857 matches found
Microsoft .NET Framework SDK 1.0/1.1 - MSIL Tools Buffer Overflow
source: https://www.securityfocus.com/bid/17243/info Microsoft .NET Framework SDK contains tools for assembling and disassembling MSIL files. These tools are prone to buffer-overflow vulnerabilities that attackers could exploit to cause a denial of service or potentially execute arbitrary code...
Microsoft .NET Framework SDK 1.01.1 - MSIL Tools Buffer Overflow
Microsoft .NET Framework SDK 1.01.1 - MSIL Tools Buffer Overflow source: https://www.securityfocus.com/bid/17243/info Microsoft .NET Framework SDK contains tools for assembling and disassembling MSIL files. These tools are prone to buffer-overflow vulnerabilities that attackers could exploit to...
CVE-2006-0047
packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause a denial of service server crash via crafted packets with negative compressed size values...
phpArcadeScript 2.0 browse.php Multiple Parameter XSS
phpArcadeScript 2.0 browse.php Multiple Parameter XSS. CVE-2006-1082. Webapps exploit for php platform source: http://www.securityfocus.com/bid/16957/info phpArcadeScript is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of...
phpArcadeScript 2.0 loginbox.php login_status Parameter XSS
phpArcadeScript 2.0 loginbox.php loginstatus Parameter XSS. CVE-2006-1082. Webapps exploit for php platform source: http://www.securityfocus.com/bid/16957/info phpArcadeScript is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of...
[SA18471] WP-Stats WordPress Plug-in "author" SQL Injection Vulnerability
TITLE: WP-Stats WordPress Plug-in "author" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA18471 VERIFY ADVISORY: http://secunia.com/advisories/18471/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: WP-Stats 2.x http://secunia.com/product/6822/...
E-Publish 2.0 - Multiple Input Validation Vulnerabilities
E-Publish 2.0 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/15964/info E-Publish is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of...
Multi-Format Shellcode Encoding Tool - Beta v2.0 (w32)
No description provided by source. / ,sSSSis ,sSSSs, Beta v2.0 w32. iS" dP dY" ,SP Encodes binary data to/from a variety of formats. .SP dSS" ,sS" Copyright C 2003-2005 by Berend-Jan Wever dS' Sb ,sY" [email protected] .SP dSSP' sSSSSSSP http://spaces.msn.com/members/berendjanwever iS: Thi...
Ad Manager Pro SQL vuln.
Ad Manager Pro SQL vuln. Vuln. dicovered by : r0t Date: 14 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/ad-manager-pro-sql-vuln.html vendor:www.phpwebscripts.com/admanagerpro/ affected version:2.0 and prior Product Description: Quality ad management system. Graphical or text-bas...
Magic Forum Personal - view_thread.cfm Multiple SQL Injections
Magic Forum Personal - viewthread.cfm Multiple SQL Injections source: https://www.securityfocus.com/bid/15774/info CFMagic Products are prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. These vulnerabilities allow an attacke...
Magic List Pro - view_archive.cfm?ListID SQL Injection
Magic List Pro - viewarchive.cfm?ListID SQL Injection source: https://www.securityfocus.com/bid/15774/info CFMagic Products are prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. These vulnerabilities allow an attacker to...
efiction 1.01.12.0 - uid SQL Injection
efiction 1.01.12.0 - uid SQL Injection source: https://www.securityfocus.com/bid/15568/info eFiction is prone to SQL injection, remote file upload, and cross site scripting vulnerabilities. These vulnerabilities may allow an attacker to view and modify sensitive information, gain unauthorized...
efiction 1.01.12.0 - titles.php SQL Injection
efiction 1.01.12.0 - titles.php SQL Injection source: https://www.securityfocus.com/bid/15568/info eFiction is prone to SQL injection, remote file upload, and cross site scripting vulnerabilities. These vulnerabilities may allow an attacker to view and modify sensitive information, gain...
PT-2005-4271 · Hasbani · Hasbani Web Server
Name of the Vulnerable Software and Affected Versions: Hasbani Web Server WindWeb version 2.0 Description: The issue allows remote attackers to cause a denial of service, resulting in an infinite loop, via crafted HTTP GET requests. Recommendations: For version 2.0, update to a newer version that...
Horde IMP < 3.2.4 Content-Type XSS Vulnerability
The remote server is running at least one instance of Horde IMP whose version number is between 2.0 and 3.2.3 inclusive. SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
XSS in forums Simple Message Board Version 2.0 Beta 1
This BUGS discovered by rUnViRuS Http://www.security-arab.com =-=-=-=-=-=-=-=-= xss in forums Simple Message Board Version 2.0 Beta 1 Powered by Man and Machine, Ltd Exploit =-=-=-= XSS in forum.cfm http://www.example.com/forum/forum.cfm?FID=scriptJavaScript:alertdocument.cookie;/script...
smb20b1XSS.txt
This BUGS discovered by rUnViRuS Http://www.security-arab.com =-=-=-=-=-=-=-=-= xss in forums Simple Message Board Version 2.0 Beta 1 Powered by Man and Machine, Ltd Exploit =-=-=-= XSS in forum.cfm http://www.example.com/forum/forum.cfm?FID=JavaScript:alertdocument.cookie; =-=-=-=-=-=- XSS in...
[SA15708] Annuaire 1Two Cross-Site Scripting and Script Insertion
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
maxwebportal136-2.txt
------------------------------------------ / Config address - example: http://www.site.com/password.asp $url = "http://www.mohamad.com/password.asp"; $mh = "s1"; if webmaxportal version is : Version 1.35 and older please input $mh= "s1" if webmaxportal version is : Version 1.36 , 2.0 please input...
Maxwebportal <= 1.36 password.asp Change Password Exploit (1 - html)
No description provided by source. !-- Hi, I'm Soroush Dalili from Grayhatz Security Group GSG . I found dangerous sql injection in Maxwebportal version 1.35,1.36,2.0, 20050418 Next Remote user can inject his/her code in "memKey" var. and change other users password in password.asp Exploit codes ...