56796 matches found
DSLogin 1.0 Index.PHP Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/17262/info DSLogin is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit...
ECommPro 3.0 - Admin/Login.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13274/info EcommProV3 is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...
Behold! Software Web Page Counter 2.7 - Denial of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/267/info A set of vulnerabilities in the counter.exe web hit counter program enables denial of service attacks. A malicious user can create a malformed like ,1 entry in the counter.log file by requesting a URL of the form...
PrestaShop 1.1 order.php PATH_INFO Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/32689/info PrestaShop is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...
Linux VServer Project 1.2x CHRoot Breakout Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9596/info VServer is reported prone to a breakout vulnerability that allows a malicious user to escape from the context of the chrooted root directory of the virtual server. This issue is due to the VServer application...
Prototype of an PHP application 0.1 ident/loginliste.php path_inc Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/24266/info 'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application. An attacker may leverage these issues to...
Apache Cygwin 1.3.x/2.0.x Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9733/info It has been reported that Apache may be prone to a directory traversal vulnerability that may allow a remote attacker to access information outside the server root directory. This issue is only reported to prese...
ISP Site Man 0 Admin_Login.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17347/info Site Man is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow ...
Azimut Technologie Admin Login Bypass vulnerability
No description provided by source...
osCommerce 2.2 admin/products_attributes.php page Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the...
QuickCms 5.4 - Multiple Vulnerabilites
No description provided by source. Exploit Title: QuickCms 5.4 Multiple Vulnerabilites Date: 04/08/2014 Author: shpendk Software Link: http://opensolution.org/download,en,18.html?sFile=Quick.Cms/Quick.Cmsv5.4.zip Version: 5.4 Tested on: Xampp on Windows Reflected XSS Vulnerability in Admin Area:...
4images <= 1.7.7 Filter Bypass HTML Injection/XSS Vulnerability
No description provided by source. || || | || o,7 || . o7 || q||| o\, : / / . =By: Qabandi =Email: iqaahotmail.fr From Kuwait, PEACE... =Vuln: 4images = 1.7.7 - filter bypass HTML injection/XSS =INFO: =BUY: =DORK: -=/:Conditions:=-...
GD Graphics Library <= 2.0.34 (libgd) gdImageCreateXbm Function Unspecified DoS
No description provided by source. source: http://www.securityfocus.com/bid/24651/info The GD graphics library is prone to multiple vulnerabilities. An attacker can exploit this issue to cause denial-of-service conditions or execute arbitrary code in the context of applications implementing the...
LibLime Koha <= 4.2 - Local File Inclusion Vulnerability
No description provided by source. Exploit Title: Koha Opac Local File Inclusion Google Dork: inurl:koha/opac-main.pl Date: 17.11.2011 Author: Akin TosunlarVigasis Labs Software Link: www.koha.org Version: 4.2 Tested on: LinuxApache 2.2.14 CVE : Vigasis Pentest Team www.vigasis.com 0-Day Exploit...
Pre Hotel and Resorts 'user_login.asp' Multiple SQL Injection Vulnerabilies
No description provided by source. source: http://www.securityfocus.com/bid/27450/info Pre Hotel and Resorts is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...
parachat 5.5 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11272/info It is reported that ParaChat is susceptible to a directory traversal vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input data. This vulnerability allows...
iStArtApp FileXChange 6.2 iOS - Multiple Vulnerabilities
No description provided by source...
DeluxeBB <= 1.07 (cp.php) Create Admin Exploit
No description provided by source. !/usr/bin/perl DeluxeBB = 1.07 Create Admin Exploit www.h4ckerz.com / www.hackerz.ir / www.aria-security.net ./2006-6-25 Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use IO::Socket; use LWP::UserAgent; use HTTP::Cookies; $host = $ARGV0; $uname = $ARGV...
Linux x86 ASLR deactivation - 83 bytes
No description provided by source. / Title: Linux x86 ASLR deactivation - 83 bytes Author: Jean Pascal Pereira [email protected] Web: http://0xffe4.org Disassembly of section .text: 08048060 start: 8048060: 31 c0 xor %eax,%eax 8048062: 50 push %eax 8048063: 68 70 61 63 65 push $0x65636170 8048068...
MPlayer Malformed OGM File Handling DoS
No description provided by source. source: http://www.securityfocus.com/bid/34136/info MPlayer is prone to multiple denial-of-service vulnerabilities when handling malformed media files. Successfully exploiting this issue allows remote attackers to deny service to legitimate users...
miniature java web server <= 1.71 - Multiple Vulnerabilities
No description provided by source...
Internet Explorer 8 CSS 'expression' Property Cross Site Scripting Filter Bypass Weakness
No description provided by source. source: http://www.securityfocus.com/bid/32780/info Microsoft Internet Explorer is a web browser for the Microsoft Windows operating system. Internet Explorer 8 includes a cross-site-scripting filter that is designed to prevent cross-site-scripting attacks again...
D.R. Software Audio Converter 8.1 - DEP Bypass Exploit
No description provided by source...
Adobe ColdFusion Server <= 8.0.1 wizards/common/_logintowizard.cfm Query String XSS
No description provided by source. source: http://www.securityfocus.com/bid/36046/info Adobe ColdFusion is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script...
PeaZip <= 2.6.1 Zip Processing Command Injection
No description provided by source. $Id: peazipcommandinjection.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
Bandwebsite <= 1.5 (Login) Remote Add Admin Exploit
No description provided by source...
Symphony <= 1.7.01 (non-patched) Remote Code Execution Exploit
No description provided by source. ?php Symphony = 1.7.01 non-patched Remote Command Execution Exploit by Raz0r http://Raz0r.name Software site: http://21degrees.com.au/ works regardless magicquotesgpc echo -----------------------------------------------------------------\n; echo Symphony = 1.7.0...
Novell Groupwise Enhancement Pack 5.5 Enhancement Pack DoS
No description provided by source. source: http://www.securityfocus.com/bid/972/info By requesting a long URL from a Novell Groupwise 5.5 webserver with the Enhancement Pack installed, it is possible to cause the server to abend, the Java.nlm to take up all available CPU resource, or to stop the...
Robin Twombly A1 HTTP Server 1.0 - Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2435/info It is possible for a remote user to cause a denial of service condition in Robin Twombly A1 Server. Submitting a specially crafted request via a telnet connection, could cause the A1 server to crash. A restart o...
Wordpress 1.2 Wp-login.PHP HTTP Response Splitting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11348/info Wordpress is reported prone to a HTTP response splitting vulnerability. The issue presents itself due to a flaw in the affected script that allows an attacker to manipulate how GET requests are handled. A remot...
Microsoft Windows Media Player 7.0 .ASX Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1980/info Windows Media Player is an application used for digital audio, and video content viewing. An unsafe buffer copy involving remotely-obtained data exists in the Active Stream Redirector ASX component in Windows...
Evandor Easy notesManager 0.0.1 login.php username Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/20803/info Easy notesManager is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to...
GV 2.x/3.x Malformed PDF/PS File Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/5808/info gv is a freely available, open source Portable Document Format PDF and PostScript PS viewing utility. It is available for Unix and Linux operating systems. It has been reported that an insecure sscanf function...
Kaspersky Internet Security 6.0 - SSDT Hooks Multiple Local Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/24491/info Kaspersky Internet Security 6 is prone to multiple local vulnerabilities. Exploiting these vulnerabilities allows local attackers to crash affected computers, denying service to legitimate users. Attackers migh...
Wordpress Plugin Spreadsheet <= 0.6 - SQL Injection Vulnerability
No description provided by source. =========================================== There's standart sql-injection in Spreadsheet = 0.6 Plugin Author : 1ten0.0net1 Script : Wordpress Plugin Spreadsheet = 0.6 v. Download : http://timrohrer.com/blog/?pageid=71 BUG : Remote SQL-Injection Vulnerability Do...
Seir Anphin V666 Community Management System - Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/19244/info Seir Anphin V666 Community Management System is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. These...
AbleDesign MyCalendar 2.20.3 Index.PHP Multiple Cross-Site Scripting Vulnerabilities
No description provided by source...
pyrocms 2.1.1 - Multiple Vulnerabilities
No description provided by source. PyroCMS 2.1.1 CRLF Injection And Stored XSS Vulnerability Vendor: HappyNinjas Ltd Product web page: http://www.pyrocms.com Affected version: 2.1.1 Community Summary: PyroCMS is a CMS built using the CodeIgniter PHP framework. Using an MVC architecture it was bui...
Axigen <= 2.0.0b1 Remote Denial of Service Exploit (2)
No description provided by source. / doaxigen-v2.c axigen 1.2.6 - 2.0.0b1 DoS x86-lnx by mu-b - Sun Oct 29 2006 - Tested on: AXIGEN 1.2.6 lnx AXIGEN 2.0.0b1 lnx parsing error results in login without username & password! which in turn causes a NULL pointer dereference.. / /...
Mantis 0.x Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/10994/info Mantis is a web-based bug tracking system. It is written in PHP and supported by a MySQL database. It is reported that Mantis is affected by cross-site scripting vulnerabilities. These issues are due to a failu...
SmarterMail 7.x (7.2.3925) - Stored Cross Site Scripting Vulnerability
No description provided by source...
Yaws <= 1.55 Terminal Escape Sequence in Logs Command Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37716/info Yaws is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in logfiles. Attackers can exploit this issue to execute arbitrary commands in a terminal. Yaws 1.8...
Sun JavaMail 1.3 API MimeMessage Infromation Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13683/info The MimeMessage method in the Sun JavaMail API does not perform sufficient validation on message number values that are passed to the method during requests. An attacker that can successfully authenticate to an...
SlimCMS <= 1.0.0 (edit.php) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl =starting -------------------------------------------------------- SlimCMS = 1.0.0 edit.php Remote SQL Injection Exploit -------------------------------------------------------- by athos - stakerathotmaildotit download on sourceforge File edit.php...
HTML2HDML 1.0.3 - File Conversion Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12003/info html2hdml is prone to a buffer overflow vulnerability. This issue is exposed when converting HTML files to HDML Handheld Device Markup Language. Since HTML files may originate from an external or untrusted...
IBM AIX <= 4.2.1, Sun Solaris <= 7.0 LC_MESSAGES libc Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/268/info A buffer overflow in libc's handling of the LCMESSAGES environment variable allows a malicious user to exploit any suid root program linked agains libc to obtain root privileges. This problem is found in both IBM...
Veritas NetBackup <= 6.0 (bpjava-msvc) Remote Exploit (win32)
No description provided by source. !C:\Perl\bin\perl.exe -w Vertias Netbackup Win32 format string exploit Code By: johnhatdigitalmunitiondotcom & kfatdigitalmunitiondotcom For win2k/xp pre sp2 we overwrote PEBFastlock - rtlentercritical For win xp sp2 we overwrote SEH...
VSO Medoa Player 1.0.2.2 - Local Denial of Services PoC
No description provided by source. !usr/bin/perl Exploits title :VSO Medoa Player Version 1.0.2.2 Local Denial Of Services poc Date : 2010/01/02 Aouther : SarBoT511 downloads :www.vso-software.fr tested on :win xp sp2 VSO Medoa Player Version 1.0.2.2 $file=SarBoT511.ape; $boom=A x 2000;...
candypress ecommerce suite 4.1.1.26 Multiple Vulnerabilities
No description provided by source. WwW.BugReport.ir AmnPardaz Security Research & Penetration Testing Group Title: CandyPress eCommerce suite Vendor: http://www.candypress.com/ Bugs: SQL Injection + XSS + Path Disclosure in CandyPress Vulnerable Version: 4.1.1.26 Exploit: Available Fix Available:...