56796 matches found
Solaris 7.0/8 IPCS Timezone Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2581/info Solaris is the variant of the UNIX Operating System distributed by Sun Microsystems. Solaris is designed as a scalable operating system for the Intel x86 and Sun Sparc platforms, and operates on machines varying...
Microsoft Internet Explorer 5/6 CSSText Bold Font Denial of Service
No description provided by source. source: http://www.securityfocus.com/bid/5027/info A problem with Microsoft Internet Explorer may make it possible to deny service to users of the browser. The problem is in the handling of certain types of stylesheet input. It may be possible to crash IE. When ...
Xoops 1.3.5 Private Message System Font Attributes HTML Injection
No description provided by source. source: http://www.securityfocus.com/bid/6344/info Xoops includes a Private Message System for users, so that they may send messages to one another. HTML tags used for font attributes are not sufficiently filtered of malicious HTML code. This makes it possible f...
Easyedit CMS subcategory.php intSubCategoryID Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/32369/info Easyedit is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...
WordPress Facebook Opengraph Meta Plugin plugin <= 1.0 - SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress Facebook Opengraph Meta Plugin plugin = 1.0 SQL Injection Vulnerability Date: 2011-09-03 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/facebook-opengraph-meta-plugin.z...
SCO OpenServer 5.0.x 'mana' PATH_INFO Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8618/info It has been reported that SCO OpenServer Inertnet Manager 'mana' process is prone to a privilege escalation issue allow local users to execute arbitrary code with elevated privileges. mana normally requires...
family connections <= 2.1.3 - Multiple Vulnerabilities
No description provided by source. Family Connections = 2.1.3 Multiple Remote Vulnerabilities Name Family Connections Vendor http://www.familycms.com Versions Affected = 2.1.3 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Da...
Messages Library 2.0 Arbitrary Administrator Account Vulnerability
No description provided by source. head titleThE g0bL!N Messages Library 2.0 Remote Add Admintsrator Account /title base target=left link rel=stylesheet href=style.css /head form method=POST action=http://path/sms/admin/mod.php?Action=Add table border=0 cellpadding=0 cellspacing=0...
Anzio Web Print Object <= 3.2.30 ActiveX Buffer Overflow Exploit
No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Anzio Web Print Object Buffer Overflow Advisory Information Title: Anzio Web Print Object Buffer Overflow Advisory ID: CORE-2008-06...
WSN Guest 1.02 (orderlinks) SQL Injection Vulnerability
No description provided by source...
vBulletin 4.0.8 PL1 XSS Filter Bypass within Profile Customization
No description provided by source. Exploit Title: vBulletin 4.0.8 PL1 - XSS Filter Bypass within Profile Customization Google Dork: Powered by vBulletin Version 4.0.8 -vBulletin.com is now powered by Date: 20th November 2010 Author: MaXe Software Link: Commercial software. Version: 4.0.8 PL1...
Wordpress Persuasion Theme 2.x - Arbitrary File Download and File Deletion Exploit
No description provided by source...
Solaris 2.5.0/2.5.1 ps & chkey Data Buffer Exploit
No description provided by source. cat psexpl.po EOF domain SUNWOSTOSCMD msgid usage: %s\n%s\n%s\n%s\n%s\n%s\n%s\n msgstr...
MS Windows NT Crash with an Extra Long Username DoS Exploit
No description provided by source. You can crash an NT box possibly W95 too by sending a very long username in a Winpopup message. This is easy to do from UNIX with 'smbclient -U LOTSandLOTSofcrap -M host'. milw0rm.com 1997-04-01...
Jax PHP Scripts 1.0/1.34/2.14/3.31 shrimp_petition.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/14481/info Jax PHP Scripts are affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input. An attacker may leverage any of the...
MDPro Module CWGuestBook <= 2.1 - Remote SQL Injection Vulnerability
No description provided by source. Author: Dante90, WaRWolFz Crew Title: 0-Day MDPRO CWGuestBook = v2.1 Mod Remote SQL Injection By Dante90 MSN: [email protected] Web: www.warwolfz.org 0-Day MDPRO CWGuestBook = v2.1 Mod Remote SQL Injection By Dante90 code...
Jax PHP Scripts 1.0/1.34/2.14/3.31 guestbook File Client IP Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/14482/info Jax PHP Scripts are affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input. An attacker may leverage any of the...
Oracle Virtual Server Agent Command Injection
No description provided by source...
Novell ZENworks Configuration Management Remote Execution
No description provided by source. $Id: zenworksuploadservlet.rb 11099 2010-11-22 17:53:49Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
AuraCMS (pfd.php) SQL Injection Vulnerability
No description provided by source. ----------------------------------------------------------------------- AuraCMS pfd.php SQL Injection Vulnerability ----------------------------------------------------------------------- Author : Arianom [email protected] Homepage :...
Myiosoft EasyBookMarker 4 - (Parent) SQL Injection Vulnerability
No description provided by source. ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ==============================================================================...
XRayCMS 1.1.1 - SQL Injection Vulnerability
No description provided by source...
VariCAD 2010-2.05 EN Local buffer overflow
No description provided by source. / Exploit Title: VariCAD 2010-2.05 EN Local buffer overflow : Date: 15 March 2010 Author: n00b Realname: carl cope Software Link: http://www.varicad.com/en/home/ Version: All versions are affected. Tested on: Windows xp sp3,Vista sp2,Linux unbuntu CVE : if exist...
Internet Photoshow - 'login_admin' Parameter Unauthorized Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29227/info Internet Photoshow is prone to a vulnerability that can result in unauthorized database access. Attackers can exploit this issue to gain administrative access to the application. Internet Photoshow Special...
Microsoft Internet Explorer 6.0 TriEditDocument Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18946/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability. This issue is triggered when an attacker convinces a victim user to visit a malicious website. Remote attackers may exploit this issue ...
escripts software e_board 4.0 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12048/info It is reported that eBoard is vulnerable to a directory traversal vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input. By including '../' directory traversa...
Apple QuickTime PICT PnSize Buffer Overflow
No description provided by source. $Id: applequicktimepnsize.rb 13691 2011-09-03 21:17:58Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...
MySQL 3.23.x/4.0.x COM_CHANGE_USER Password Length Account Compromise Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6373/info A flaw in the password authentication mechanism for MySQL may make it possible for an authenticated database user to compromise the accounts of other database users. The flaw lies in the fact that the server use...
VisualShapers ezContents 1.x/2.0 db.php Arbitrary File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/9638/info It has been reported that ezContents may be prone to a file include vulnerability in multiple modules. The problem reportedly exists because remote users may influence the 'GLOBALSrootdp' and 'GLOBALSlanguagehom...
Air Disk Wireless 1.9 iPad iPhone - Multiple Vulnerabilities
No description provided by source. Title: ====== Air Disk Wireless 1.9 iPad iPhone - Multiple Vulnerabilities Date: ===== 2013-02-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=850 VL-ID: ===== 850 Common Vulnerability Scoring System:...
Libertas Enterprise CMS 3.0 Index.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15950/info Enterprise CMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...
ProArcadeScript to Game (game) SQL Injection Vulnerability
No description provided by source...
WM Downloader 3.1.2.2 2010.04.15 Buffer Overflow (SEH)
No description provided by source. !/usr/bin/python Exploit Title: WM Downloader 3.1.2.2 2010.04.15 Buffer Overflow SEH Date: 2010-07-28 Author: fdisk @fdiskyou e-mail: fdiskyou at deniable.org Version: 3.1.2.2 2010.04.15 Tested on Windows XP SP3 en payload = \x41 43485 payload += \xeb\x16\x90\x9...
Virtual Programming VP-ASP 4.00/5.00 shopsearch.asp SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9133/info It has been reported that VP-ASP may be prone to a SQL injection vulnerability that may allow an attacker to disclose sensitive information by supplying malicious SQL code to the underlying database. The problem...
webSPELL <= 4.01.01 (getsquad) Remote SQL Injection Exploit
No description provided by source. WebSPELL = 4.01.01 getsquad Remote SQL Injection Exploit by: Kiba EXPLOIT: http://PAGE/PATH/index.php?site=squads&getsquad=Where+1=0+Union+Select+1,1,username,1,password,1+from+PREFIXuser/ REPLACE: if the website is http://yourwebsite.de/webspell/index.php PAGE...
Check Point Software Firewall-1 3.0/1 4.0/1 4.1 Session Agent Dictionary Attack (1)
No description provided by source. source: http://www.securityfocus.com/bid/1662/info A vulnerability exists in all versions of the Check Point Session Agent, part of Firewall-1. Session Agent works in such a way that the firewall will establish a connection back to the client machine. Upon doing...
TermiSBloG 1.0 - SQL Injection(s) Vulnerability
No description provided by source...
SugarCRM 1.x/2.0 Module Traversal Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/11740/info SugarCRM is reported prone to multiple vulnerabilites arising from insufficient sanitization of user-supplied input. These issues can a remote attacker to carry out cross-site scripting, HTML injection, SQL...
E-PHP B2B Marketplace Multiple Vulns
No description provided by source. / Name : E-PHP B2B Marketplace Multiple Vulns WebSite : http://www.ephpscripts.com/b2b-trading-portal.php Price : 150 USD Author : Hamza 'MizoZ' N. Email : [email protected] / XSS - genconfirm.php shows the error message of $GET'errmsg' , but it's not protected...
Prototype of an PHP application 0.1 ident/loginmodif.php path_inc Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/24266/info 'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application. An attacker may leverage these issues to...
Alkacon OpenCms 7.x Multiple Input Validation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/35979/info OpenCms is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an authenticated attacker to obtain sensitive...
Web-Ideas Web Shop Standard SQL Injection Vulnerability
No description provided by source. Exploit Title: SQL injection in web-ideas web shop standard Date: 31.08.2010 Author: Ariko-Security Software Link: http://www.web-ideas.com.au/web-shopstandard Version: ALL Tested on: ALL CVE : n/a Ariko-Security: Security Audits , Audyt bezpiecze?stwa Advisory:...
Freefloat FTP Server PUT Command Buffer Overflow
No description provided by source...
OSTicket 1.2/1.3 Support Cards View.PHP Cross-Site Scripting Vulnerability
No description provided by source...
OSSIM 2.1.5 - Remote Command Execution
No description provided by source...
ExpressionEngine 1.2.1 HTTP Response Splitting and Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/27128/info ExpressionEngine is prone to an HTTP-response-splitting vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...
Flyspray 0.9.9.6 CSRF Vulnerability
No description provided by source. Exploit Title: Flyspray 0.9.9.6 CSRF Vulnerability Date: 06 Feb 2012 Author: Vaibhav Gupta Software Link: http://flyspray.org/flyspray-0.9.9.6.zip Version: 0.9.9.6 +---+CSRF Add Admin Account after authentication+---+ html body...
OSSIM 2.1.5 - Arbitrary File Upload
No description provided by source...
Ignition 1.3 (comment.php) Local File Inclusion Vulnerability
No description provided by source. Ignition 1.3 === Local File Include By n0n0x Homepage: http://priasantai.uni.cc/ Download script :http://launchpad.net/ignition/trunk/1.3/+download/ignition-1.3.tar.gz ========================================= xpl :...
Canon GP300 Remote Malformed HTTP Get Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8121/info A problem in the Canon GP-300 has been reported in the handling of some types of malformed web requests. This issue could result in the denial of service to legitmate users of the print server. GET /...