Section: .. / 0711-exploits /
| /// File Name: |
phphelpdesk-lfisql.txt |
Description:
|
phphelpdesk version 0.6.16 appears susceptible to local file inclusion and SQL injection vulnerabilities.
| | Author: | Joseph Giron | | File Size: | 958 | | Last Modified: | Nov 5 11:00:06 2007 |
| MD5 Checksum: | 1d22a25eef362ec45a59291c07232805 |
|
| /// File Name: |
phpkit-rfi.txt |
Description:
|
PHPkit version 1.6.1 suffers from a remote file inclusion vulnerability.
| | Author: | JosS | | Homepage: | http://www.spanish-hackers.com/ | | File Size: | 567 | | Last Modified: | Nov 27 22:59:52 2007 |
| MD5 Checksum: | 33d8aa2719f9b4b7d6a7c63fb2459101 |
|
| /// File Name: |
phpkit-sql.txt |
Description:
|
PHPKIT version 1.64pl1 remote SQL injection exploit that makes use of article.php.
| | Author: | shadowleet | | File Size: | 5772 | | Last Modified: | Nov 26 21:15:41 2007 |
| MD5 Checksum: | 58d938ba5d0fea7bdd76cde9a4944636 |
|
| /// File Name: |
phpnukema-sql.txt |
Description:
|
PHP-Nuke Module Advertising blind SQL injection exploit.
| | Author: | Guns | | Homepage: | http://www.0x90.com.ar/ | | File Size: | 2531 | | Last Modified: | Nov 12 22:13:06 2007 |
| MD5 Checksum: | 387e9b73cdd9dec64053915dd996ef01 |
|
| /// File Name: |
phpnukensn-disclose.txt |
Description:
|
PHP-Nuke NSN Script Depository module versions 1.0.0 and below suffer from a remote source disclosure vulnerability.
| | Author: | KiNgOfThEwOrLd | | Homepage: | http://www.inj3ct-it.org/ | | File Size: | 1758 | | Last Modified: | Nov 26 22:50:32 2007 |
| MD5 Checksum: | c1b31b6050529af2d3f35a56e8151a33 |
|
| /// File Name: |
phpnuketopsites-inject.txt |
Description:
|
The PHP-Nuke add-on MS TopSites suffers from a HTML injection vulnerability.
| | Author: | Guns | | Homepage: | http://www.0x90.com.ar/ | | File Size: | 1799 | | Last Modified: | Nov 6 23:16:32 2007 |
| MD5 Checksum: | 26da11a98b86df7366bcd7db6184301f |
|
| /// File Name: |
phpslideshow-xss.txt |
Description:
|
PHPSlideShow suffers from a cross site scripting vulnerability in toonchapter8.php.
| | Author: | JosS | | Homepage: | http://www.spanish-hackers.com/ | | File Size: | 681 | | Last Modified: | Nov 26 22:43:10 2007 |
| MD5 Checksum: | e36efd2549b517f78e97ef1ed52a692a |
|
| /// File Name: |
phpslideshow0992-xss.txt |
Description:
|
PHPSlideShow version 0.9.9.2 suffers from a cross site scripting vulnerability in phpslideshow.php.
| | Author: | Josh Morin | | File Size: | 701 | | Last Modified: | Nov 27 21:56:12 2007 |
| MD5 Checksum: | 1c0a1c074d4691d0f178837b69fe09cf |
|
| /// File Name: |
pmapper-rfi.txt |
Description:
|
p.mapper version 3.2.0 suffers from a remote file inclusion vulnerability.
| | Author: | ShAy6oOoN | | File Size: | 931 | | Last Modified: | Nov 27 23:01:51 2007 |
| MD5 Checksum: | 95cff3614ec14efae28f68ea8533d20a |
|
| /// File Name: |
PR07-02.txt |
Description:
|
The Liferay Portal login page is vulnerable to a cross site scripting vulnerability within the "login" field processed by the "/c/portal/login" server-side script.
| | Author: | Adrian Pastor | | Homepage: | http://www.procheckup.com/ | | File Size: | 2218 | | Last Modified: | Nov 16 02:54:37 2007 |
| MD5 Checksum: | 7b9abfad8585fd2146ccbb87c11f4500 |
|
| /// File Name: |
PR07-14.txt |
Description:
|
The F5 FirePass 4100 SSL VPN is susceptible to cross site scripting vulnerabilities in my.activation.php3.
| | Author: | Adrian Pastor, Jan Fry | | Homepage: | http://www.procheckup.com/ | | File Size: | 2177 | | Last Modified: | Dec 2 15:37:49 2007 |
| MD5 Checksum: | a5c5e3277bf1f9ac5dd422520c6fb014 |
|
| /// File Name: |
PR07-15.txt |
Description:
|
The F5 FirePass 4100 SSL VPN is susceptible to cross site scripting vulnerabilities in my.logon.php3.
| | Author: | Richard Brain | | Homepage: | http://www.procheckup.com/ | | File Size: | 2208 | | Last Modified: | Dec 2 15:39:06 2007 |
| MD5 Checksum: | d2712a2796254f18fd7453d88ff3e8ba |
|
| /// File Name: |
PR07-26.txt |
Description:
|
The Aruba 800 is vulnerable to a persistent cross site scripting vulnerability on the administrator login screen.
| | Author: | Jan Fry | | Homepage: | http://www.procheckup.com/ | | File Size: | 1689 | | Last Modified: | Nov 16 02:56:27 2007 |
| MD5 Checksum: | e832c68f33e43997356ffe700c515f1b |
|
| /// File Name: |
PR07-29.txt |
Description:
|
Two cross site scripting vulnerabilities have been discovered in the Blue coat ProxySG Management Console. Versions below 4.2.6.1 and 5.2.2.5 are susceptible.
| | Author: | Adrian Pastor | | Homepage: | http://www.procheckup.com/ | | File Size: | 2423 | | Last Modified: | Nov 1 19:28:34 2007 |
| MD5 Checksum: | 4300508a909c96cafc2e2f84ee679c17 |
|
| /// File Name: |
PR07-37.txt |
Description:
|
A cross site scripting vulnerability has been discovered in Apache versions 2.2.x and 2.0.x using a malformed HTTP request with 413 error pages.
| | Author: | Adrian Pastor, Amir Azam | | Homepage: | http://www.procheckup.com/ | | File Size: | 6126 | | Last Modified: | Dec 2 15:43:38 2007 |
| MD5 Checksum: | b092742d65bdd0de195982310809ac70 |
|
| /// File Name: |
projectalumni-disclose.txt |
Description:
|
Project Alumni version 1.0.9 suffers from a remote file disclosure vulnerability.
| | Author: | tomplixsee | | File Size: | 331 | | Last Modified: | Nov 27 22:48:20 2007 |
| MD5 Checksum: | 2fbbf2a27adfe838cf1ec5d39a673f76 |
|
| /// File Name: |
projectalumni-sqlxss.txt |
Description:
|
Project Alumni versions 1.0.9, 1.0.8, and possibly prior releases suffer from cross site scripting and SQL injection vulnerabilities.
| | Author: | tomplixsee | | File Size: | 2212 | | Last Modified: | Nov 26 16:00:26 2007 |
| MD5 Checksum: | 4cf7c7514232e5aecf2ea8f832899041 |
|
| /// File Name: |
psm-rfi.txt |
Description:
|
PhpSiteManager Beta2 suffers from remote file inclusion vulnerabilities.
| | Author: | fl0 fl0w | | Homepage: | http://fl0-fl0w.docspages.com/ | | File Size: | 1501 | | Last Modified: | Nov 12 21:59:08 2007 |
| MD5 Checksum: | 561df89d436febc8f0c75ecf6df162f2 |
|
| /// File Name: |
qt_public.tar.gz |
Description:
|
Apple QuickTime RTSP response Content-type remote stack rewrite exploit for Internet Explorer 6/7.
| | Author: | Yag Kohha | | Related Exploit: | aquick-universal.txt | | File Size: | 2884 | | Last Modified: | Nov 27 22:55:52 2007 |
| MD5 Checksum: | e6f416f2debf73019e613a9b48030d21 |
|
| /// File Name: |
quickdirty-lfi.txt |
Description:
|
Quick and Dirty Blog version 0.4 suffers from a local file inclusion vulnerability.
| | Author: | GolD_M | | Homepage: | http://www.tryag.cc/ | | File Size: | 219 | | Last Modified: | Nov 5 10:49:50 2007 |
| MD5 Checksum: | 35a71864c8a3e081aaea2445b137e9bd |
|
| /// File Name: |
rapid-sql.txt |
Description:
|
Rapid Classified suffers from a SQL injection vulnerability.
| | Author: | The-0utl4w | | Homepage: | http://aria-security.net/ | | File Size: | 412 | | Last Modified: | Nov 8 18:28:41 2007 |
| MD5 Checksum: | f07971690064fa1c54da69a9fecdee2c |
|
| /// File Name: |
rchi-sql.txt |
Description:
|
Rapid Classified HotList Image is susceptible to SQL injection attacks.
| | Author: | The-0utl4w | | Homepage: | http://aria-security.net/ | | File Size: | 343 | | Last Modified: | Nov 12 21:54:42 2007 |
| MD5 Checksum: | 7576cce29ea1813e170aa25c27be7bc5 |
|
| /// File Name: |
real-overflow.txt |
Description:
|
It appears that RealNetworks RealPlayer suffers from more stack overflow vulnerabilities in ierpplug.dll.
| | Author: | Elazar Broad | | File Size: | 2247 | | Last Modified: | Nov 26 22:13:40 2007 |
| MD5 Checksum: | fc4a3f5f53f505cbdae2277078a65d3c |
|
| /// File Name: |
richfx-overflow.txt |
Description:
|
Multiple stack overflows exist in the RichFX nprfxins.dll ActiveX control.
| | Author: | Elazar Broad | | File Size: | 962 | | Last Modified: | Nov 26 22:14:30 2007 |
| MD5 Checksum: | 8b1215e3da7bdfd3dbde865f33c48044 |
|
| /// File Name: |
RISE-2007004.txt |
Description:
|
There exists a vulnerability within an architecture dependent function of the Apple Mac OS X 10.4.x kernel, which when properly exploited can lead to local compromise of the vulnerable system. Proof of concept code included.
| | Author: | Adriano Lima, Ramon de Carvalho Valle | | Homepage: | http://www.risesecurity.org/ | | File Size: | 5271 | | Last Modified: | Nov 16 02:58:40 2007 |
| MD5 Checksum: | f7cb9a678cad1e52e9b8323a667b2f32 |
|
|
|
|
|
![.:[ packet storm ]:.](/images/ps-ani.gif)
