XSS vulnerability in CruxPA

Vulnerability ID: HTB22451 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincruxpa2.html Product: CruxPA Vendor: CruxSoftware Vulnerable Version: 2.00 and Probably Prior Versions Vendor Notification: 21 June 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor...

AbleSpace 1.0 - news.php SQL Injection

AbleSpace 1.0 - news.php SQL Injection source: https://www.securityfocus.com/bid/41139/info AbleSpace is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromis...

TitanFTP Server Arbitrary File Disclosure

Accensus Security Advisory L-02 TitanFtp Server Arbitrary File Disclosure Details ============= Product: TitanFTP Server Security-Risk: high Remote-Exploit: maybe, assuming anonymous ftp access Local-Exploit: yes Vendor URL: http://www.southrivertech.com/ Found By: Bill Finlayson...

IP2location.dll v1.0.0.1 Function Initialize() Buffer Overflow

Exploit for windows platform in category local exploits ============================================================== IP2location.dll v1.0.0.1 Function Initialize Buffer Overflow ============================================================== IP2Location.dll v1.0.0.1 Initialize Buffer Overflow by...

IP2location.dll 1.0.0.1 - Function 'Initialize()' Local Buffer Overflow

IP2Location.dll v1.0.0.1 Initialize Buffer Overflow by sinn3r / IP2Location.dll v1.0.0.1 Initialize Buffer Overflow Vulnerable version : v1.0.0.1 checksum: d86933ab58720c384bdc081d33684f7d patched version : v1.0.0.1 checksum: bf66e2ef8be3c301b381cfb424ad0afc, v3.0.1.0 Found and coded by sinn3r...

openMairie openPresse 'dsn[phptype]' Local File Inclusion Vulnerability

This host is running openMairie openPresse and is prone to local file inclusion vulnerability. OpenVAS Vulnerability Test $Id: gbopenmairieopenpresselfivuln.nasl 5323 2017-02-17 08:49:23Z teissa $ openMairie openPresse 'dsnphptype' Local File Inclusion Vulnerability Authors: Madhuri D Copyright:...

REvolution 10.02 - Cross-Site Request Forgery

REvolution 10.02 - Cross-Site Request Forgery Vulnerability ID: HTB22367 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinnpdsrevolution.html Product: NPDS REvolution Vendor: NPDS Vulnerable Version: REvolution 10.02 and Probably Prior Versions Vendor Notification: 06 May 2010 Vulnerability...

Rumba FTP Client FTPSFtp.dll 4.2.0.0 - OpenSession() Local Buffer Overflow

Rumba FTP Client FTPSFtp.dll 4.2.0.0 - OpenSession Local Buffer Overflow Rumba FTP Client FTPSFtp.dll v4.2.0.0 OpenSession Buffer Overflow by sinn3r / Rumba FTP Client FTPSFtp.dll v4.2.0.0 OpenSession Buffer Overflow Vulnerable version download:...

LiSK CMS 4.4 list_content.php Cross Site Scripting

Vulnerability ID: HTB22374 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinliskcms.html Product: LiSK CMS Vendor: Createch-group Vulnerable Version: 4.4 Vendor Notification: 06 May 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor Alerted, Awaiting Vendor...

Rumba FTP Client FTPSFtp.dll v4.2.0.0 OpenSession() Buffer Overflow

Exploit for windows platform in category local exploits =================================================================== Rumba FTP Client FTPSFtp.dll v4.2.0.0 OpenSession Buffer Overflow =================================================================== Rumba FTP Client FTPSFtp.dll v4.2.0.0...

Rumba FTP Client 'FTPSFtp.dll' 4.2.0.0 - 'OpenSession()' Local Buffer Overflow

Rumba FTP Client FTPSFtp.dll v4.2.0.0 OpenSession Buffer Overflow by sinn3r / Rumba FTP Client FTPSFtp.dll v4.2.0.0 OpenSession Buffer Overflow Vulnerable version download: http://download.cnet.com/Rumba-FTP/3000-21604-10587778.html Found and coded by sinn3r Greets: Corelan Security Team &...

CommuniCrypt mail 1.16 Active-X Buffer Overflow

junk = String284, "A" nseh = unescape"%eb%06%90%90" seh = unescape"%1c%e4...

Oracle MySQL 'COM_FIELD_LIST' Command Buffer Overflow Vulnerability

MySQL is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Gallo <= 0.1.0 RFI Vulnerability

Gallo is prone to a remote file include RFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Maple Maplet File Creation and Command Execution

This module harnesses Maple's ability to create files and execute commands automatically when opening a Maplet. All versions up to 13 are suspected vulnerable. Testing was conducted with version 13 on Windows. Standard security settings prevent code from running in a normal maple worksheet withou...

osCommerce 3.0a5 - Local File Inclusion HTML Injection

osCommerce 3.0a5 - Local File Inclusion HTML Injection source: https://www.securityfocus.com/bid/39820/info osCommerce is prone to a local file-include vulnerability and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local...

PHP 4.x < 4.4.5, 5.x < 5.2.1 Multiple Integer Overflow Vulnerabilities

PHP is prone to multiple integer overflow vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescriptio...

e107 0.7.19 Cross Site Request Forgery

Vulnerability ID: HTB22344 Reference: http://www.htbridge.ch/advisory/xsrfcsrfine107.html Product: e107 Website System Vendor: e107 Vulnerable Version: 0.7.19 and Probably Prior Versions Vendor Notification: 05 April 2010 Vulnerability Type: CSRF Cross-Site Request Forgery Status: Not Fixed, Vend...

WinMount 3.3.401 - &#039;.zip&#039; Remote Buffer Overflow

source: https://www.securityfocus.com/bid/39557/info WinMount is prone to a remote buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code with the privileges of the user...

Simple Machines Forum (SMF) 1.1.8 - &#039;avatar&#039; Remote PHP File Execute

Simple Machines Forum ------END----- cat hacks.txt Simple Machines Forum = 1.1.8 avatar rpfe PoC by Jose Luis Gongora Fernandez aka JosS ///vhosts/hack0wn.com/httpdocs/poc.php VICTIM: 88.25.92. info: Mozilla/5.0 X11; U; Linux i686; es-ES; rv:1.8.1.19 Gecko/20081202 Iceweasel/2.0.0.19...