbs.net Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql Injection Risk: Medium...

Discuz! Plugin Crazy Star <= 2.0 (fmid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Discuz! Plugin Crazy Star = 2.0 fmid SQL Injection Vulnerability ===================================================================...

Shopmaker CMS 2.0 (bSQL/ LFI) Multiple Remote Vulnerabilities

No description provided by source. Shopmaker CMS bSQL/LFI Multiple Remote Vulnerabilities ============================================================================== Software : Shopmaker Asp version : version 2.0 Vendor : http://www.shopmaker.dk/ Author : Platen mail: platen.secureatgmail.com...

CJ Dynamic Poll 2.0 Remote File Inclusion Vulnerability

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + CJ Dynamic Poll 2.0 Remote File Inclusion Vulnerability + + + + Discovered by Cru3l.b0y + + + + WwW.DeltaHacking.Net + + + + + + + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ AUTHOR : Cru3l.b0y...

Gravity Board X Multiple SQL Injection Vulnerabilities and Remote Command Execution Vulnerability

Gravity Board X is prone to multiple SQL-injection vulnerabilities and a remote command-execution because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to execute arbitrary code, compromise the application...

B2B Horizontal Marketplace Creator 2.0 SQL Injection

--------------------------------------------------------- Portal Name: B2B Horizontal Marketplace Creator Version: 2.0 Vendor: http://www.etoshop.com Author : PouyaServer , [email protected] Website: http://Pouya-Server.ir Vulnerability : Auth Bypass SQL Injection Vulnerability...

Onur Blog 2.0 Database Disclosure

--------------------------------------------------------- Portal Name: Onur Blog Version : 2.0 Download : http://aspindir.com/Goster/5483 Author : PouyaServer , [email protected] Vulnerability : DD --------------------------------------------------------- DD: http://site.com/Path/db/db.mdb...

DEBIAN-CVE-2008-5813

SQL injection vulnerability in inc/rubriques.php in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: some of these details are obtained from third party information...

Code injection

Multiple unspecified vulnerabilities in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 have unknown impact and attack vectors...

Zeeways Shaadi Clone 2.0 Auth Bypass Vulnerability

No description provided by source. ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ==============================================================================...

Zeeways Shaadi Clone 2.0 Auth Bypass Vulnerability

Exploit for unknown platform in category web applications ================================================== Zeeways Shaadi Clone 2.0 Auth Bypass Vulnerability ================================================== ============================================================================== Zeeways...

Libra PHP File Manager 1.18/2.0 - Local File Inclusion

!/usr/bin/perl -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Libra PHP File Manager eNYe-Sec - www.enye-sec.org Greetings to Ka0x for help me with the perl code : You can scale directories and read any file that you have permissions use LWP::UserAgent; $ua =...

Omnicom Content Platform - 'browser.asp' Directory Traversal

source: https://www.securityfocus.com/bid/31338/info Omnicom Content Platform is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. To exploit this issue an attacker may need administrative privileges to the affected application...