56796 matches found
mxbb module charts <= 1.0.0 - Remote File Inclusion Vulnerability
No description provided by source. Title : mxBB Module Charts = 1.0.0modulerootpath Remote File Include Vulnerability Author : ajann Contact : : S.Page : http://www.mx-system.com ERROR------------------------------------------------------ .... .. include$modulerootpath . 'language/lang' . $langua...
Blue Eye CMS <= 1.0.0 - Remote Cookie SQL Injection Vulnerability
No description provided by source. BlueEye CMS = 1.0.0 Remote Cookie SQL Injection Vulnerability found by ka0x ka0x01alt+64gmail.com Download: http://kent.dl.sourceforge.net/sourceforge/blueeyecms/blueeyecms-100preRC.rar need magicquotesgpc = Off - Vuln code: 10: if !empty$COOKIEBlueEyeCMSlogin /...
Joomla Component RokModule Blind SQLi [moduleid] Vulnerability
No description provided by source. ================================================================================================================== o Joomla Component RokModule Blind SQLi moduleid Vulnerability Software : comrokmodule version 1.1 Vendor : http://www.rockettheme.com/ Author :...
TextFileBB 1.0.16 Multiple Tag Script Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/17750/info TextFileBB is prone to multiple script-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before including it in dynamically generated...
PHP-Nuke <= 8.1.0.3.5b (Downloads) Remote Blind SQL Injection
No description provided by source. !/usr/bin/perl 0-Day PHP-Nuke = 8.1.0.3.5b Downloads Remote Blind SQL Injection Date: 2010.07.04 after 50 days the bug was discovered. Author/s: Dante90, WaRWolFz Crew Crew Members: 4lasthor, Andryxxx, Cod3, Gho5t, HeRtZ, N.o.3.X, RingZero, s3rg3770, Shades...
docuFORM Mercury WebApp 6.16a/5.20 Multiple XSS Vulnerabilities
No description provided by source. !-- docuFORM Mercury WebApp 6.16a/5.20 Multiple Cross-Site Scripting Vulnerabilities Vendor: docuFORM GmbH Product web page: http://www.docuform.de Affected version: 6.16a and 5.20 Summary: Unlimited options for production printing and customer solutions. Desc:...
Ziggurat Farsi CMS 'id' Parameter Unspecified Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/39311/info Ziggurat Farsi CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...
Microsoft Indexing Services for Windows 2000/NT 4.0 .htw Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1861/info A cross-site scripting vulnerability has been reported in Microsoft Indexing Services for Windows 2000/NT4 and its handling of the .htw extension. If a user inadvertantly opened a hostile link through a browser ...
Sun Java Web Start BasicServiceImpl Remote Code Execution Exploit
No description provided by source. $Id: javabasicserviceimpl.rb 11623 2011-01-22 00:16:57Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and ter...
PHPAlbum 0.2.2/0.2.3/4.1 Language.PHP File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17526/info phpAlbum is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary remote PHP code on an affected compute...
Webkit (Apple Safari < 4.1.2/5.0.2 & Google Chrome < 5.0.375.125) - Memory Corruption
No description provided by source. TITLE: WEBKIT APPLE SAFARI 4.1.2/5.0.2 & GOOGLE CHROME 5.0.375.125 MEMORY CORRUPTION VULNERABILITY TESTED OS: WINDOWS XP SP3 SEVERITY: HIGH CVE-NUMBER: CVE-2010-1813 DISCOVERED DATE: 2010-06-29 FIXED DATE: GOOGLE CHROME 2010-07-26 & APPLE SAFARI 2010-09-08 FIXED...
Mambo <= 4.5.3 & Joomla <= 1.0.7 - (feed) Denial of Service Exploit
No description provided by source. ?php Mambo/Joomla Path Disclosure & Remote DOS Exploit by trueend5 Computer Security Science Researchers Institute http://www.KAPDA.ir errorreporting0; inisetmaxexecutiontime,0; inisetdefaultsockettimeout, 5; obimplicitflush 1; echo'html head meta...
Sun Java Runtime New Plugin docbase Buffer Overflow
No description provided by source. $Id: javadocbasebof.rb 11513 2011-01-08 00:25:44Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
NoticeWare Email Server 4.6 NG LOGIN Messages Denial Of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30605/info NoticeWare Email Server NG is prone to a denial-of-service vulnerability because it fails to handle user-supplied input. Remote attackers can exploit this issue to deny service to legitimate users. NoticeWare...
Oracle 10g KUPM$MCP.MAIN - SQL Injection Exploit (2)
No description provided by source. !/usr/bin/perl Remote Oracle KUPM$MCP.MAIN exploit 10g - Version 2 - New evil cursor injection tip! - No create procedure privilege needed! - See: http://www.databasesecurity.com/ Cursor Injection Grant or revoke dba permission to unprivileged user Tested on...
LinksCaffe 2.0/3.0 Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19763/info LinksCaffe is prone to an authentication-bypass vulnerability because of a lack of required authentication on the application's administrative script. An attacker can use administrative functions simply by...
kubix <= 0.7 - Multiple Vulnerabilities exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on \r\n"; echo "Thanks to rgod for the php code and Marty for the Love\r\n\r\n"; if $argc Related: path of the file to include\r\n"; echo " |- Es: php ".$argv0." localhost /kubix/ 1 ../../../../../etc/passwd\r\n\r\n"; echo " 2 -...
Borland InterBase isc_create_database() Buffer Overflow
No description provided by source. $Id: ibisccreatedatabase.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...
Antologic Antolinux 1.0 Administrative Interface NDCR Parameter Remote Command Execution
No description provided by source. source: http://www.securityfocus.com/bid/9495/info It has been reported that Antologic Antolinux may be prone to a remote command execution vulnerability that may allow an attacker to execute arbitrary commands with the privileges of the server hosting the...
Edgewall Software Trac 0.7.1/0.8/0.9 Search Module SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15720/info Trac is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow a...
CuteFlow 2.11.2 - Arbitrary File Upload Vulnerability
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
SecureCRT 2.4/3.x/4.0 SSH1 Identifier String Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/5287/info The SecureCRT client is prone to a buffer-overflow condition when attempting to handle an overly long SSH1 protocol identifier string. Reportedly, an attacker can exploit this issue via a malicious server...
Joomla JE Job Component SQL injection Vulnerability
No description provided by source. ----------------------------Information------------------------------------------------ +Name : joomla JE Job Component = SQL injection Vulnerability Exploit +Autor : Easy Laster +Date : 30.09.2010 +Script : joomla JE Job Component +Demo :...
Tagit! Tagit2b 2.1.B Build 2 tagmin/index.php adminpath Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application...
BitTorrent 6.0 and uTorrent 1.6/1.7 Peers Window Remote Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27321/info BitTorrent and uTorrent are prone to a remote code-execution vulnerability because the applications fail to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute...
Realtek Media Player Playlist Buffer Overflow
No description provided by source. $Id: realtekplaylist.rb 11127 2010-11-24 19:35:38Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
d.net cms (lfi/sqli) Multiple Vulnerabilities
No description provided by source. + d.net CMS LFI/SQLI Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download : http://sourceforge.net/projects/dnet/ + SQL Injection PoC's - No admin required...
Emule 0.27 b Empty Nickname Chat Request Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7189/info A denial of service vulnerability has been reported for Emule. The vulnerability occurs when a Emule client recieves a chat request without a nickname. This vulnerability was reported for Emule clients prior to...
w-cms 2.0.1 - Multiple Vulnerabilities
No description provided by source...
Sun Java Runtime Environment 1.x - Image Parsing Heap Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28125/info Sun Java Runtime Environment is prone to a heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to...
Sambar Server 4.2 beta 7 Batch CGI Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1002/info The Sambar Web/FTP/Proxy Server for Windows NT and 2000 supports DOS-style batch programs as CGI scripts. A remote attacker can use any batch file used by the server in the 'cgi-bin' directory to run any valid...
Alpha Black Zero <= 1.04 Remote Denial of Service Exploit
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h ifdef WIN32 include winsock.h include string.h include errno.h void stderrvoid char error; switchWSAGetLastError case 10004: error = Interrupted system call; break; case 10009: error = Bad...
Pligg 1.1.2 - Blind SQL Injection and XSS Vulnerabilities
No description provided by source...
RoundCube Webmail <= 0.2-3 beta Code Execution Vulnerability
No description provided by source. Public Release Date of POC: 2008-12-22 Author: Jacobo Avariento Gimeno Sofistic CVE id: CVE-2008-5619 Bugtraq id: 32799 Severity: Critical Vulnerability reported by: RealMurphy Intro ---- Roundcube Webmail is a browser-based IMAP client that uses chuggnutt.com...
phpBB 2.0.6 Privmsg.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9290/info phpBB is prone to a cross-site scripting vulnerability in the 'privmsg.php' script. The source of the problem is that HTML and script code are not adequately sanitized from input supplied via URI parameters. Thi...
SocketMail 2.2.1 Lostpwd.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26138/info SocketMail is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in th...
Guru JustAnswer Professional 1.25 Multiple SQL Injection Vulnerabilities
No description provided by source. / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...
Immo Makler Script SQL Injection Vulnerability
No description provided by source. ----------------------------Information------------------------------------------------ +Name : Immo Makler = SQL injection Vulnerability Proof of Concept +Autor : Easy Laster +Date : 17.12.2010 +Script : Immo Makler +Vendor http://www.mhproducts.de/ +Price :...
NVIDIA Graphics Driver <= 8774 Local Buffer Overflow Exploit
No description provided by source. / Copyright c 2005 Matthieu Herrb Copyright c 2006 Derek Abdine, Marc Bevand Permission to use, copy, modify, and distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and this permission notice...
BrowserCRM 0 Results.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16435/info BrowserCRM is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...
PSO Proxy 0.91 - Stack Buffer Overflow
No description provided by source. $Id: psoproxy91overflow.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...
PageSquid CMS (index.php page) 0.3 Beta - Remote SQL Injection Vulnerability
No description provided by source. ===================================================================== PageSquid CMS index.php page Remote SQL Injection Vulnerability ===================================================================== ,--^----------,--------,-----,-------^--, | |||||||||...
Microsoft SQL Server Payload Execution
No description provided by source. $Id: mssqlpayload.rb 11392 2010-12-21 20:36:34Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...
PlatinumFTPServer 1.0.18 Multiple Malformed User Name Connection Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12790/info PlatinumFTPServer is prone to a denial-of-service vulnerability. This issue is reported to occur when a remote user makes 50 or more connections that attempt to authenticate with a malformed user name...
SlimCMS <= 1.0.0 (redirect.php) Privilege Escalation Exploit
No description provided by source. !/usr/bin/php -q ?php / SlimCMS = 1.0.0 Privilege Escalation Exploit Discovered By StAkeR aka athos - StAkeRathotmaildotit Discovered On 11/10/2008 http://downloads.sourceforge.net/slimcms/SlimCMS-1.0.0.tgz?modtime=1217343227&bigmirror=0 / errorreporting0; $host...
PhpGedView 2.5/2.6 Individual.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11882/info It is reported that PhpGedView is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issue could permit a remo...
PHP Content Architect 0.9 pre 1.2 MFA_Theme.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23843/info PHP Content Architect is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and...
pixie cms (xss/sql) Multiple Vulnerabilities
No description provided by source. Pixie CMS Multiple Vulnerabilities Pixie is a free, open source web application that will help you quickly create your own website. Many people refer to this type of software as a 'content management system cms' http://www.getpixie.co.uk. Pixie is written in PHP...
Thwboard Beta 2.8 v_profile.php user Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/15763/info ThWboard is prone to multiple input validation vulnerabilities. The application is vulnerable to HTML injection, cross-site scripting, and SQL injection; these issues are due to a lack of proper sanitization of...
Campsite 2.6.1 implementation/management/db_connect.php g_documentRoot Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/23874/info Campsite is prone to multiple remote file-include vulnerabilities. Exploiting this issue allows remote attackers to execute code in the context of the webserver. This issue affects Campsite 2.6.1. Earlier...