phpMyAdmin < 3.3.10.1 / 3.4.1 Multiple Vulnerabilities (PMASA-2011-03 - PMASA-2011-04

The remote host contains a version of phpMyAdmin - 3.3.x less than 3.3.10.1 or 3.4.x less than 3.4.1 - that is affected by multiple vulnerabilities: - The scripts 'tbllinks.php' and 'tbl-tracking' fail to filter input to the 'table' and 'db' parameters. An attacker may be able to exploit this iss...

ARSC Really Simple Chat 3.3-rc2 - Cross-Site Scripting Multiple SQL Injections

ARSC Really Simple Chat 3.3-rc2 - Cross-Site Scripting Multiple SQL Injections source: https://www.securityfocus.com/bid/48083/info ARSC Really Simple Chat is prone to a cross-site scripting vulnerability and multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize...

CMS Balitbang Edit File Vulnerability

Exploit for php platform in category web applications !===========================================================================! CMS Balitbang Edit File Vulnerability Author : Xr0b0t email protected Homepage : www.indonesiancoder.com | xrobot.mobi | mc-crew.net | exploit-id.com Date : 18 Mart,...

phpMyAdmin 3.3.x < 3.3.10.1 / 3.4.x < 3.4.1 Multiple Vulnerabilities

Binary data 5930.prm...

MusicBox 3.3 SQL Injection

Exploit Title: MusicBox v 3.3 SQL INJECTION EXPLOIT Date: 20.04.2010 Author: Ctacok Version: 3.3 Tested on: Windows XP SP 2 Code: !/usr/bin/perl use LWP::Simple; print "\n"; print "\n"; print " MusicBox v 3.3 SQL INJECTION EXPLOIT \n"; print " Author: Ctacok Russian \n"; print " Special for...

Musicbox Version 3.3 Upload Shell Vulnerability

Exploit for php platform in category web applications =============================================== Musicbox Version 3.3 Upload Shell Vulnerability =============================================== ======================================================================================== | Title :...

Musicbox 3.3 Shell Upload

======================================================================================== | Title : Musicbox Version 3.3 Upload Shell Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site : http://www.digzip.com/files/D1L1QGTP/musicbox3.3.rar |...

MusicBox 3.3 - Arbitrary File Upload

======================================================================================== | Title : Musicbox Version 3.3 Upload Shell Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Script : COPYRIGHT 2010 - Musicbox Version 3.3 Product of Shalwan...

splayer XvidDecoder ActiveX Remote Exec 0day poc

No description provided by source. Exploit Title: splayer XvidDecoder ActiveX Remote Exec 0day poc Date: 2010.01.08 Author: superli Software Link: http://dl.splayer.org/SPlayerSetup.exe Version: 3.3 Tested on: xpsp3 ie6 Code : object id=TestObj classid="CLSID:E5960BC4-A76B-4211-BEEC-9AEE2AF8AAE6"...

Cross site request forgery (csrf)

The jumpUrl mechanism in class.tslibfe.php in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 leaks a hash secret juHash in an error message, which allows remote attackers to read arbitrary files by including the hash in a request...

CVE-2009-0482

Cross-site request forgery CSRF vulnerability in Bugzilla before 3.2 before 3.2.1, 3.3 before 3.3.2, and other versions before 3.2 allows remote attackers to perform bug updating activities as other users via a link or IMG tag to processbug.cgi...

ForumApp 3.3 Database Disclosure

Title: ForumApp V3.3 Remote Database Disclosure Vulnerability Credit: Cyber.Zer0 E-mail: Cyber.Zer04tHotmaildotcom Download: http://www.aspapp.com/free-asp-forum HomePage: http://www.aspapp.com/ Remote: Yes Dork: "Powered by ForumApp" --=Database Disclosure=-- http://target.com/data/8690.mdb...

Discussion Forums 2k v3.3 Multiple SQL Injection Vulnerabilities

No description provided by source. Author: !DoktOR! Date found: 30.09.08 Product: Discussion Forums 2k Version: 3.3 URL: http://developer.berlios.de/projects/df2k/ Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off Exploit 1:...

Discussion Forums 2k 3.3 - Multiple SQL Injections

Discussion Forums 2k 3.3 - Multiple SQL Injections Author: !DoktOR! Date found: 30.09.08 Product: Discussion Forums 2k Version: 3.3 URL: http://developer.berlios.de/projects/df2k/ Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off Exploit 1:...

Discussion Forums 2k v3.3 Multiple SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ================================================================ Discussion Forums 2k v3.3 Multiple SQL Injection Vulnerabilities ================================================================...

Discussion Forums 2k 3.3 - Multiple SQL Injections

Author: !DoktOR! Date found: 30.09.08 Product: Discussion Forums 2k Version: 3.3 URL: http://developer.berlios.de/projects/df2k/ Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off Exploit 1:...

FlashGet FTP PWD Response Remote Buffer Overflow Vulnerability

This host is running FlashGet, which is prone to Remote Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: secpodflashgetftppwdbofvuln900203.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: FlashGet FTP PWD Response Remote Buffer Overflow Vulnerability. Authors: Veerendra GG Copyrigh...

FlashGet FTP PWD Response Remote Buffer Overflow Vulnerability

FlashGet is prone to a remote buffer overflow vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-557-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Audins Audiens 3.3 - unistall.php Authentication Bypass

Audins Audiens 3.3 - unistall.php Authentication Bypass Audins Audiens is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues could...