Section: .. / 0601-exploits /
| /// File Name: |
EV0017.txt |
Description:
|
TheWebForum version 1.2.1 is susceptible to cross site scripting and SQL injection attacks. Exploitation details provided.
| | Author: | Aliaksandr Hartsuyeu | | File Size: | 1693 | | Last Modified: | Jan 8 06:35:14 2006 |
| MD5 Checksum: | bae4e106cc7612ff061fa6c458a550d0 |
|
| /// File Name: |
winrar330.c |
Description:
|
WinRAR version 3.30 suffers from a buffer overflow vulnerability when processing a long file name. Proof of concept exploit provided.
| | Author: | Alpha_Programmer | | File Size: | 1597 | | Last Modified: | Jan 4 06:19:13 2006 |
| MD5 Checksum: | 6febae945f6edab57176fea3e2651d71 |
|
| /// File Name: |
EV0001.txt |
Description:
|
VEGO Web Forum versions 1.26 and below suffer from SQL injection flaws. Exploitation details provided.
| | Author: | Aliaksandr Hartsuyeu | | File Size: | 1541 | | Last Modified: | Jan 4 05:34:04 2006 |
| MD5 Checksum: | 0ac527c4e0ac44134a4a7114cd55dc14 |
|
| /// File Name: |
sqmailchpasswd.c |
Description:
|
Multiple buffer overflows are present in the handling of command line arguments in chpasswd leading to the execution of arbitrary code.
| | Author: | rod hedor | | Homepage: | http://lezr.com | | File Size: | 1524 | | Last Modified: | Jan 25 09:20:16 2006 |
| MD5 Checksum: | 185e1fca8a67c4be6a34dff677df1376 |
|
| /// File Name: |
MiniNukeSQL-2.txt |
Description:
|
MiniNuke CMS System versions 1.8.2 and below suffer from a flaw where an authenticated user can change any password via membership.asp.
| | Author: | nukedx | | Homepage: | http://www.nukedx.com | | File Size: | 1515 | | Last Modified: | Jan 15 18:01:33 2006 |
| MD5 Checksum: | 0b9270f90b1f336310b682775ceb9e28 |
|
| /// File Name: |
EV0007.txt |
Description:
|
Chimera Web Portal System version 0.2 is susceptible to SQL injection and cross site scripting attacks. Exploitation details provided.
| | Author: | Aliaksandr Hartsuyeu | | File Size: | 1505 | | Last Modified: | Jan 4 05:40:01 2006 |
| MD5 Checksum: | d1b0ac8378f55aebcccf71d22f4738a1 |
|
| /// File Name: |
ironwallTraverse.txt |
Description:
|
IronWall version 7.41 is susceptible to a classic directory traversal attack.
| | Author: | hwclock | | File Size: | 1479 | | Last Modified: | Jan 11 07:18:42 2006 |
| MD5 Checksum: | 479a75485b8bf209a4591e71760ef822 |
|
| /// File Name: |
MSIEDoS.txt |
Description:
|
Microsoft(R) Internet Explorer 5 and 6 suffer from a remote denial of service flaw using IMG and XML elements. Proof of concept code included.
| | Author: | Inge Henriksen | | Homepage: | http://ingehenriksen.blogspot.com/ | | File Size: | 1441 | | Last Modified: | Jan 21 20:03:48 2006 |
| MD5 Checksum: | 624ee3829bec9e7afa29fcf02a6044ea |
|
| /// File Name: |
EV0015.txt |
Description:
|
ADNForum version 1.0b is susceptible to SQL injection and cross site scripting vulnerabilities. Exploitation details provided.
| | Author: | Aliaksandr Hartsuyeu | | File Size: | 1427 | | Last Modified: | Jan 8 06:15:20 2006 |
| MD5 Checksum: | f56b32e64169be4a853e63ddc387ecdb |
|
| /// File Name: |
MyBB-search.txt |
Description:
|
MyBB v1.0.2 updated suffers from XSS via search.php
| | Author: | imei | | File Size: | 1389 | | Last Modified: | Jan 27 08:44:26 2006 |
| MD5 Checksum: | d29a2eb7c73d6da7c970cb840531dff3 |
|
| /// File Name: |
EV0019.txt |
Description:
|
NavBoard BBcode version 16 Stable (2.6.0) is susceptible to cross site scripting attacks. Exploitation details provided.
| | Author: | Aliaksandr Hartsuyeu | | File Size: | 1387 | | Last Modified: | Jan 8 19:28:12 2006 |
| MD5 Checksum: | 795dcec7a4b3981f729c758dd838b026 |
|
| /// File Name: |
vis.pl.txt |
Description:
|
Vis.pl is a perl script which manages files as part of e-cms. It suffers from a directory transversal vulnerability.
| | Author: | spher3 | | Homepage: | http://www.hackerscenter.com/ | | File Size: | 1374 | | Last Modified: | Jan 27 09:08:49 2006 |
| MD5 Checksum: | f835573c3d690ce10f395098c3e0078e |
|
| /// File Name: |
geronimo_css.txt |
Description:
|
Apache Geronimo version 1.0 suffers from cross site scripting vulnerabilities.
| | Author: | Oliver Karow | | Homepage: | http://www.oliverkarow.de | | File Size: | 1361 | | Last Modified: | Jan 21 21:41:13 2006 |
| MD5 Checksum: | 246d64556b8377602e7647db2718be1c |
|
| /// File Name: |
2005-23-12-brainsquad-team-cms.txt |
Description:
|
The CMS system from brainsquad-team suffers from a cross site scripting vulnerability in the user profile section and also may be susceptible to SQL injection attacks.
| | Author: | yorn | | File Size: | 1353 | | Last Modified: | Jan 9 19:27:12 2006 |
| MD5 Checksum: | b304061cc1e355228534d3d9cd8b9988 |
|
| /// File Name: |
xfocus-SD-060101.txt |
Description:
|
getCommand and getShell under AIX 5.3 still suffer from multiple exposure flaws.
| | Homepage: | http://www.xfocus.org | | File Size: | 1337 | | Last Modified: | Jan 3 03:44:22 2006 |
| MD5 Checksum: | 07a1b07775be3bad6d588df88ef20ec4 |
|
| /// File Name: |
RCBlog-1.0.3.txt |
Description:
|
RCBlog v1.0.3 suffers from several vulnerabilities which can be used to open arbitrary files and compromise the admin's md5 password hash.
| | Author: | Aliaksandr Hartsuyeu | | Homepage: | http://evuln.com/ | | File Size: | 1337 | | Last Modified: | Jan 26 08:49:06 2006 |
| MD5 Checksum: | 62859679907231bd1f64813cbc0459b7 |
|
| /// File Name: |
EV0014.txt |
Description:
|
TinyPHPForum versions 3.6 and below suffer from directory traversal, cross site scripting, and information disclosure flaws. Exploitation details provided.
| | Author: | Aliaksandr Hartsuyeu | | File Size: | 1337 | | Last Modified: | Jan 8 03:24:34 2006 |
| MD5 Checksum: | 90693ed76e197a01401b1c05b494c36b |
|
| /// File Name: |
SaralBlog-sql.txt |
Description:
|
SaralBlog 1.0 suffers from XSS and SQL injection due to lack of sanitized user input.
| | Author: | Aliaksandr Hartsuyeu | | Homepage: | http://evuln.com/ | | File Size: | 1301 | | Last Modified: | Jan 25 08:52:39 2006 |
| MD5 Checksum: | 556ea9849aac0689c41740364ae1f22d |
|
| /// File Name: |
termsh.c |
Description:
|
SCO Openserver 5.0.7 termsh local privilege escalation exploit.
| | Author: | RoD hEDoR | | File Size: | 1270 | | Related CVE(s): | CAN-2005-0351 | | Last Modified: | Jan 4 06:12:52 2006 |
| MD5 Checksum: | 7eb534c3390752e4d676fd49101944ba |
|
| /// File Name: |
webftpInclude.txt |
Description:
|
A file inclusion vulnerability exists in WebFTP version 1.2.6 in webftp.php.
| | Author: | Thomas Henlich | | File Size: | 1260 | | Last Modified: | Jan 8 03:01:11 2006 |
| MD5 Checksum: | 28b26f75d55cc9d465dd46388dec480d |
|
| /// File Name: |
geoBlog-MOD_1.0.txt |
Description:
|
geoBlog MOD_1.0 suffers from an SQL injection vulnerability in the $tmpCategory variable.
| | Author: | Aliaksandr Hartsuyeu | | Homepage: | http://evuln.com/vulns/33/summary/bt/ | | File Size: | 1245 | | Last Modified: | Jan 26 06:20:04 2006 |
| MD5 Checksum: | 3747e3e14c10b3aeca505ddb2462b3c5 |
|
| /// File Name: |
pwned-vpasp.txt |
Description:
|
VP-ASP Shopping Cart version 5.50 is susceptible to SQL injection attacks.
| | Author: | tracewar | | File Size: | 1214 | | Last Modified: | Jan 29 23:25:08 2006 |
| MD5 Checksum: | f7775e5cbc389819c373c3ac3508f55f |
|
|
|
|
|