857 matches found
Debian Security Advisory DSA 960-2 (libmail-audit-perl)
The remote host is missing an update to libmail-audit-perl announced via advisory DSA 960-2. This update only corrects the update for sarge, the version in woody is correct. Niko Tyni discovered that the Mail::Audit module, a Perl library for creating simple mail filters, logs to a temporary file...
Debian Security Advisory DSA 385-1 (hztty)
The remote host is missing an update to hztty announced via advisory DSA 385-1. OpenVAS Vulnerability Test $Id: deb3851.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 385-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
PHPEcho CMS 2.0 - id SQL Injection
PHPEcho CMS 2.0 - id SQL Injection PHPEcho CMS Remote SQL Injection Exploit Product: PHPEchoCM License: GPL For version: 2.0 AUTHOR : Stack-Terrorist v40 HOME : http://v4-team.com EMAIL: [email protected] & [email protected] download script :...
phpecho-sql.txt
PHPEcho CMS Remote SQL Injection Exploit Product: PHPEchoCM License: GPL For version: 2.0 AUTHOR : Stack-Terrorist v40 HOME : http://v4-team.com EMAIL: [email protected] & [email protected] download script : http://sourceforge.net/project/showfiles.php?groupid=186100 EXPLOITS : username :...
MTCMS <= 2.0 Remote SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ================================================= MTCMS = 2.0 Remote SQL Injection Vulnerabilities ================================================= ...:::::MTCMS =2.0 SQL Injection Vulnerbility ::::.... Virangar Security Team --------...
WordPress wp-db.php Character Set SQL Injection Vulnerability
CVE-2007-6318 WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in...
Foxit WAC Server 2.0 Build 3503 - Denial of Service
Foxit WAC Server 2.0 Build 3503 - Denial of Service source: https://www.securityfocus.com/bid/27142/info Foxit WAC Server is prone to a denial-of-service vulnerability because the application fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to...
Foxit WAC Server 2.0 Build 3503 - Denial of Service
source: https://www.securityfocus.com/bid/27142/info Foxit WAC Server is prone to a denial-of-service vulnerability because the application fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to crash the affected application, denying service to...
BBPortalS <= 2.0 Remote Blind SQL Injection Exploit
No description provided by source. BBPortalS BBsProcesS Remote Blind SQL Injection Exploit Bug Found And Write By Max007 Exploit Tested On V.1.5.10 And V.1.6.2 And 1.5.11 info:For The Version BBPortalS 2.0 name of field is user and password but you have to find name of table !/usr/bin/perl use...
WordPress Core 2.0 - 'wp-register.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/25769/info WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
Ibrahim Ã?AKICI - Okul Portal Haber_Oku.asp SQL Injection
Ibrahim Ã?AKICI - Okul Portal HaberOku.asp SQL Injection source: https://www.securityfocus.com/bid/24379/info Ibrahim Ã?AKICI Okul Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploi...
Comus 2.0 - 'Accept.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/23661/info Comus is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...
Orion-Blog 2.0 - Remote Authentication Bypass
Orion-Blog 2.0 - Remote Authentication Bypass Orion-Blog v2.0 Version Remote Privilege Escalation Exploit function ps unique.action=""+document.unique.site.value+"/admin/AdminBlogNewsEdit.asp"; unique.submit; --- Orion-Blog v2.0 Version Remote Privilege Escalation Exploit --- Site Address :...
WWWboard password disclosure
//A vulnerability found in WWWboard that shows the administrative user names and passwords. Althought the password is hashed, It can easily be decoded. //Effected versions: Version 2.0 ALPHA 2 //File name: passwd.txt //File location: http://victim/wwwboard/passwd.txt //Google dork:...
Flat Chat 2.0 (include online.txt) Remote Code Execution Vulnerability
Exploit for unknown platform in category web applications ====================================================================== Flat Chat 2.0 include online.txt Remote Code Execution Vulnerability ====================================================================== .-""""""""-. / Dj7xpl \ | | ...
OpenPinboard <= Remote File Include
====================================================================================== OpenPinboard = Remote File Include ====================================================================================== Scripts: OpenPinboard Download...
JAF CMS Forum.PHP远程文件包含漏洞
Salims Softhouse JAF CMS是一款基于PHP的内容管理程序。 Salims Softhouse JAF CMS不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Forum.PHP'脚本对用户提交的'applAPPL'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Salims Softhouse JAF CMS 4.0 RC1 Salims Softhouse JAF CMS 3.0 RC Salims Softhouse JAF CMS 2.5 Salims Softhous...
CVE-2006-6253
Cahier de texte 2.0 stores sensitive information under the web root, possibly with insufficient access control, which might allow remote attackers to obtain all users' passwords via a direct request for administration/dump.sql...
Inside Systems Mail 2.0 - 'error.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/21424/info Inside Systems Mail is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...
Solaris 8 (sparc) : 114880-12
Sun Ray Server version 2.0 Patch Update. Date this patch was last updated by Sun : Feb/14/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...