Exploits

Spectrum Software WebManager CMS – ‘pojam’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/38573/info

Saskia’s ShopSystem – ‘id’ Local File Inclusion

source: https://www.securityfocus.com/bid/38574/info

Six Apart Vox – ‘search’ Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/38575/info

PHP-Nuke CMS (Survey and Poll) – SQL Injection

#############################################################################################################

AKoff MIDI Player 1.00 – Buffer Overflow

#!/usr/bin/perl

WinSmMuPl 1.2.5 – ‘.mp3’ Local Crash (PoC)

#!/usr/bin/perl

PHP-Nuke – ‘user.php’ SQL Injection

----------------------------Information------------------------------------------------

Orb 2.0.01.0049 < 2.54.0018 - DirectShow Denial of Service

When Orb is first installed it registers several Direct Show filters with the system. When registered these filters a...

Sagem Routers – Remote Reset

#!/usr/bin/perl

Sagem Routers – Remote Authentication Bypass

#!/usr/bin/perl

Comptel Provisioning and Activation – ‘index.jsp?error_msg_parameter’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/38534/info

BBSXP 2008 – ‘ShowPost.asp’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/38542/info

Authentium Command On Demand ActiveX Control – Multiple Buffer Overflow Vulnerabilities

source: https://www.securityfocus.com/bid/38544/info

Drupal < 5.22/6.16 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/38545/info

Orb Networks 2.54.18 – Orb Direct Show Filter ‘.MP3’ File Divide-by-Zero Denial of Service

source: https://www.securityfocus.com/bid/38549/info

J. River Media Jukebox 12 – ‘.mp3’ Remote Heap Buffer Overflow

source: https://www.securityfocus.com/bid/38566/info

Dosya Yukle Scrtipi (DosyaYukle Scripti) 1.0 – Arbitrary File Upload

========================================================================================

Gnat-TGP 1.2.20 – Remote File Inclusion

###############################################################

Opera 10.50 – integer Overflow

smartplugs 1.3 – ‘showplugs.php’ SQL Injection

----------------------------Information------------------------------------------------

MiNBank 1.5.0 – Remote Command Execution

#!/usr/bin/perl

Joomla! Component com_blog – Directory Traversal

[~]######################################### InformatioN #############################################[~]

Adobe Flash Player 10.1.51 – Local File Access Information Disclosure

source: https://www.securityfocus.com/bid/38517/info

Al Sat Scripti – Database Disclosure

========================================================================================

osCSS 1.2.1 – Database Backups Disclosure

========================================================================================

PHP Advanced Transfer Manager 1.10 – Arbitrary File Upload

========================================================================================

Uploadify Sample Collection – Arbitrary File Upload

========================================================================================

Microsoft Internet Explorer 6/7/8 – ‘winhlp32.exe MsgBox()’ Remote Code Execution

Microsoft Internet Explorer is prone to a remote code execution vulnerability.

My Little Forum – ‘contact.php’ SQL Injection

----------------------------Information------------------------------------------------

Opera / Mozilla Firefox 3.6 – Long String Crash

=======================================================================

ProSSHD 1.2 20090726 – Remote Buffer Overflow

# Author: S2 Crew [Hungary]

Uiga Church Portal – ‘index.php’ SQL Injection

----------------------------Information------------------------------------------------

IBM Lotus Domino 7.0.2 – ‘readme.nsf’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/38481/info

Sparta Systems TrackWise EQms – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/38483/info

Discuz! 6.0 – ‘uid’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/38484/info

iPhone / iTouch FtpDisc 1.0 – Buffer Overflow (Denial of Service) (PoC)

###############

phptroubleticket 2.0 – ‘id’ SQL Injection

#############################################################################################################

CMS by MyWorks – Multiple Vulnerabilities

CMS by MyWorks SQL/ XSS Vulnerability

Oracle Siebel 7.7/7.8 – ‘/loyalty_enu/start.swe’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/38456/info

Article Friendly – ‘Filename’ Local File Inclusion

source: https://www.securityfocus.com/bid/38461/info

Blax Blog 0.1 – ‘girisyap.php’ SQL Injection

source: https://www.securityfocus.com/bid/38465/info

DeDeCMS 5.5 – ‘_SESSION[dede_admin_id]’ Authentication Bypass

source: https://www.securityfocus.com/bid/38469/info

RCA DCM425 Cable Modem – ‘micro_httpd’ Denial of Service (PoC)

#!/usr/bin/python

Uiga Personal Portal – ‘index.php’ SQL Injection

----------------------------Information------------------------------------------------

Uiga Fan Club – ‘index.php’ SQL Injection

----------------------------Information------------------------------------------------

Apple Safari 4.0.4 (531.21.10) – Stack Overflow / Denial of Service

#!/usr/bin/perl

HazelPress Lite 0.0.4 – Authentication Bypass

# HazelPress Lite

Joomla! Component com_yanc – SQL Injection

==============================================================================

Joomla! Component com_liveticker – Blind SQL Injection

#!/usr/bin/php

Baykus Yemek Tarifleri 2.1 – SQL Injection

# Baykus Yemek Tarifleri