SkyPortal Picture Manager v0.11 is prone to a path-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to access sensitive files outside of the web root, potentially resulting in the disclosure of sensitive information. This issue affects the following scripts: admin_pic_picedit.asp, admin_pic_browse.asp, admin_pic_showbadlink.asp, and admin_pic_picedit.asp?status=delete.
SkyPortal Classifieds System v0.12 is vulnerable to SQL injection. An attacker can exploit this vulnerability by sending malicious SQL queries to the vulnerable scripts. This can allow the attacker to gain access to sensitive information stored in the database.
This exploit allows an attacker to dump kernel memory to a file. It was discovered by mu-b in 2008 and tested on Apple MACOS X 10.5.5 (xnu-1228.8.20~1/RELEASE_I386). The vulnerability was originally found by christer in FreeBSD.
PenPal v2.0 is prone to a path traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to access arbitrary files on the affected computer with the privileges of the webserver process. This may lead to the disclosure of sensitive information that may aid in further attacks.
Appending a question mark to the router's internal IP address after the forward slash. e.g., http://192.168.1.1/? results in a denial of service condition where the http server dies and the administrative interface is no longer available until after a device reboot.
pPIM (http://www.phlatline.org/index.php?page=prod-ppim) is a Personal Information Management application written in PHP that can store contacts (including their photos), events, links, notes, send and check email, and upload files. pPIM contains multiple vulnerabilities, from version information leakage, to system credential disclosure, to remote command execution, authentication bypass and cross site scripting vulnerabilities. By calling the URL http://target.tld/ppim/Readme.txt you can view the version information of the installed version of pPIM. By requesting the URL http://target.tld/ppim/password.dat the password hash is revealed. There is no authentication protection on the password changing script, so calling http://target.tld/ppim/password.php?password=newpassword will change the password of the user. By calling the URL http://target.tld/ppim/index.php?login=1&username=&password=&submit=Login the authentication check is bypassed and the user is logged in as the default user. The application is vulnerable to cross site scripting attacks. By calling the URL http://target.tld/ppim/index.php?login=1&username=<script>alert('XSS')</script>&password=&submit=Login the user is logged in and the XSS attack is executed. The application is vulnerable to remote command execution. By calling the URL http://target.tld/ppim/index.php?login=1&username=`/bin/ls`&password=&submit=Login the user is logged in and the command is executed.
A vulnerability in QWERTY CMS lite allows an attacker to inject SQL commands via the 'id' parameter in the 'index.php' script. An attacker can exploit this vulnerability to gain access to the administrator table, which contains the username and password. The attacker can then access the admin control panel by navigating to '/admin/admin.php'.
A buffer overflow vulnerability exists in the Mani admin plugin for Counter Strike: Source. An attacker can send a maliciously crafted alias command to the server, which will cause a buffer overflow and allow arbitrary code execution.
A SQL injection vulnerability exists in XGuestBook v2.0, which allows an attacker to bypass the admin authentication by injecting SQL code in the USER space. An attacker can send a specially crafted HTTP request to the vulnerable application to exploit this vulnerability.
MDPro Module My_eGallery Remote SQL Injection Exploit is an exploit that allows an attacker to inject malicious SQL code into a vulnerable web application. The exploit is triggered by sending a specially crafted HTTP request to the vulnerable application. The malicious SQL code is then executed, allowing the attacker to gain access to sensitive information such as usernames and passwords.
Services By CQR