Discovered by Sirdarckcat from elhacker.net

------------------------------------------------------------------------
------------

ssLinks v1.22 Multiple SQL Injection Vulnerabilities

http://scripts.incutio.com/sslinks/

------------------------------------------------------------------------
--

[ more ]  [ reply ]

Discovered by Sirdarckcat from elhacker.net

------------------------------------------------------------------------
------------

Autentificator v2.01 SQL Injection

http://www.hotscripts.com/Detailed/15291.html

------------------------------------------------------------------------
----------

[ more ]  [ reply ]

Discovered by Sirdarckcat from elhacker.net

------------------------------------------------------------------------
------------

Revista 1.1.2

http://php-revista.sourceforge.org

------------------------------------------------------------------------
------------

Revista is a simple spanis

[ more ]  [ reply ]

Hi,
There are several sql injections in e107 0.7.5 admin section :

I) The "linkopentype", "linkrender" and "link_class" parameters are passed
to "db_Insert()" function without checking :

File /e107_admin/links.php, Line 496 :
>> $sql->db_Insert("links", "0, '$link_name', '$link_url', '$link_descri

[ more ]  [ reply ]

Hi,
There is a sql injection in SMF 1.1 RC3, in admin section :
When an administrator is going to add a new board, the "cur_cat" parameter
is not checked properly :

File /Sources/ManageBoards.php, Line 609 :
:: // Create a new board...
:: if (isset($_POST['add']))
:: {
:: // New boards by default

[ more ]  [ reply ]

########################################################################
########

## ##

## Icblogger <= "YID" Remote Blind SQL Injection ##

## - - - - - - - - - - - - - - - - - - - - - - -

[ more ]  [ reply ]

#!/usr/bin/perl

#

# Affected.scr..: µforum v0.4c

# Poc.ID........: 08060901

# Type..........: Member's passwords are stored in .dat file no protected by a .htaccess file

# Risk.level....: Medium

# Vendor.Status.: Unpatched

# Src.download..: comscripts.com/scripts/php.forum.1568.html

# Poc.li

[ more ]  [ reply ]

vbzoom ====> index.php

info:

file:index.php

thank to www.lezr.com/vb

google ======> powered by vbzoom inurl:index.php?UserID=

Exp:

http://[traget]/[path]/index.php?UserID="><script>alert(1);</script>

===================================

by Crack_man

[ more ]  [ reply ]

Hi all,

Well we have read David's Litchfield's paper on how insecure and easy
cracking unpatched versions of Informix is. But how about the OEM vendors
like Telelogic with their Synergy product range? Telelogic's Synergy Change
and CM are enterprise products for Change Management control whic

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDKSA-2006:160
http://www.mandriva.com/security/
____________________________________________________________________

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDKSA-2006:159
http://www.mandriva.com/security/
____________________________________________________________________

[ more ]  [ reply ]

Hello,

I would like to inform you about a vulnerability in BlackICE PC Protection
driver found by Matousec - Transparent security.

Description:

Hooking SSDT functions requires extra caution. SSDT function handlers are executed in the kernel mode but their callers
are executed in the user mode.

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Debian Security Advisory DSA 1165-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Martin Schulze
September 1st, 2006

[ more ]  [ reply ]

This vulnerability is not that dangerous because, firstly, if you want to exploit it, you must have exact file tree and correct name of the malicious script because that variable is never used alone but always in concatanation with script name and generic extension and, secondly, if site has regist

[ more ]  [ reply ]

This is no vulnerability.

$inc_path and $misc_inc_path and others get set by b2evo itself in /blogs/_conf/_advanced.php before they get used for "require()/include()".

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

::
:: [ISR]
:: Infobyte Security Research
:: www.infobyte.com.ar
:: 08.29.2006
::

.:: DOWNLOAD

http://www.infobyte.com.ar/development.html

.:: CREDIT

Francisco Amato
famato][at][infobyte][dot][com][dot][ar

-----BEGIN PGP SIGNATURE-----

[ more ]  [ reply ]

+ModuleBased CMS(MBCMS) multiple remote file Inclusion

+discripton:MBCMS (ModuleBased CMS) is a new CMS designed for ease of use and customability. It is designed +for PHP/MySQL and it is easy to write new modules or templates to suit a particular website.

+version:alfa 1

+vendor site:http://sou

[ more ]  [ reply ]

rPath Security Advisory: 2006-0162-1
Published: 2006-08-31
Products: rPath Linux 1
Rating: Major
Exposure Level Classification:
Local Root Deterministic Privilege Escalation
Updated Versions:
kernel=/conary.rpath.com@rpl:devel//1/2.6.17.11-1-0.1

References:
http://www.cve.mitre.org/cgi-

[ more ]  [ reply ]

A simple student account and you can execute the XSS. You will put the code onto the discussion board in a post form.

There is why Blackboard released first a patch and then an upgrade. Those vulnerabilities were found around the first semester of 2006. So there wasn't version 7.0 at that time.

[ more ]  [ reply ]

#=======================================================================
=======================

#Pheap CMS<= (lpref) Remote File Inclusion Exploit

#=======================================================================
========================

#

[ more ]  [ reply ]

The Compression Plus library is designed to handle de/compression of
popular archiving formats such as ARC, ARK, PAK, ARJ, CAB, GZ, LBR, TAR,
TAZ, TGZ, Z, ZIP, and ZOO. The code fails to properly validate input
while processing specially crafted ZOO files, which results in a
stack-based buffer overf

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDKSA-2006:158
http://www.mandriva.com/security/
____________________________________________________________________

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Debian Security Advisory DSA 1164-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Noah Meyerhans
August 31st, 2006

[ more ]  [ reply ]

=================================================================

Affected.scr..: Membrepass v1.5

Advisory.ID...: 09290806

Type..........: Cross Site Scripting, SQL Injection

Php code execution

Risk.level....: Medium

Vendor.Status.: Unpatched

Src.download..: comscripts.

[ more ]  [ reply ]

Advisory: Lyris ListManager 8.95: Add arbitrary
administrator to arbitrary list
Release Date: 2006-08-30
Application: Lyris ListManager 8.95
Risk: Depends upon your use and business context
Vendor site: http://www.lyris.com/

Overview of Product:
"Lyris ListManager is the world's most popular
so

[ more ]  [ reply ]

rPath Security Advisory: 2006-0161-1
Published: 2006-08-30
Products: rPath Linux 1
Rating: Minor
Exposure Level Classification:
Indirect User Deterministic Unauthorized Access
Updated Versions:
libmusicbrainz=/conary.rpath.com@rpl:devel//1/2.1.4-0.1-1

References:
http://www.cve.mitre.or

[ more ]  [ reply ]

info:

=====

script:learncenter.asp

thanks to: www.lezr.com

google ===> Powered by Learn.com

=================

Exp:

http://[site]/learncenter.asp?id="><script>alert(1);</script>

==========================

by Crack_man

[ more ]  [ reply ]

ISC Diary has new entry published recently entitled as "NT botnet submitted":
http://isc.sans.org/diary.php?storyid=1657
After the release they changed the name to "botnet submitted" to describe the situation better.

The affected library of August's MS06-040, Netapi32.dll, is included to NT4.0 inst

[ more ]  [ reply ]