TaskFreak! 0.6.4 - Multiple Cross-Site Scripting Vulnerabilities

TaskFreak! v0.6.4 Multiple Cross-Site Scripting Vulnerabilities Vendor: Stan Ozier Product web page: http://www.taskfreak.com Affected version: 0.6.4 multi-user Summary: TaskFreak! Original is a simple but efficient web based task manager written in PHP. Desc: TaskFreak! suffers from multiple XSS...

cultbooking 2.0.4 - Multiple Vulnerabilities

cultbooking 2.0.4 - Multiple Vulnerabilities CultBooking 2.0.4 lang Local File Inclusion Vulnerability Vendor: Cultuzz Digital Media GmbH Product web page: http://www.cultuzz.com Affected version: 2.0.4 Summary: Open source hotel booking system Internet Booking Engine IBE. Via a central api calle...

AutoPlay v1.33 (autoplay.ini) Local Buffer Overflow Exploit (SEH)

Exploit for windows platform in category local exploits !/usr/bin/python AutoPlay v1.33 autoplay.ini Local Buffer Overflow Exploit SEH Vendor: Naugher Software Product web page: http://www.naughter.com Affected version: 1.33 Summary: AutoPlay is a shareware application used for making autorun.ini...

MantisBT <=1.2.3 (db_type) Local File Inclusion Vulnerability

Exploit for php platform in category web applications Vendor: MantisBT Group Product web page: http://www.mantisbt.org Version affected: library/adodb/adodb.inc.php ... 4109: 4110: $file = ADODBDIR."/drivers/adodb-".$db.".inc.php"; 4111: @includeonce$file;...

Exponent CMS 0.97 Cross Site Scripting / File Disclosure / Local File Inclusion / Shell Upload

Exponent CMS v0.97 Multiple Vulnerabilities Vendor: OIC Group Inc. Product web page: http://www.exponentcms.org Affected version: 0.97 Summary: Open Source Content Management System PHP+MySQL. Desc: Exponent CMS suffers from multiple vulnerabilities: 1. Local File Inclusion / File Disclosure...

Exponent CMS v0.97 Multiple Vulnerabilities

Exploit for php platform in category web applications =========================================== Exponent CMS v0.97 Multiple Vulnerabilities =========================================== Vendor: OIC Group Inc. Product web page: http://www.exponentcms.org Affected version: 0.97 Summary: Open Source...

Exponent CMS 0.97 - Multiple Vulnerabilities

Exponent CMS 0.97 - Multiple Vulnerabilities Exponent CMS v0.97 Multiple Vulnerabilities Vendor: OIC Group Inc. Product web page: http://www.exponentcms.org Affected version: 0.97 Summary: Open Source Content Management System PHP+MySQL. Desc: Exponent CMS suffers from multiple vulnerabilities: 1...

Zen Cart v1.3.9f (typefilter) Local File Inclusion Vulnerability

Exploit for php platform in category web applications ================================================================ Zen Cart v1.3.9f typefilter Local File Inclusion Vulnerability ================================================================ Vendor: Zen Ventures, LLC Product web page:...

Zen Cart 1.3.9f Local File Inclusion

Zen Cart v1.3.9f typefilter Local File Inclusion Vulnerability Vendor: Zen Ventures, LLC Product web page: http://www.zen-cart.com Version affected: 1.3.9f Summary: Zen Cart is an online store management system. It is PHP-based, using a MySQL database and HTML components. Support is provided for...

Microsoft Visio 2010 v14.0.4514.1004 (dwmapi.dll) DLL Hijacking Exploit

Summary Microsoft Visio is a diagramming program for Microsoft Windows that uses vector graphics to create diagrams. Description MS Visio 2010 suffers from a dll hijacking vulnerability that enables the attacker to execute arbitrary code on a local level. The vulnerable extension is .vss thru...

Adobe ExtendedScript Toolkit CS5 v3.5.0.52 (dwmapi.dll) DLL Hijacking Exploit

Summary The ExtendScript Toolkit ESTK 3.5.0 is a scripting utility included with Adobe® Creative Suite CS5 and other Adobe applications. The ESTK is used for creating, editing, and debugging JavaScript to be used for scripting Adobe applications. Description Adobe ExtendScript Toolkit CS5 suffers...

UK One Media CMS - id Error-Based SQL Injection

UK One Media CMS - id Error-Based SQL Injection O / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ | | | | | UK One Media CMS id Error Based SQL Injection Vulnerability | | | | | | | |...

Adobe Shockwave Player 11.5.6.606 - DIR Multiple Memory Vulnerabilities

Adobe Shockwave Player 11.5.6.606 - DIR Multiple Memory Vulnerabilities / Title: Adobe Shockwave Player 11.5.6.606 DIR Multiple Memory Vulnerabilities Vendor: Adobe Systems Incorporated Product web page: http://www.adobe.com Summary: Over 450 million Internet-enabled desktops have installed Adobe...

Adobe Shockwave Player 11.5.6.606 (DIR) Multiple Memory Vulnerabilities

Summary Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player. These people now have access to some of the best the Web has to offer - including dazzling 3D games and entertainment, interactive product demonstrations, and online learning applications. Shockwave Player...

Music Tag Editor 1.61 build 212 Remote Buffer Overflow PoC

Summary Simple-to-use WMA / MP3 tag editor that allows you to change tagged information about your MP3/WMA music files. Quickly change music filenames, create PLS/M3U playlists and even add lyrics to your music files, with full UNICODE support. Music filenames and tags are never what they should,...

Carom3D 5.06 Unicode Buffer Overrun/DoS Vulnerability

Summary Carom 3D is an online multi-user billiard game created with special 3D graphic effects bringing every aspect such as 6 ball, 9 ball, 8 ball and other Billiard games to life. Description The world famous korean game Carom3D suffers from a buffer overflow and a denial of service...

Eserv 3.x FTP Server (ABOR) Remote Stack Overflow PoC

Summary Eserv/3.x - Mail, News, Web and Proxy Servers - Mail Server SMTP, IMAP4 and POP3 - News Server NNTP - Web Server HTTP - FTP Server - Proxy Servers HTTP, FTP, Socks, etc - Finger Server - Built-in scheduler and dialer. Description Stack-based buffer overflow in the FTP server in Etype Eser...