Section: .. / 0508-exploits /
| /// File Name: |
lduSQL.txt |
Description:
|
Land Down Under versions 801 and below suffer from multiple SQL injection vulnerabilities. Full details provided.
| | Author: | matrix_killer | | Homepage: | http://www.h4cky0u.org | | File Size: | 1315 | | Last Modified: | Aug 31 01:45:23 2005 |
| MD5 Checksum: | eb9df365250444e4b536d1fb2e55e3aa |
|
| /// File Name: |
lduXSS2.txt |
Description:
|
Land Down Under suffers from cross site scripting vulnerabilities in the signature and topic payloads.
| | Author: | spyMASter | | File Size: | 804 | | Last Modified: | Aug 31 01:18:57 2005 |
| MD5 Checksum: | 38e1144d56f1c9a6cdeb36bb6a7a7238 |
|
| /// File Name: |
lglass20040427.txt |
Description:
|
Exploit for Looking Glass v20040427 arbitrary command execution / cross site scripting vulnerabilities
| | Author: | rgod | | Homepage: | http://retrogod.altervista.org | | File Size: | 6518 | | Last Modified: | Aug 28 05:31:58 2005 |
| MD5 Checksum: | fc4b3d001799b92df265dce9d88d0b2a |
|
| /// File Name: |
linksysWLAN20.txt |
Description:
|
The Linksys WLAN Monitor service (WLSVC) that is used to configure settings for various Linksys wireless network cards runs under the context of the LocalSystem account. It is possible to manipulate the administrative interface of the Linksys WLAN Monitor and escalate privileges to that of the LocalSystem account. Linksys WLAN Monitor version 2.0 is susceptible.
| | Author: | Reed Arvin | | Homepage: | http://reedarvin.thearvins.com/ | | File Size: | 1746 | | Last Modified: | Aug 11 00:52:21 2005 |
| MD5 Checksum: | 880c6418dd76abab4214c0e9146f60e3 |
|
| /// File Name: |
linsql2.c |
Description:
|
linsql2 is an updated version of the command line client for MS-SQL that can execute arbitrary SQL queries and OS commands, when the username/password of the MS-SQL server is known. This version supports the API of the latest freetds library.
| | Author: | solid, herbless | | File Size: | 29720 | | Last Modified: | Aug 5 03:41:56 2005 |
| MD5 Checksum: | b933a852b1dbefb29d1a2d51fac664cb |
|
| /// File Name: |
mdaemon_imap.pm.txt |
Description:
|
Mdaemon 8.0.3 IMAP CRAM-MD5 authentication remote buffer overflow exploit.
| | File Size: | 2479 | | Last Modified: | Aug 15 01:17:13 2005 |
| MD5 Checksum: | 379e6bb2e530de9238d0c264ea2ef2d8 |
|
| /// File Name: |
mediabox404.txt |
Description:
|
mediabox404 WebRadio and WebTV manager is susceptible to a SQL injection attack that allows for login bypass. Versions 1.2 and below are vulnerable.
| | Author: | Cedric Tissieres | | Homepage: | http://www.objectif-securite.ch | | File Size: | 1669 | | Last Modified: | Aug 18 02:56:24 2005 |
| MD5 Checksum: | a1587b7efad1ea40f3b4d70501538bb2 |
|
| /// File Name: |
ms05038.c |
Description:
|
Microsoft Internet Explorer COM Object remote file down and execute exploit. Makes use of the vulnerability described in MS05-038.
| | Author: | ZwelL | | Homepage: | http://www.donews.net/zwell | | File Size: | 12345 | | Related CVE(s): | CAN-2005-1990 | | Last Modified: | Aug 12 02:51:35 2005 |
| MD5 Checksum: | 87d23d7995cf25e628a75fa06f9295bc |
|
| /// File Name: |
ms05039.c |
Description:
|
Microsoft Windows 2000 Plug and Play universal remote exploit for the flaw discussed in MS05-039.
| | File Size: | 6750 | | Related CVE(s): | CAN-2005-1983 | | Last Modified: | Aug 12 02:56:09 2005 |
| MD5 Checksum: | dfe17f8473ec85618b91a9a7f181675a |
|
| /// File Name: |
multiVulns.txt |
Description:
|
Multiple vulnerabilities have been discovered in various CMS and forum software. e107 suffers from a cross site scripting flaw, Wordpress suffers from a SQL injection flaw, PHPNews suffers from a remote inclusion flaw, phpBB suffers from a SQL injection flaw, Google suffers from a SQL injection flaw, and myspace.com suffers from a user profile defacement flaw. Oh.. and UBB 6.3.2 suffers from a remote code execution flaw.
| | Author: | pacifico, ratboy | | File Size: | 4505 | | Last Modified: | Aug 31 01:15:14 2005 |
| MD5 Checksum: | 0b3cc1bdf7c9bc094938f2cf671a24b5 |
|
| /// File Name: |
MyBBRC4.txt |
Description:
|
Multiple SQL injection vulnerabilities exist in MyBB RC 4.
| | Author: | Phuket | | File Size: | 1875 | | Last Modified: | Aug 13 02:42:47 2005 |
| MD5 Checksum: | 780f66ab57fa4b0c488ea8c658e9180f |
|
| /// File Name: |
mybbSQL.pl.txt |
Description:
|
MyBulletinBoard (MyBB) member.php SQL injection exploit.
| | Author: | W7ED | | File Size: | 1488 | | Last Modified: | Aug 31 01:17:00 2005 |
| MD5 Checksum: | 9274e58ef338ce1541974c525480a669 |
|
| /// File Name: |
mybbSQLinject.txt |
Description:
|
MyBulletinBoard (MyBB) versions 1.00 RC1 through RC4 suffer from SQL injection flaws. Perl exploit included.
| | Author: | Devil-00 | | File Size: | 2193 | | Last Modified: | Aug 23 21:04:17 2005 |
| MD5 Checksum: | 49f040c0a085c912cd267235e83f12de |
|
| /// File Name: |
NAePolicy.txt |
Description:
|
A privilege escalation flaw exists in Network Associates ePolicy Orchestrator Agent 3.5.0 (patch 3). Exploitation details provided.
| | Author: | Reed Arvin | | Homepage: | http://reedarvin.thearvins.com/ | | File Size: | 1748 | | Last Modified: | Aug 12 03:00:22 2005 |
| MD5 Checksum: | 3ca0a4e98d960f6e2e41e2b844bed4f7 |
|
| /// File Name: |
naxtorShop.txt |
Description:
|
Naxtor Shopping Cart 1.0 is susceptible to cross site scripting, SQL injection, and information disclosure vulnerabilities.
| | Author: | John Cobb | | Homepage: | http://www.NoBytes.com | | File Size: | 1355 | | Last Modified: | Aug 5 03:13:36 2005 |
| MD5 Checksum: | c1109170d635c65df586c88031bbdf51 |
|
| /// File Name: |
nbSMTP_fsexp.c |
Description:
|
nbSMTP version 0.99 remote format string exploit. Tested on Slackware Linux 9.0, 10.0, and 10.1.
| | Author: | CoKi | | Homepage: | http://www.nosystem.com.ar | | Related File: | glsa-200508-03.txt | | File Size: | 9664 | | Last Modified: | Aug 6 02:09:25 2005 |
| MD5 Checksum: | 7b03f489ef56c1c6f12b4ebe55f21c9e |
|
| /// File Name: |
nephp304.txt |
Description:
|
Nephp Publisher 3.04 is susceptible to a cross site scripting flaw.
| | Homepage: | http://www.shabgard.org | | File Size: | 494 | | Last Modified: | Aug 24 00:48:16 2005 |
| MD5 Checksum: | 42d0f230af8832e1f33e8398d4a25c2c |
|
| /// File Name: |
netquery311.html |
Description:
|
Netquery 3.11 remote command execution proof of concept exploit.
| | Author: | rgod | | Homepage: | http://retrogod.altervista.org/ | | File Size: | 7124 | | Last Modified: | Aug 24 00:43:42 2005 |
| MD5 Checksum: | 83c1382cfd28ff684814dc00390654d1 |
|
| /// File Name: |
nordXSS.txt |
Description:
|
Nordstrom's website is susceptible cross site scripting attacks.
| | Author: | Jeff Peadro | | File Size: | 499 | | Last Modified: | Aug 17 01:04:00 2005 |
| MD5 Checksum: | ccde934bcb2be4c445b17f410caaf369 |
|
| /// File Name: |
onunload.txt |
Description:
|
In nearly all browsers you can overwrite the window location in the 'onunload' event. This has been tested against Firefox, Opera, and Internet Explorer.
| | Author: | Tobias Boonstoppel | | File Size: | 773 | | Last Modified: | Aug 25 00:57:48 2005 |
| MD5 Checksum: | cb19d56d011a3ec5af3696705135f266 |
|
| /// File Name: |
openSQL.txt |
Description:
|
Open Bulletin Board is susceptible to multiple SQL injection attacks. All versions are affected. Sample exploitation provided.
| | Author: | Abducter | | Homepage: | http://www.s4a.cc | | File Size: | 890 | | Last Modified: | Aug 10 01:29:36 2005 |
| MD5 Checksum: | e05ba222117ffe789e97f548d5aae8e8 |
|
| /// File Name: |
OS2A-1001.txt |
Description:
|
ePing is a ping utility plugin for e107, a PHP-based content management system that uses a MySQL backend database. ePing versions 1.02 and prior are vulnerable to a file creation vulnerability caused by improper validation of user-supplied input in the doping.php script.
| | File Size: | 2122 | | Last Modified: | Aug 9 04:46:58 2005 |
| MD5 Checksum: | cd56bc67a5d28cae77bfe3fd1a9d2063 |
|
| /// File Name: |
PaFileDB31SQL.txt |
Description:
|
PaFileDB 3.1 is susceptible to a SQL injection attack that allows for login bypass.
| | Author: | deluxe89, Astovidatu | | Homepage: | http://security-project.org | | File Size: | 1833 | | Last Modified: | Aug 25 01:09:21 2005 |
| MD5 Checksum: | 5ebb7571066d1cee27025c2990ccbf0e |
|
| /// File Name: |
phpAdsNew205.txt |
Description:
|
phpAdsNew and phpPgAds versions 2.0.5 and below suffer from an arbitrary file inclusion flaw. Detailed exploitation provided.
| | Author: | Maksymilian Arciemowicz | | File Size: | 3018 | | Last Modified: | Aug 18 03:23:35 2005 |
| MD5 Checksum: | 1ed20310705df1b100b9b0f847ea67a1 |
|
|
|
|
|