CVE-2007-3956

TeamSpeak WebServer 2.0 for Windows is affected by a denial-of-service vulnerability where input parameter length is not validated and TCP sessions are not expired. An attacker can trigger high CPU/memory usage by sending overly long username/password values to login.tscmd on TCP port 14534. The ...

CVE-2007-3956: Undefined Security Weakness

TeamSpeak WebServer 2.0 for Windows does not validate parameter value lengths and does not expire TCP sessions, which allows remote attackers to cause a denial of service CPU and memory consumption via long username and password parameters in a request to login.tscmd on TCP port 14534...

Alstrasoft Video Share Enterprise 4.x - Multiple Input Validation Vulnerabilities

Alstrasoft Video Share Enterprise 4.x - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/25019/info AlstraSoft Video Share Enterprise is affected by multiple input-validation vulnerabilities. These issues include multiple cross-site scripting vulnerabilities and...

Alstrasoft Affiliate Network Pro 8.0 - index.php Cross-Site Scripting

Alstrasoft Affiliate Network Pro 8.0 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/25026/info AlstraSoft Affiliate Network Pro is affected by multiple input-validation vulnerabilities. These issues include multiple cross-site scripting isues and SQL-injection issues. ...

Alstrasoft Affiliate Network Pro 8.0 - 'temp.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25026/info AlstraSoft Affiliate Network Pro is affected by multiple input-validation vulnerabilities. These issues include multiple cross-site scripting isues and SQL-injection issues. A successful exploit could allow an attacker to compromise the...

Dora Emlak 1.0 Script - Multiple Input Validation Vulnerabilities

Dora Emlak 1.0 Script - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/25004/info Dora Emlak Script is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize...

Alstrasoft Affiliate Network Pro 8.0 - temp.php Cross-Site Scripting

Alstrasoft Affiliate Network Pro 8.0 - temp.php Cross-Site Scripting source: https://www.securityfocus.com/bid/25026/info AlstraSoft Affiliate Network Pro is affected by multiple input-validation vulnerabilities. These issues include multiple cross-site scripting isues and SQL-injection issues. A...

Alstrasoft Affiliate Network Pro 8.0 - pgmid SQL Injection

Alstrasoft Affiliate Network Pro 8.0 - pgmid SQL Injection source: https://www.securityfocus.com/bid/25026/info AlstraSoft Affiliate Network Pro is affected by multiple input-validation vulnerabilities. These issues include multiple cross-site scripting isues and SQL-injection issues. A successfu...

Dora Emlak 1.0 Script - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/25004/info Dora Emlak Script is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input. Exploiting these issues could allow an attacker ...

Alstrasoft Video Share Enterprise 4.x - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/25019/info AlstraSoft Video Share Enterprise is affected by multiple input-validation vulnerabilities. These issues include multiple cross-site scripting vulnerabilities and multiple SQL-injection vulnerabilities. Exploiting these issues could allow an...

Alstrasoft Affiliate Network Pro 8.0 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25026/info AlstraSoft Affiliate Network Pro is affected by multiple input-validation vulnerabilities. These issues include multiple cross-site scripting isues and SQL-injection issues. A successful exploit could allow an attacker to compromise the...

Alstrasoft Affiliate Network Pro 8.0 - 'pgmid' SQL Injection

source: https://www.securityfocus.com/bid/25026/info AlstraSoft Affiliate Network Pro is affected by multiple input-validation vulnerabilities. These issues include multiple cross-site scripting isues and SQL-injection issues. A successful exploit could allow an attacker to compromise the...

TeamSpeak 2.0 (Windows Release) - Remote Denial of Service

!/usr/bin/perl TeamSpeak 2.0 Windows Release Remote D0S Exploit by Yag Kohha skyhole at gmail.com Vendor URL: http://www.goteamspeak.com/ TeamSpeak WebServer has no tcp session expire and no checks for incoming values length. TODO: Edit $target value Run script CPU 100%, Memory up for 1.2 Gb per...

TeamSpeak 2.0 (Windows Release) Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ================================================================ TeamSpeak 2.0 Windows Release Remote Denial of Service Exploit ================================================================ !/usr/bin/perl TeamSpeak 2.0 Windows Release Remote D...

Insanely Simple Blog 0.4/0.5 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/24934/info Insanely Simple Blog is prone to multiple input-validation vulnerabilities, including cross-site scripting, HTML-injection, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. Exploiting these issue...

Dating Gold 3.0.5 - header.php?int_path Remote File Inclusion

Dating Gold 3.0.5 - header.php?intpath Remote File Inclusion source: https://www.securityfocus.com/bid/24910/info AzDG Dating Gold is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues...

Dating Gold 3.0.5 - secure.admin.php?int_path Remote File Inclusion

Dating Gold 3.0.5 - secure.admin.php?intpath Remote File Inclusion source: https://www.securityfocus.com/bid/24910/info AzDG Dating Gold is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these...

Dating Gold 3.0.5 - 'footer.php?int_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/24910/info AzDG Dating Gold is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute an arbitrary remote file containing malicious...

Dating Gold 3.0.5 - 'header.php?int_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/24910/info AzDG Dating Gold is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute an arbitrary remote file containing malicious...

Dating Gold 3.0.5 - footer.php?int_path Remote File Inclusion

Dating Gold 3.0.5 - footer.php?intpath Remote File Inclusion source: https://www.securityfocus.com/bid/24910/info AzDG Dating Gold is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues...