BlogWorx 1.0 (view.asp id) Remote SQL Injection Vulnerability

No description provided by source. BlogWorx 'view.asp' Multiple SQL Injection Vulnerability Discovered By : U238 WebPage : http://noexec.blogspot.com mail : setuid.noexec0x1a.qhotmaild0t.com Script : http://devworx.somee.com/projects/project.asp?pid=20 Script alternativ :...

blogworx-sql.txt

BlogWorx 'view.asp' Multiple SQL Injection Vulnerability Discovered By : U238 WebPage : http://noexec.blogspot.com mail : setuid.noexec0x1a.qhotmaild0t.com Script : http://devworx.somee.com/projects/project.asp?pid=20 Script alternativ : http://www.codedworld.com/download/blogworx/74764.html...

BlogWorx 1.0 - id SQL Injection

BlogWorx 1.0 - id SQL Injection BlogWorx 'view.asp' Multiple SQL Injection Vulnerability Discovered By : U238 WebPage : http://noexec.blogspot.com mail : setuid.noexec0x1a.qhotmaild0t.com Script : http://devworx.somee.com/projects/project.asp?pid=20 Script alternativ :...

W1L3D4 philboard 1.0 - 'philboard_reply.asp' SQL Injection

Philboard W1L3D4 v1.0 Multiple SQL Ä°njection Vulnerable Author : U238 mail : setuid.noexec0x1aqhotmaildotcom webpage: http://noexec.blogspot.com Script : http://www.aspindir.com/Goster/4703 Script2: http://rapidshare.de/files/39107179/philboardtrge.zip.html...

W1L3D4 philboard 1.0 - philboard_reply.asp SQL Injection

W1L3D4 philboard 1.0 - philboardreply.asp SQL Injection Philboard W1L3D4 v1.0 Multiple SQL Ä°njection Vulnerable Author : U238 mail : setuid.noexec0x1aqhotmaildotcom webpage: http://noexec.blogspot.com Script : http://www.aspindir.com/Goster/4703 Script2:...

cobalt-sql.txt

---------------------------------------- CoBaLT v1.0 Remote SQL İnjection Vulnerabiltiy Discovered : U238 Mail : [email protected] WebPage : http://ugur238.org The End Script: http://www.aspindir.com/indir.asp?ID=5414 Script Alternativ :...

Alkacon OpenCMS 7.0.3 - 'logfileViewSettings.jsp?filePath' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28152/info Alkacon OpenCms is prone to multiple input-validation vulnerabilities, including one cross-site scripting issue and a file-disclosure issue, because the application fails to properly sanitize user-supplied input. Attackers can exploit these...

phpcomasy-sql.txt

By Cr@zyKing / [email protected] phpComasy 0.8 modprojectid Remote Sql İnj. Vuln Script Down : http://www.phpcomasy.com/index.php?id=7&modaction=projectdetail&modprojectid=9 Page : index.php?id=7&modaction=projectdetail&modprojectid=Sql. Exp :...

Macrovision InstallShield Update Service ActiveX Control Code Execution (CVE-2007-5660)

Macrovision InstallShield is a software tool for creating installers or software packages. This vulnerability is due to errors in the Macrovision InstallShield Update Service ActiveX Control when handling webpage scripts. To trigger this issue, an attacker may create a malicious web page that wil...

CVE-2008-0231

Multiple directory traversal vulnerabilities in index.php in Tuned Studios 1 Subwoofer, 2 Freeze Theme, 3 Orange Cutout, 4 Lonely Maple, 5 Endless, 6 Classic Theme, and 7 Music Theme webpage templates allow remote attackers to include and execute arbitrary files via ".." sequences in the page...

CVE-2008-0231: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in index.php in Tuned Studios 1 Subwoofer, 2 Freeze Theme, 3 Orange Cutout, 4 Lonely Maple, 5 Endless, 6 Classic Theme, and 7 Music Theme webpage templates allow remote attackers to include and execute arbitrary files via ".." sequences in the page...

Mozilla Firefox 'Basic Realm' Basic Authentication Header Spoofing Vulnerability

Mozilla Firefox is prone to a domain-spoofing vulnerability that allows an attacker to spoof an HTTP basic authentication dialog. Attackers may exploit this vulnerability via a malicious webpage to spoof the origin of an HTTP basic authentication dialog that the victim may trust. Attackers may fi...

MacroVision InstallShield Update Service isusweb.dll unsafe method

Added: 12/07/2007 CVE: CVE-2007-5660 BID: 26280 OSVDB: 38347 Background MacroVision InstallShield is software for creating installers or software packages. Problem Several unsafe methods in the Update Service ActiveX control allow command execution when a user loads a specially crafted web page...

Apple Mac OS X v10.4.11之前版本多个安全漏洞

BUGTRAQ ID: 26444 CVECAN ID:...

[48Bits Advisory] QuickTime Panorama Sample Atom Heap Overflow

48bits Advisory QuickTime Panorama Sample Atom Heap Overflow Abstract: QuickTime is prone to a heap overflow vulnerability when parsing malformed Panorama Sample Atoms, which are used in QuickTime Virtual Reality Movies. This Vulnerability allows attackers to execute code on vulnerable...

CVE-2002-2308

Netscape Communicator 6.2.1 allows remote attackers to cause a denial of service in client browsers via a webpage containing a recursive META refresh tag where the content tag is blank and the URL tag references itself...

Microsoft Internet Explorer Address Bar Spoofing Vulnerability

Description Microsoft Internet Explorer is prone to a vulnerability that lets attackers spoof the address bar of a trusted site. Attackers may exploit this vulnerability via a malicious webpage to spoof the contents and origin of a page that the victim may trust. Attackers may find this issue...

apple-overflow.txt

---------------------------------------------------------------------- ATTACK VECTORS ---------------------------------------------------------------------- This vulnerability can be triggered by luring a target user into running a malicious SMIL file locally or via a webpage. In the later scenar...

Apple Quicktime < 7.2 SMIL Remote Integer Overflow PoC

Exploit for multiple platform in category dos / poc ====================================================== Apple Quicktime SRC="available-sample.qtif" QTSRC="poc.smil" WIDTH="10" HEIGHT="10" PLUGINSPAGE=" www.apple.com/quicktime/download" TYPE="video/quicktime" /...

IBM AIX rmpvc工具本地缓冲区溢出漏洞

BUGTRAQ ID: 25217 IBM AIX是一款商业性质的UNIX操作系统。 IBM AIX的rmpvc工具在处理命令行参数时存在缓冲区溢出漏洞，本地攻击可能利用此漏洞导致系统崩溃。 如果执行rmpvc -l port logical name命令时，logical namel参数超过16个字符的话，就可以触发这个溢出，导致系统崩溃。 IBM AIX 4.3 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...