Elastix < 2.4 PHP Code Injection Vulnerability

Elastix is prone to a PHP code injection vulnerability because it fails to properly sanitize user-supplied input. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Kerio WinRoute Firewall Web Server Remote Source Code Disclosure Vulnerability

Kerio WinRoute Firewall is prone to a remote source-code- disclosure vulnerability because it fails to properly sanitize user- supplied input. An attacker can exploit this vulnerability to view the source code of files in the context of the server process; this may aid in further attacks. Version...

nostromo nhttpd Directory Traversal Remote Command Execution Vulnerability

nostromo nhttpd is prone to a remote command-execution vulnerability because it fails to properly validate user-supplied data. An attacker can exploit this issue to access arbitrary files and execute arbitrary commands with application-level privileges. nostromo versions prior to 1.9.4 are...

Microsoft Internet Explorer - MHTML Protocol Handler Cross-Site Scripting

Microsoft Internet Explorer - MHTML Protocol Handler Cross-Site Scripting Hacking with mhtml protocol handler Author: www.80vul.com Email:5up3rh3igmail.com Release Date: 2011/1/15 References: http://www.80vul.com/mhtml/Hacking%20with%20mhtml%20protocol%20handler.txt Ph4nt0m Webzine 0x05...

flashlight free edition - Local File Inclusion / SQL Injection

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX Flashlight Free Edition - LFI/SQL Multiple Remote Vul XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX RATM: "All hell can't stop us now!" XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX --Author : k4m1k451 --E-mail :...

SkyPortal WebLinks 0.12 - Contents Change

SkyPortal WebLinks 0.12 - Contents Change @=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @=From : Turkish @=======================================@ @=Script :SkyPortal...

FreeBSD Ports: firefox

The remote host is missing an update to the system as announced in the referenced advisory. VID 29f5bfc5-ce04-11dd-a721-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 29f5bfc5-ce04-11dd-a721-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

PHP weather 2.2.2 - Local File Inclusion / Cross-Site Scripting

Lfi/xss script: phpweather-2.2.2 download from:http://downloads.sourceforge.net/phpweather/phpweather-2.2.2.zip?modtime=1087430400&bigmirror=0 vul: /test.php line 48: requirePHPWEATHERBASEDIR . "/output/pwtext$language.php"; xpl: www.site.com/path/test.php?metar=&language=Lfi%00...

PHPfan 3.3.4 - 'init.php' Remote File Inclusion

remote file include script: phpfan 3.3.4 download from:http://ishallnotcare.org/mint/pepper/tillkruess/downloads/tracker.php?url=http%3A//scriptsextra.ishallnotcare.org/phpfanbasic334.zip ............................................................................ vul: includeonce $includepath...

Exploits communitycms-0.1 Remote File Inclusion

No description provided by source. ?php / + IN THE NAME OF GOD + + + Persian Boys Hacking Team -:- 2008 -:- IRAN + - + - discovered by N3TR00T3R at Y! dot com + - communitycms-0.1 Remote File Includion + - download :http://sourceforge.net/project/showf...roupid=223968 + - sp tnx :...

Dragoon 0.1 - 'lng' Local File Inclusion

Script Name :Dragoon CMS Download : http://sourceforge.net/project/showfiles.php?groupid=118780 Error : $cal'lng'=$GET'lng'; include'../lang/'.$cal'lng'.'.php'; Vul Code : http://site/path/forum/kietu/libs/calendrier.php?callng=LFI milw0rm.com 2008-04-04...

PhpBlock a8.4 - PATH_TO_CODE Remote File Inclusion

PhpBlock a8.4 - PATHTOCODE Remote File Inclusion Script Name : PHP Block a8.4 Download : http://sourceforge.net/project/downloading.php?groupid=186381&usemirror=surfnet&filename=a8.4.zip&73507325 Error : includeonce $PATHTOCODE."/script/fonction.php"; Vul Code :...

PhpBlock a8.4 (PATH_TO_CODE) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================ PhpBlock a8.4 PATHTOCODE Remote File Inclusion Vulnerability ================================================================ Script Name : PHP Block a8.4 Error : includeonce...

OTSTurntables 1.00 (m3u File) Local Buffer Overflow Exploit

No description provided by source. ?php / OTSTurntables 1.00 Buffer OverFlow 0days 224 bytes available for shellcode,, you can replace it with you favourite one,, 0x77394540 jmp esp in shell32.dll Winxp sp0 exploit : A x 277 +EIP - jmp esp - 4 + Nops -10 + Shellcode -224 if you want to exploit th...

IndexScript 2.8 - 'cat_id' SQL Injection

Site: http://indexscript.com Found By: xssvgamer Google Dork: allintext: "This site is powered by IndexScript" exploit: http://www.example.com/showcat.php?catid=-1 UNION ALL SELECT login,password FROM dirlogin / Blind SQL injection in indexscript.. Vul Code: "$sql = "select name, metatitle,...

Article System 0.1 (INCLUDE_DIR) Remote File Include Vulnerabilities

No description provided by source. Script:Article System Affected Version:1.0 Download:http://kent.dl.sourceforge.net/sourceforge/artsys/artsys-0.1-20020705.tar.gz Author:Dr Max Virus &nbs...

Cisco VG248 login password is blank

The remote host is a Cisco VG248 with a blank password. SPDX-FileCopyrightText: 2005 Rick McCloskey Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only Cisco VG248 with a blank password nas...