Pollbooth v2.0 is vulnerable to SQL injection. An attacker can exploit this vulnerability by sending a specially crafted HTTP request to the vulnerable application. The attacker can use the 'pollBooth.php?op=results&pollID=-1+union+select+password,1,2,3+from+users' payload to exploit this vulnerability.
A vulnerability in Joomla and Mambo Component com_extplorer <= 2.0.0 RC2 allows an attacker to traverse directories outside of the web root directory. This is done by sending a specially crafted HTTP request containing directory traversal sequences (e.g. '../../') to the vulnerable server. An attacker can use this vulnerability to access sensitive information such as configuration files, source code, and other system files.
1024 CMS versions 1.4.1 and 1.4.2 (beta) are vulnerable to Local File Inclusion and Cookie Blind SQL Injection. The Local File Inclusion vulnerability is due to the lack of proper sanitization of user-supplied input in the 'lang' parameter of the 'news.php' script. An attacker can exploit this vulnerability by including a malicious local file in the 'lang' parameter. The Cookie Blind SQL Injection vulnerability is due to the lack of proper sanitization of user-supplied input in the 'cookpass' cookie. An attacker can exploit this vulnerability by setting the 'cookpass' cookie to a malicious value and making a blind SQL injection.
CcMail (all versions) suffers from insecure cookie handling, this allows the remote attacker to set a cookie and be granted access to the admin area. This is because CcMail only checks if the cookie exists, it doesnt compare the data. By entering the below javascript into your (firefox/thunderbird etc) cookies will be created allowing you to login to 'admin.php'.
A remote SQL injection vulnerability exists in phpAddressBook. An attacker can send a specially crafted HTTP request to the vulnerable application in order to execute arbitrary SQL commands in the backend database, allowing them to access or modify sensitive data.
Joomla and Mambo Component joomlaxplorer versions 1.6.0 and below are vulnerable to Local Directory Traversal and XSS. An attacker can exploit this vulnerability by sending a crafted request to the target server with a malicious payload. This payload can be used to traverse the directory structure of the server and gain access to sensitive files. Additionally, an attacker can also inject malicious JavaScript code into the vulnerable parameter to execute arbitrary code on the target server.
The CGIs available in NNM use some instructions which filters malicious chars in the parameters passed by the clients, for example to avoid directory traversal attacks, XSS and so on. The path delimiter filtered by these CGIs is the backslash char, so using the slash will allow an attacker to download the files from the disk on which is installed NNM. The ovalarmsrv service listening on port 2954 can be easily freezed with CPU at 100% and without the possibility of handling further requests on both its poerts (2954 and 2955) by sending a malformed packet. The packet must contain a specific value in the “length” field of the header which is not checked by the service. The same service can be crashed by sending a packet with a specific value in the “length” field of the header which causes a NULL pointer dereferencing. The ovtopmd process can be terminated by sending a packet with a specific value in the “length” field of the header which causes a memory corruption.
The vulnerability exists in the news_show.php file of NewsOffice 1.1, which allows an attacker to include a remote file via the newsoffice_directory parameter. The same vulnerability exists in version 1.0 as well.
A SQL injection vulnerability exists in PHPKB Knowledge Base Software, which allows an attacker to execute arbitrary SQL commands via the 'ID' parameter in the 'comment.php' script.
POC.pl is a proof-of-concept exploit for a buffer overflow vulnerability in InterBase 6.0.0. This vulnerability allows an attacker to execute arbitrary code on the vulnerable system.
Services By CQR