w-Agora 4.2.1 - 'cat' SQL Injection

W-Agora = 4.2.1 Class: SQL Injection Found: 30/12/2007 Remote: Yes Site: http://w-agora.net Download: http://sourceforge.net/project/showfiles.php?groupid=3413 Exploit :...

xeCMS 1.x - view.php Remote File Disclosure

xeCMS 1.x - view.php Remote File Disclosure -------------------------------------------------------------- xeCMS 1.x.x Remote File Disclosure Vulnerability. -------------------------------------------------------------- download : http://xecms.sunsite.dk/ author : p4imi0 contact : [email protected]...

ezcontents-disclosure.txt

-------------------------------------------------------------- ezContents Version 1.4.5 Remote File Disclosure Vulnerability. -------------------------------------------------------------- download : http://www.visualshapers.com/ author : p4imi0 contact : [email protected] exploit :...

EZContents 1.4.5 - 'index.php?link' Remote File Disclosure

-------------------------------------------------------------- ezContents Version 1.4.5 Remote File Disclosure Vulnerability. -------------------------------------------------------------- download : http://www.visualshapers.com/ author : p4imi0 contact : [email protected] exploit :...

Unfixed XSS vulnerability at www.a-w-p.com

Security researcher zuppergazi, has submitted on 09/03/2007 a cross-site-scripting XSS vulnerability affecting www.a-w-p.com, which at the time of submission ranked 8373173 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/03/2007. It is...

Code injection

Unspecified vulnerability in the Map I/O Service xpwmap in Hitachi XP/W on HI-UX/WE2 before 20070319, and XP/W on HP-UX before 20070405, allows remote attackers to cause a denial of service via certain data to the service port...

CVE-2007-3044

Unspecified vulnerability in the Map I/O Service xpwmap in Hitachi XP/W on HI-UX/WE2 before 20070319, and XP/W on HP-UX before 20070405, allows remote attackers to cause a denial of service via certain data to the service port...

CVE-2007-3044

Unspecified vulnerability in the Map I/O Service xpwmap in Hitachi XP/W on HI-UX/WE2 before 20070319, and XP/W on HP-UX before 20070405, allows remote attackers to cause a denial of service via certain data to the service port...

CVE-2007-3044

The CVE-2007-3044 entry affects Hitachi XP/W on HI-UX/WE2 (before 20070319) and XP/W on HP-UX (before 20070405) where the Map I/O Service (xpwmap) is vulnerable. The issue allows remote attackers to cause a denial of service by sending certain data to the service port. The underlying root cause i...

CVE-2007-2649

Deutsche Telekom T-com Speedport W 700v uses JavaScript delays for invalid authentication attempts to the CGI script, which allows remote attackers to bypass the delays and conduct brute-force attacks via direct calls to the authentication CGI script...

Authentication flaw

Deutsche Telekom T-com Speedport W 700v uses JavaScript delays for invalid authentication attempts to the CGI script, which allows remote attackers to bypass the delays and conduct brute-force attacks via direct calls to the authentication CGI script...

CVE-2007-2649

Deutsche Telekom T-com Speedport W 700v uses JavaScript delays for invalid authentication attempts to the CGI script, which allows remote attackers to bypass the delays and conduct brute-force attacks via direct calls to the authentication CGI script...

VCDGear <= 3.56 Build 050213 (FILE) Local Code Execution Exploit

/ 0day Discovered by: C-W-M Auther: C-W-M Www.MeftunNet.Com & Www.HackerSecurity.Org Location : Turkey... Attack Vector: SEH overwrite Type: Local Tested on Win2k SP4 English Software: VCDGear v3.56 build 050213 Website: www.vcdgear.com Description: "VCDGear is a program designed to allow a user ...

Buffer overflow

Buffer overflow in eject.c in Jason W. Bacon mcweject 0.9 on FreeBSD, and possibly other versions, allows local users to execute arbitrary code via a long command line argument, possibly involving the device name...

Sql injection

search.php in w-Agora Web-Agora allows remote attackers to obtain potentially sensitive information via a ' quote value followed by certain SQL sequences in the 1 searchforum or 2 searchuser parameter, which force a SQL error...

CVE-2007-1607

search.php in w-Agora Web-Agora allows remote attackers to obtain potentially sensitive information via a ' quote value followed by certain SQL sequences in the 1 searchforum or 2 searchuser parameter, which force a SQL error...

CVE-2007-1604

Multiple unrestricted file upload vulnerabilities in w-Agora Web-Agora allow remote attackers to upload and execute arbitrary PHP code 1 via a forum message with an attached file, which is stored under forums/hello/hello/notes/ or 2 by using browseavatar.php to upload a file with a double...

CVE-2007-1606

Multiple cross-site scripting XSS vulnerabilities in w-Agora Web-Agora allow remote attackers to inject arbitrary web script or HTML via 1 the showuser parameter to profile.php, the 2 searchforum or 3 searchuser parameter to search.php, or 4 the userid parameter to changepassword.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in w-Agora Web-Agora allow remote attackers to inject arbitrary web script or HTML via 1 the showuser parameter to profile.php, the 2 searchforum or 3 searchuser parameter to search.php, or 4 the userid parameter to changepassword.php...

CVE-2007-1607

The CVE-2007-1607 entry concerns the w-Agora (Web-Agora) web app. The vulnerable component is search.php, where the (1) search_forum and (2) search_user parameters can be injected with a quote followed by certain SQL sequences, triggering a SQL error and potentially exposing sensitive information...