277 matches found
Commtouch Anti-Spam Enterprise Gateway - Cross-Site Scripting
Commtouch Anti-Spam Enterprise Gateway - Cross-Site Scripting source: https://www.securityfocus.com/bid/29957/info Commtouch Anti-Spam Enterprise Gateway is prone to a cross-site scripting vulnerability because the device fails to properly sanitize user-supplied input. An attacker may leverage th...
Netbutikker 4 - SQL Injection
Netbutikker 4 - SQL Injection Viva Islam rEm0te SQL Injection Vulnerability netbutik V1 index.php id Script Name : Netbutik Download : www.simpelside.dk Version : version 1 , 2 , 3 ,4 AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] Note This script have 4 version on demo and user...
Netbutikker <= v4 Remote SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ====================================================== Netbutikker http://www.target.dk/netbutik1/netbutik.php?cat=-1+union+select+concatws0x3a3a,brugernavn,adgangskode+from+netbutik1brugere/ 2 =====...
ttCMS <= v4 (ez_sql.php lib_path) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ===================================================================== ttCMS = v4 ezsql.php libpath Remote File Inclusion Vulnerability ===================================================================== DEVIL TEAM - HACKING POLISH TEAM...
PHP 4.4.3 - 4.4.6 phpinfo() Remote XSS Vulnerability
Exploit for multiple platform in category remote exploits ==================================================== PHP 4.4.3 - 4.4.6 phpinfo Remote XSS Vulnerability ==================================================== //////////////////////////////////////////////////////////////////////// // // // ...
Michelle's L2J Dropcalc
============================================================================================== Title: Michelle's L2J Dropcalc Version: = v4 Web Site: http://www.msknight.com/comps/lineage2/myl2jdropcalc.htm Discovered By: Codebreak [email protected] | www.codebreak.tk...
Torbstoff News 4 (pfad) Remote File Inclusion Vulnerability
No description provided by source. ================================================================= Torbstoff News 4 = pfad Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site : http://www.torbstoff.de | |...
Links ELinks SMBClient远程命令执行漏洞
Links ELinks是一款web浏览器。 Links ELinks存在一个缺陷，允许恶意web站点在目标机器上执行smbclient命令，此缺陷可能导致从目标系统上读取任意文件或者上传恶意文件到目标系统并执行。 具体问题代码如下： smbfunc in smb.c: ... 143 if share 144 if !dir || dirstrlendir - 1 == '/' || dirstrlendir - 1 == '\' 145 if dir 146 vn++ = "-D"; 147 vn++ = dir; 148 149 vn++ = "-c"; 150 vn++ =...
StoryStream 4.0 - baseDir Remote File Inclusion
StoryStream 4.0 - baseDir Remote File Inclusion v1per-haCker How I Can lives Without FooL Programmer! ======================================================================================= Storystream RFI =======================================================================================...
# ForumJBC v4 < = Cross-Site Scripting - XSS Exploit ;
ForumJBC v4 = Cross-Site Scripting - XSS Exploit ; Discovred By : ThELeO ; Software : ForumJBC v4 ; Site Of SoftWare : http://jbc.unlimited.free.fr Version : 4 ; Exploit : http://Www.Victime.Com/Script/haut.php?nbconnecte=scriptalert'hacking20xss' /script ; Greetz : M.I.D.TDrackanZ, Mr.IlysS,...
Torbstoff News 4 - pfad Remote File Inclusion
Torbstoff News 4 - pfad Remote File Inclusion ================================================================= Torbstoff News 4 = pfad Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site :...
Torbstoff News 4 (pfad) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications =========================================================== Torbstoff News 4 pfad Remote File Inclusion Vulnerability ===========================================================...
MySQL 4.x/5.x - Server Date_Format Denial of Service
source: https://www.securityfocus.com/bid/19032/info MySQL is prone to a remote denial-of-service vulnerability because the database server fails to properly handle unexpected input. This issue allows remote attackers to crash affected database servers, denying service to legitimate users...
MySQL 4.x5.x - Server Date_Format Denial of Service
MySQL 4.x5.x - Server DateFormat Denial of Service source: https://www.securityfocus.com/bid/19032/info MySQL is prone to a remote denial-of-service vulnerability because the database server fails to properly handle unexpected input. This issue allows remote attackers to crash affected database...
Sql-injection in PollPro Version 4
Advisory: Sql-injection in PollPro Version 4 Довольно популярный скрипт для голосований. Уязвимый скрипт/Vulnerable script: previouspoll.asp SQL-inlections: http://www.codefixer.com/poll/previouspoll.asp?pollID=36' -------------------------- Cyber Lords Team www.cyberlords.net...
[SA19397] uniForum "websecadmin.aspx" Cross-Site Scripting
TITLE: uniForum "websecadmin.aspx" Cross-Site Scripting SECUNIA ADVISORY ID: SA19397 VERIFY ADVISORY: http://secunia.com/advisories/19397/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: uniForum 4.x http://secunia.com/product/8960/ DESCRIPTION: r0t has reported ...
[SA18885] webSPELL "search.php" SQL Injection Vulnerability
TITLE: webSPELL "search.php" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA18885 VERIFY ADVISORY: http://secunia.com/advisories/18885/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: webSPELL 4.x http://secunia.com/product/8086/ DESCRIPTION: x128 has...
waraxe-2005-SA041.txt
================================================================================ waraxe-2005-SA041 ================================================================================ Critical Sql Injection in PhpNuke 6.x-7.6 Top module...
[Full-disclosure] [USN-112-1] PHP4 vulnerabilities
=========================================================== Ubuntu Security Notice USN-112-1 April 14, 2005 php4 vulnerabilities CAN-2005-1042, CAN-2005-1043 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 4.10 Warty Warth...
CVE-2005-0854
The CVE-2005-0854 entry concerns betaparticle blog (bp blog) prior to version 4. It reports an authentication bypass that enables remote attackers to perform file operations via direct requests to upload.asp or myFiles.asp (upload and delete respectively). The vulnerability allows unauthorized ac...