what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 6 of 6

Files Date: 2004-04-18 to 2004-04-19

phpBB208a.txt

Posted Apr 18, 2004

Authored by Wang / SRR Project Group

phpBB versions 2.0.8a and below suffer from an IP spoofing vulnerability that allows a malicious user to post messages and have them be tied to forged IP addresses.

tags | advisory, spoof

SHA-256 | 012ac3015749c388d7244a46e4409b068cea07bc7316faa1b7af96cede0be17e

Download | Favorite | View

gvexpl.tgz

Posted Apr 18, 2004

Authored by priestmaster | Site priestmaster.org

Remote root proof of concept exploit for gv versions 3.5.8 and below. Binds a shell to port 65535. Makes use of an old vulnerability that does not have an exploit circulating for it.

tags | exploit, remote, shell, root, proof of concept

SHA-256 | 11d8cbe05d44de0b0c307ee9081118802cb84f87aeb270e7921d6390d73955dc

Download | Favorite | View

Phorum347SQL.pl

Posted Apr 18, 2004

Authored by Janek Vind aka waraxe | Site waraxe.us

Remote exploit that makes use of a SQL injection vulnerability in Phorum version 3.4.7.

tags | exploit, remote, sql injection

SHA-256 | 9f4cf79038884aae5dcd94f78963562f26d6d2bddc3d43b27874e515c90298cb

Download | Favorite | View

waraxe-2004-SA019.txt

Posted Apr 18, 2004

Authored by Janek Vind aka waraxe | Site waraxe.us

A critical SQL injection bug exists in Phorum version 3.4.7 that allows a remote attacker to view sensitive data. The problem code lies in userlogin.php.

tags | advisory, remote, php, sql injection

SHA-256 | 9a6afe98513c69946e7f30f31b5b192c8e6123e0b8371ba1df208f890ff5610d

Download | Favorite | View

vsa0401.html

Posted Apr 18, 2004

Authored by Thomas Wana

Format string bugs exist in neon versions 0.19.0 and below when ne_set_error is changed from taking a single char to taking printf-style varargs. Release 0.24.5 fixes this problem.

tags | advisory

advisories | CVE-2004-0179

SHA-256 | 493de778dca786fb58573a1e349e7d80a8466d1d46c151285d7ceeb5d82f3d28

Download | Favorite | View

SPK-chpasswd.tgz

Posted Apr 18, 2004

Authored by SpikE

Local root exploit for Squirrelmail's chpasswd utility. Original bug found by Matias Neiff.

tags | exploit, local, root

SHA-256 | 3c36b2150910beb2509306f98b2cb97e6805d8171120ac5902aad390be155c8d

Download | Favorite | View