holaCMS version 1.4.9 is susceptible to a file inclusion vulnerability.
9fb8ad67a428efc80f61d1375b1b9a3a5058c9783a098af4c2070f1d1862b10epaFileDB versions 3.1 and below are susceptible cross site scripting and SQL injection attacks.
9130b1811dc48ef25d6c8560d41c38e072c0e6bba4bafdf7f68cd85c9000ac5fExploit for the Ethereal IAPP dissector remote buffer overflow vulnerability. All versions that have support for the IAPP dissector are affected up to version 0.10.9.
526f33ba2f77710943103bc1d05b2c8a140887ea702b11aa53b942fa083849f1KnowledgeBuilder from ActiveCampaign Inc. is susceptible to a remote file inclusion flaw.
7a70517503b544dbdc87e341bc61d1201e86d5f63399caa8fcef9bb18c32415fphpBB version 2.0.12 session handling authentication bypass exploit.
730ba76e2cdf9e45cd1c3aecca4771758e6cc41d95057886195f3281bf93c744PhotoPost 5.0RC3 is susceptible to SQL injection, arbitrary file upload, cross site scripting, and various manipulation flaws.
0b6ed983b076ee2d4747a046aec2414e2cdc85fe6b5b11e5af9bf5f2cb0512b8UBB.threads version 6 is susceptible to a SQL injection attack in the editpost.php module.
cfbe8ebd5d12e416db9bb89e13a9b9fbec917af66bef40faa03dc285bb757b1cProof of concept exploit that makes use of functions in libc in order to gain MySQL user privileges. Version 4.1.10 and versions below and equal to 4.0.23 are affected.
883268c86f6fa35f215d28b707d9b6aa5143b2203243c3f53302acab8d0dc34dProof of concept exploit that makes use of a library injection flaw in MySQL via the CREATE function. Version 4.1.10 and versions below and equal to 4.0.23 are affected.
d74efbde515c47b96c4ca08796c904e378535ec258fbffd7eb05c6774714d9c8PaX double-mirrored VMA munmap local root exploit. This exploit has only been tested on Debian 3.0 running Linux 2.4.29 patched with grsecurity-2.1.1-2.4.29-200501231159.
60c1ceed2d16f7931996d9a19b03526bcb19cf2759c368e25b75293b7ef9f6f5OpenBSD 2.0 through 3.6 remote denial of service exploit that makes use of a timestamp flaw that causes the system to crash.
6653cb777111a43670a8d6b390377005deca3c99d3b0d6229b1feb884a315415Exploit for Internet Explorer (mshtml.dll) that makes use of a buffer overflow when parsing Cascading Style Sheets (CSS) files. This code creates a .css file that exploits the flaw. Reported in MS04-038.
6fb06489e18d934a0e1bea08869786b44ccae105aca60ad0be8e4bd307c9102cAn integer overflow flaw exists in sys_epoll_wait in the Linux kernel 2.6 series in versions equal to or below 2.6.11. Sample exploitation provided.
d083ba6efdf8af859e7ea6c1a4962bccf506a55a0eb627d60abf4685586d6b1aProjectBB version 0.4.5.1 is susceptible to cross site scripting and SQL injection vulnerabilities. Advisory is in French.
a72d8848215de991d93ee4b098066a9584d4ec68a42276ecc243f941a30ddad9paFileDB versions 3.1 and below suffer from cross site scripting and path disclosure flaws.
9130b1811dc48ef25d6c8560d41c38e072c0e6bba4bafdf7f68cd85c9000ac5fExploit for the paNews version 2.0b4 SQL injection flaw.
8a20f914b8395e6e3856afd104f694fc13fa1b44fdcc9bed7e0bf2109b0ce474wfsections 1.07 is susceptible to SQL injection attacks.
3f1bff949882c913d075a976f5e7d8c8fb1875ad09aa0eacaa25ea0e80909f15Stadtaus Voting Script version 1.6 is susceptible to a remote file inclusion vulnerability.
db05ca63e0694353f7ae679087d5d4fd3771553c837ca4ec45ae81b130312684Exploit for the Ethereal 3G-A11 dissector remote buffer overflow vulnerability. All versions that have support for the 3G-A11 dissector are affected up to version 0.10.9.
5630433d3aa4230867dbe25c72e8a8b0ce98dc61d46e9b0142eb5e80726e7c18eXPerience2 suffers from remote file inclusion and path disclosure flaws.
d573bff939ee70eeeb544344324683160587f0600e0d4c87af2c1505383b5e85Argeniss Security Advisory - Oracle database servers versions 8i and 9i are susceptible to directory traversal attacks.
fbdd2328be239c99f2f1f4d9662604a2451eee01ce19ea3fcb94fd2005ce1cc0PHP mcNews version 1.3 is susceptible to an arbitrary file inclusion flaw.
7ea4e770c91cae3aa7b7e44fa92d3f74ac9d965aed13cc7d1bd755127fd31474phpWebLog versions 0.5.3 and below are susceptible to an arbitrary file inclusion flaw.
7c15c892f0d3cb3beb19f9710d44bab8f5e4dc1d6666d0f1aa885106ac9de6cephpBB 2.0.12 session handling exploit that allows for administrative compromise.
b8a59235613e9e76d6729f2ba7f08567a2ed061dc3fc891e1d0c03668520b2fdLocal exploitation of a design error vulnerability in the Gene6 FTP Server could allow the attacker to gain elevated Priveleges,usually the SYSTEM.
e242968e801468eec0c32ef5861e9293070e77c7459e9d37ae964bdf11eb5533
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed