56796 matches found
TBmnetCMS 1.0 'content' Parameter Cross Site Scripting Vulnerability
No description provided by source...
Prototype of an PHP application 0.1 ident/ident.inc.php path_inc Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/24266/info 'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application. An attacker may leverage these issues to...
PluggedOut Nexus 0.1 forgotten_password.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16915/info PluggedOut Nexus is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...
HP-UX 10.x/11.x Aserver PATH Vulnerability
No description provided by source. source : http://www.securityfocus.com/bid/1929/info Aserver is a server program that ships with HP-UX versions 10.x and above that is used to interface client applications with the audio hardware. Because it talks to hardware, it is installed setuid root by...
Blog:CMS 4.1 Thumb.PHP Remote File Include Vulnerability
No description provided by source...
Progitek Visionner Photos 2.0 - File Format DoS
No description provided by source...
EditTag 1.2 mkpw.cgi plain Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21891/info EditTag is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the...
EditTag 1.2 edittag_mp.cgi file Variable Arbitrary File Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/21890/info EditTag is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow a remote attacker to access any file...
Skull-Splitter Guestbook 1.0/2.0/2.2 - Multiple HTML Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/13632/info Skull-Splitter Guestbook is prone to multiple HTML injection vulnerabilities. It is possible to inject HTML and script code into the title and content of posted messages. The attacker-supplied HTML and script...
TimeTrex Time 2.2 and Attendance Module - Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/30789/info TimeTrex is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code ...
Patient folder (THEME ASP) Local SQL Injection Vulnerability
No description provided by source. ============================================================ Patient folder THEME ASP Local SQL Injection Vulnerability ============================================================ ----------------------------------- By: SA H4x0r - Emails: [email protected] - Date...
LightBlog <= 9.9.2 (register.php) Remote Code Execution Exploit
No description provided by source. ? / --------------------------------------------------------------- LightBlog = 9.9.2 register.php Remote Code Execution Exploit --------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...
Bitweaver 1.x/2.0 search/index.php URL XSS
No description provided by source. source: http://www.securityfocus.com/bid/26801/info Bitweaver is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input including multiple cross-site scripting vulnerabilities, multiple...
bisonware bisonware ftp server 3.5 - Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/271/info Multiple vulnerabilities in the BisonWare FTP Server can cause denials of service. The vulnerabilities are: The server fails to close the socket created by a PASV command in multiple PASV commands are executed ba...
jaxultrabb <= 2.0 (lfi/xss) Multiple Vulnerabilities
No description provided by source. =============================================================== JaxUltraBB = 2.0 LFI/XSS Multiple Remote Vulnerabilities =============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...
Joomla Component com_neorecruit 1.4 - SQL Injection Vulnerability
No description provided by source...
Disqus Blog Comments Blind SQL Injection Vulnerability
No description provided by source. :----------------------------------------------------------------------------------------------------------------------------------------: Blog Comments Powered By Disqus - Sql Injection...
QQPlayer 2.3.696.400p1 (.wav) Denial of Service Vulnerability
No description provided by source. !/usr/bin/python Exploit Title: QQPlayer 2.3.696.400p1.wav Denial of Service Vulnerability Date: 07-09-2010 Author: Hadji Samir , s-Dzathotmaildotfr Software Link: www.qq.com Version: QQPlayer 2.3.696.400p1 Tested on: Windows XP sp2 CVE : Notes: Working with...
QQPlayer 2.3.696.400p1 - smi File Buffer Overflow Exploit
No description provided by source. !/usr/bin/env python Title: QQPlayer smi File Buffer Overflow Exploit Author: Lufeng Li of Neusoft Corporation Vendor: www.qq.com Platform: Windows XPSP3 Chinese Simplified Tested: QQPlayer 2.3.696.400p1 Vulnerable: QQPlayer=2.3.696.400p1 Exploit-DB Notes: A...
Rapid Classified 3.1 advsearch.asp dosearch Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21197/info Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize user-supplied input. ...
IBM Lotus Quickr QuickPlace Server 8.0 - Calendar 'Count' Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27925/info IBM Lotus Quickr is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...
DieselScripts Job Site Forgot.PHP Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/19622/info Multiple cross-site scripting vulnerabilities affect Job Site because the application fails to properly sanitize user-supplied input before including it in dynamically generated web content. An attacker may...
QNX PPPoEd 2.4/4.25/6.2 - Multiple Local Buffer Overrun Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/11104/info QNX PPPoEd is reported to be prone to multiple local buffer overflow vulnerabilities. The issues presents themselves when PPPoEd handles certain command line arguments that are greater than 256 bytes in length...
XRMS 1.99.2 - CRM 'msg' Parameter Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28041/info XRMS CRM is prone to a cross-site scripting vulnerability because it fails to adequately sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
NetAuctionHelp 4.1 Search.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26540/info NetAuctionHelp is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromis...
Quick 'n Easy FTP Server Lite 3.1
No description provided by source. !/usr/bin/python print \n print Team Hackers Garage print Quick 'n Easy FTP Server Lite Version 3.1 print Crash PoC print Sumit Sharma aka b0nd print [email protected] print print Special Thanks to: DoubleZero print http://www.exploit-db.com/author/DouBleZer0...
zawhttpd <= 0.8.23 (GET) Remote Buffer Overflow DoS
No description provided by source. !/usr/bin/perl zawhttpd Buffer Overflow Exploit by Kamil 'K3' Sienicki use IO::Socket; use strict; my$socket = ; if$socket = IO::Socket::INET-new PeerAddr = $ARGV0, PeerPort = $ARGV1, Proto = TCP print Attempting to kill zawhttpd at $ARGV0:$ARGV1 ...; print...
Joomla Visites 1.1 - Component mosConfig_absolute_path Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28942/info The Visites component for Joomla! is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the...
Easebay Resources Login Manager Multiple Input Validation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/22142/info Easebay Resources Login Manager is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. The vulnerabilities include an SQL-injection iss...
BizDesign ImageFolio 2.x/3.0.1 nph-build.cgi XSS
No description provided by source. source: http://www.securityfocus.com/bid/6265/info Reportedly, ImageFolio is prone to cross site scripting attacks due to insufficient sanitization of user-supplied input. The vulnerability exists in various cgi scripts included with ImageFolio. As a result, it ...
Exponent CMS 2.2.0 beta 3 - Multiple Vulnerabilities
No description provided by source...
Commentics 2.0 - Multiple Vulnerabilities
No description provided by source. Commentics 2.0 = Multiple Vulnerabilities Discovered by: Jean Pascal Pereira [email protected] Vendor information: Commentics is a free, advanced PHP comment script with many features. Professionally written and with open source code, its main aims are to be...
Microsoft Internet Explorer 5.0.1 Frameset Memory Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18277/info Microsoft Internet Explorer is affected by a memory-corruption vulnerability. This issue arises because the application fails to handle exceptional conditions in a proper manner. An attacker may exploit this...
Eduha Meeting Index.PHP Arbitrary File Upload Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18499/info Eduha Meeting is prone to an arbitrary file-upload vulnerability. An attacker can exploit this vulnerability to upload arbitrary code and execute it in the context of the webserver process. This may facilitate...
Microsoft DirectX DirectShow SAMI Buffer Overflow
No description provided by source. $Id: ms07064sami.rb 10550 2010-10-05 01:05:49Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
RedHat Linux 7.0 Roaring Penguin PPPoE Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2098/info Roaring Penguin Software's PPPoE is a freeware PPP over Ethernet client often used by ADSL subscribers running Linux or NetBSD. PPPoE contains a possibly remotely exploitable denial of service vulnerability in i...
Sitecom WLM-2501 CSRF Vulnerabilities
No description provided by source. +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Sitecom WLM-2501 Change Wireless Passphrase Date : 13-03-2012 Author : Ivano Binetti http://www.ivanobinetti.com...
IBM iSeries AS400 LDAP Server Remote Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12991/info A remote information disclosure issue affects IBM iSeries AS400 LDAP Server. This issue is due to a failure of the application to properly secure sensitive information. An authenticated attacker may leverage th...
joomla component & plugin JE Tooltip 1.0 - Local File Inclusion
No description provided by source. --------------------------------------------------------------------------------- joomla component & plugin JE Tooltip Local File Inclusion --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group :...
Gphotos 1.4/1.5 index.php rep Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/17967/info Gphotos is prone to multiple input-validation vulnerabilities. The issues include information-disclosure and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properl...
Joomla Component com_jcollection Directory Traversal
No description provided by source. @=======================================@ @=Script : Joomla Component comjcollection @=Author : FL0RiX @=Greez : Dost mu var? @=Bug Type : Directory Traversal @=Dork : inurl:comjcollection @=Note: Kimseye Hakettiginden Fazla Deger Vermeyeceksin...
zenphoto 1.4.3.3 - Multiple Vulnerabilities
No description provided by source. waraxe-2012-SA096 - Multiple Vulnerabilities in Zenphoto 1.4.3.3 =============================================================================== Author: Janek Vind waraxe Date: 03. November 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-96.html...
PHPWCMS 1.2.5 -DEV Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register from urlparse import urljoin class TestPOCPOCBase: vulID = 'SSV-80148' vul ID version = '1' author = 'fenghh' vulDate =...
C-News 1.0.1 - 'install.php' Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28989/info C-News is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
PunBB 1.2.x Search.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15114/info PunBB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result...
Pacific Software Carello 1.2.1 Shopping Cart Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2729/info It is possible for a remote user to execute arbitrary commands on a host using Carello Shopping Cart software. A specially crafted HTTP request could cause inetinfo.exe to consume all available system resources,...
AutoLinks 2.1 Pro Al_initialize.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14686/info AutoLinks Pro is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrar...
E-Uploader Pro <= 1.0 - Multiple Remote SQL Injection Vulnerabilities
No description provided by source. E-Uploader Pro = 1.0 SQL Injection Vulnerability Author: !DoktOR! Date found: 26.08.08 Product: E-Uploader Pro Version: 1.0 Price: $49 URL: www.scriptsfrenzy.com Download script: http://rapidshare.com/files/18285945/E-UploaderPro.PHP.NULL-DGTlicense.zip...
PsychoStats 2.x Login Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12089/info PsychoStats is reported prone to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. The problem presents itself when malicious...
CUPS 1.1.x HPGL File Processor Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11968/info CUPS is reported prone to a remote buffer overflow vulnerability. The issue is reported to exist in the 'hpgl-input.c' source file and is because of a lack of sufficient boundary checks performed on data...