DUportal Pro 3.4 suffers from numerous SQL injection flaws.
0ceb255a466ca99c8145750bf06caf07186f80f6b1af41055ddc26d93912196fBitchX local exploit that only works if it is setuid locally. Made for version BitchX-1.0c20cvs.
eeff5f898f93c27e4210e9dc3757a1670f06bc8cbe6499faeb33a3cf9cc43d53Local file disclosure flaw that affects both Firefox and IE6. Sample exploitation provided.
7a9d672c68d19b5548033ad4ebe63b121c36d3aebaed302b433c1118bf7650e2eGroupewar versions below 1.0.0.007 suffer from multiple cross site scripting and SQL injection vulnerabilities.
17b0c9fae94df3b9ba7e1a7b70639e656620493755d4ff5de56650d241cc96c8annuaire netref version 4.2 is susceptible to a remote command execution flaw.
e5bbb9d2b62449c51f0599f113e3cd34afe9beab0a052bd9eef867c2f7d76b01Ecommerce-Carts EcommPro versions 3 and below suffer from a SQL injection attack that allows for login bypass.
d11701c28fd50e9b869cfbe9e48729c69bbcbb9ce5292f2d6c775337082e0457Shoutbox SCRIPT versions 3.0.2 and below suffer from a remote retrieval flaw that allows for the grabbing of an administrator's MD5 hash and their username.
c842a3fc2bdd4a19441502e17c25a603e831b4a4310fbce61bf631805f0fd703UBB printthread.php is susceptible to a SQL injection attack.
926a7b3ef4e890765c8d552d4e159104eeefe7ca0c1cd19600d58bbcfcaaa017MS05-021 Exchange X-LINK2STATE exploit that makes use of a heap overflow in SvrAppendReceivedChunk function which is located in xlsasink.dll.
02975744297487606f18172eef11cfb3c711a1ccadc13c5fc69f15560aa634eeapexec.pl suffers from a directory traversal flaw.
5b767ab2f10cf9dfd9b0e426317221a95c123387b2fcb54fe415e1ce4e2de5adJAWS 0.4 is susceptible to cross site scripting attacks.
1f2754d0d427690a698ac40193a59e7779144e5251a3d4993becc4679d6d47f6The OneWorldStore DisplayResults.asp sIDSearch variable is susceptible to cross site scripting and SQL injection flaws.
5bb44ed8ca6c1e27b1ea02ad14ecafa9cf4900dfb2301cc24119672bfea9eed4WheresJames Webcam Publisher Beta 2.0.0014 proof of concept exploit.
44c9456416870526fd3a4cedf55df12367500c22d2e81613caf1d660f76ea22fPortalApp version 3.3 is susceptible to multiple cross site scripting vulnerabilities.
cef717b7937cb82af7908d1892915df7fa12e26dc81eb54ef46acee295b93dcdproFile from PHPLabs suffers from various cross site scripting vulnerabilities.
3754e2edde50de17943f81f2feee3d876e5cb83a49044f07554481ed45a472c7Multiple cross site scripting vulnerabilities exist in Citypost software. Affected pieces are: Simple PHP Upload, Simple Image Editor, and Automated Link Exchange.
fb7666c663354613b4b8758c291e5c64af03667f9d222b7d29c22120c7a0703fThe phpBB Knowledge Base MOD has a sql injection vulnerability that enables a remote attacker to gain more information about the database.
8db0ea48b849d67f2b0cadf533d5872f8f2dd6ca76ffcbabd3d013fab8d7cdaaBulletProof FTP server version 2.4.0.31 local privilege escalation exploit that provides a shell with SYSTEM privileges.
bf0d2a596e4873cd8286ec7287c3700d618e721578db84e1ee1695e7faedd485WWWGuestBook 1.1 login.asp SQL injection exploit information.
576e55736bed8df737ff83b0afc613ffd4fd0759d56dba65dd2395a22733129bGolden FTP Server Pro version 2.52.0.0 remote stack buffer overflow exploit. Binds a shell to port 4444.
3a37268bb0731b563abfabfff0183481770edd209f552311002984cb67fba59dGolden FTP Server Pro remote stack buffer overflow exploit. Binds a shell to port 4444. Includes WIN XP SP1 and SP2 targets.
ed40624c07520e27c9f3d332e76fcc45eb96a118bc061cd246c9bd6e81b731f2Snmppd SNMP proxy daemon remote format string exploit.
a59f719d411e2b47c1b0cd94bbac6bf6c051fa296c069a11618bf75cc8b40c53GoText 1.01 local user information disclosure exploit.
8f5010351c49aa3e5f67fc1001082cc6150cd3413de578decac28b8bd21ca678FilePocket version 1.2 local proxy password disclosure exploit.
a74f05b2c4ae688e9648350ea002a891b5e1900316c57b7717ae81aeb3e54c1aICUII 7.0 local password disclosure exploit.
922d1d398ba8a5e199a03bd349df550f767248f46166f69b3a4c3caa85a9d37b
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed