Section: .. / 0605-exploits /
| /// File Name: |
phpfusion600306-2.txt |
Description:
|
PHP-Fusion versions 6.00.306 and below "srch_where" SQL injection and administrative credential disclosure exploit.
| | Author: | rgod | | Homepage: | http://retrogod.altervista.org/ | | File Size: | 4798 | | Last Modified: | May 22 01:17:07 2006 |
| MD5 Checksum: | 9ea60d7d3da3e9dfdfbe79e9ddd7259d |
|
| /// File Name: |
DSSExploit.txt |
Description:
|
The default screen saver in Windows XP and Windows 2003 Server runs as a system process. Thus if a malicious person changes logon.scr to cmd.exe or explorer.exe they can take control of the system when the screen saver runs. POC exploit included.
| | Author: | Susam Pal | | Homepage: | http://susampal.blogspot.com/ | | File Size: | 4694 | | Last Modified: | May 25 21:17:41 2006 |
| MD5 Checksum: | d8f174910431a7908e23d89bd2c0a6b2 |
|
| /// File Name: |
my_anon_db_leak.c |
Description:
|
Proof of concept exploit that demonstrates an information leakage vulnerability in MySQL server version 4.1.18 and below and 5.0.20 and below.
| | Author: | Stefano Di Paola | | Homepage: | http://www.wisec.it | | Related File: | mysqlLeak.txt | | File Size: | 4677 | | Last Modified: | May 5 08:13:34 2006 |
| MD5 Checksum: | 13aefb173f330f70de42ba30561937f8 |
|
| /// File Name: |
CYBSEC-SAPBC2.txt |
Description:
|
CYBSEC Security Advisory - SAP BC was found to allow reading and deleting any file from the file system to which the user that the SAP BC is running as had access. The vulnerability is present in the Monitoring functionality of the SAP Adapter. Versions affected are SAP BC 4.6 and 4.7.
| | Author: | Leandro Meiners | | Homepage: | http://www.cybsec.com/ | | File Size: | 4407 | | Last Modified: | May 21 23:56:50 2006 |
| MD5 Checksum: | e71c7c3652c0d7bac4dba537177167dc |
|
| /// File Name: |
rt-sa-2006-002.txt |
Description:
|
RedTeam identified a security flaw in prodder versions 0.4 and below which makes it possible for a malicious podcast server to execute arbitrary shell commands on the victim's client.
| | Author: | RedTeam Pentesting | | Homepage: | http://www.redteam-pentesting.de/ | | File Size: | 4296 | | Last Modified: | May 24 04:50:14 2006 |
| MD5 Checksum: | 4c214e8d424dc4c7144691cb7239ed0e |
|
| /// File Name: |
AlbinatorPro208.txt |
Description:
|
Albinator Pro versions 2.0.8 and below suffer from a remote command execution vulnerability. Exploit included.
| | Homepage: | http://www.xorcrew.net/ | | File Size: | 3945 | | Last Modified: | May 6 17:01:08 2006 |
| MD5 Checksum: | 6e3caaac804c781a1fbecd8067db00aa |
|
| /// File Name: |
ISPConfig.txt |
Description:
|
ISPConfig versions 2.2.2 and below suffer from a remote command execution vulnerability.
| | Author: | ReZEN | | Homepage: | http://www.xorcrew.net/ | | File Size: | 3814 | | Last Modified: | May 9 16:19:54 2006 |
| MD5 Checksum: | a6802141e9c78e210ba77d6d8122ce1a |
|
| /// File Name: |
ActualAnalyzer688.txt |
Description:
|
ActualAnalyzer version 6.88 suffers from a remote code execution vulnerability.
| | Author: | ReZEN | | File Size: | 3807 | | Last Modified: | May 17 02:49:42 2006 |
| MD5 Checksum: | b6a740ec3d33569373e7a2392227e88d |
|
| /// File Name: |
sa-caucho.txt |
Description:
|
ScanAlert Security Advisory - Caucho Resin versions 3.0.17 and 3.0.18 suffer from arbitrary file access and information disclosure vulnerabilities.
| | Homepage: | http://www.scanalert.com/ | | File Size: | 3480 | | Last Modified: | May 22 01:04:15 2006 |
| MD5 Checksum: | e6eb58aae907535140edb0006d174b53 |
|
| /// File Name: |
bl4ck_awstats_migrate_cmd_inj.py.tx..> |
Description:
|
Remote shell command injection exploit for AWStats versions 6.5 and below.
| | Author: | redsand | | File Size: | 3447 | | Last Modified: | May 6 18:02:27 2006 |
| MD5 Checksum: | 15748dc0bac06497e96edf06896e3d65 |
|
| /// File Name: |
SpeedyASPForum.txt |
Description:
|
Speedy ASP Forum (profileupdate.asp) User Pass Change Exploit
| | Author: | ajannhwt | | File Size: | 3436 | | Last Modified: | May 29 03:59:58 2006 |
| MD5 Checksum: | 5e909f7d5a776f0e1b7345535fc4676a |
|
| /// File Name: |
SAPwebas.txt |
Description:
|
SAP Web Application Server versions 7.00 and below suffer from a URL manipulation flaw that can allow for cross site scripting.
| | Author: | A. Grossmann | | File Size: | 3286 | | Last Modified: | May 22 01:02:29 2006 |
| MD5 Checksum: | 98cdb331d2641aba2e6fc365d4e111b8 |
|
| /// File Name: |
openvpn207.txt |
Description:
|
OpenVPN version 2.0.7 allows for full authentication bypass due to having an administrative interface wide open via telnetd.
| | Author: | c0redump | | File Size: | 3150 | | Last Modified: | May 6 16:55:36 2006 |
| MD5 Checksum: | 0a4d634cf0e4e88db3f36b52449a0361 |
|
| /// File Name: |
portmap-PoC.c |
Description:
|
Local DOS exploit for portmap.
| | Author: | Federico L. Bossi Bonin | | File Size: | 3055 | | Last Modified: | May 26 18:45:47 2006 |
| MD5 Checksum: | 8760c07f15308affb930e53f085cc32c |
|
| /// File Name: |
SEC-20060512-0.txt |
Description:
|
SEC-CONSULT Security Advisory 20060512-0 - The Symantec Enterprise Firewall leaks internal IPs of natted machines in response to certain HTTP requests. Version 8.0 is vulnerable.
| | Author: | Bernhard Mueller | | Homepage: | http://www.sec-consult.com | | File Size: | 3042 | | Last Modified: | May 21 15:20:55 2006 |
| MD5 Checksum: | 45efb7adcb6dbcfec7f0bab930904131 |
|
| /// File Name: |
4images171.txt |
Description:
|
4images version 1.7.1 is susceptible to SQL injection attacks.
| | Author: | CrAzY CrAcKeR | | Homepage: | http://www.alshmokh.com | | File Size: | 3021 | | Last Modified: | May 2 01:25:52 2006 |
| MD5 Checksum: | a9a9046252a591fd108779cb1a0b6734 |
|
| /// File Name: |
Kaspersky6-POP3.txt |
Description:
|
Kaspersky antivirus 6 suffers from an error in the POP3 state machine POP3 monitor thus allowing any malicious software on the local computer to bypass the POP3 monitor.
| | Author: | bug.registrator | | File Size: | 2991 | | Last Modified: | May 29 03:07:52 2006 |
| MD5 Checksum: | e5dd17cdc394afd4c6b98c13182fa457 |
|
| /// File Name: |
liberoXSS.txt |
Description:
|
Libero.it is susceptible to cross site scripting vulnerabilities.
| | Author: | Davide Denicolo | | File Size: | 2940 | | Last Modified: | May 6 16:01:34 2006 |
| MD5 Checksum: | f974e687ec599bcbb1daea587c1a9e1e |
|
| /// File Name: |
R7-0024.txt |
Description:
|
Rapid7 Security Advisory - The Caucho Resin web application server for Windows contains a directory traversal vulnerability that allows remote unauthenticated users to download any file from the system. It is possible to download files from any drive on the system. Versions 3.0.18 and 3.0.17 for Windows are vulnerable.
| | Homepage: | http://www.rapid7.com/ | | File Size: | 2894 | | Related CVE(s): | CVE-2006-1953 | | Last Modified: | May 22 01:15:39 2006 |
| MD5 Checksum: | 31d1931060c9dac4600df99620e3a12f |
|
| /// File Name: |
JAMES2.2.0.txt |
Description:
|
It is possible to DOS Java Apache Mail Enterprise Server (a.k.a. Apache James) by sending it a long SMTP argument. POC included.
| | Author: | Ahmad Muammar W.K | | Homepage: | http://y3dips.echo.or.id/ | | File Size: | 2690 | | Last Modified: | May 29 19:50:09 2006 |
| MD5 Checksum: | 3b16937b13c91271931fbb4c674cd88c |
|
| /// File Name: |
CANews.txt |
Description:
|
CodeAvalanche News version 1.2 is susceptible to SQL injection and cross site scripting vulnerabilities.
| | Author: | omnipresent | | File Size: | 2552 | | Last Modified: | May 23 03:55:38 2006 |
| MD5 Checksum: | 704f380ee1fb03a9e885c2c9fbbe24ec |
|
| /// File Name: |
jetboxCMS.txt |
Description:
|
JetBox CMS remote file inclusion exploit that allows for command execution.
| | Author: | beford | | File Size: | 2540 | | Last Modified: | May 6 18:00:33 2006 |
| MD5 Checksum: | 43d3be4df9879b00a52b4cb7224ce15a |
|
| /// File Name: |
phpbazar-210.pl.txt |
Description:
|
19:13:55 2006 phpBazar versions less than or equal to 2.1.0 Remote File Inclusion Exploit.
| | Author: | mescalin | | Homepage: | http://mescalin.100free.com | | File Size: | 2443 | | Last Modified: | May 26 |
| MD5 Checksum: | e2891cd9de0eafd2278bbf0bd1aa5bf4 |
|
|
|
|
|