Packet Storm - Information Security News, Files, Tools, Exploits, Advisories and Whitepapers http://packetstormsecurity.org/ en-us Sun, 27 May 2012 22:43:38 GMT 144400 http://packetstormsecurity.org/ http://www.google-analytics.com/__utm.gif?utmwv=1.3&utmn=1019133252&utmcs=ISO-8859-1&utmsr=31337x31337&utmsc=32-bit&utmul=en-us&utmje=0&utmfl=-&utmcn=1&utmdt=Files%u2248%20Packet%20Storm&utmhn=packetstormsecurity.org&utmr=-&utmp=%2F0809-exploits%2F&utmac=UA-18885198-1&utmcc=__utma%3D32867617.1019133252.1338158618.1338158618.1338158618.1%3B%2B__utmz%3D32867617.1338158618.1.1.utmccn%3D(direct)%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none) http://packetstormsecurity.org/files/70523/0809-exploits.tgz http://packetstormsecurity.org/files/70523/0809-exploits.tgz http://packetstormsecurity.org/files/70523/0809-exploits.tgz.html Wed, 01 Oct 2008 21:10:53 GMT Packet Storm new exploits for September, 2008. http://packetstormsecurity.org/files/70508/sgrealestate-cookie.txt http://packetstormsecurity.org/files/70508/sgrealestate-cookie.txt http://packetstormsecurity.org/files/70508/sgrealestate-cookie.txt.html Wed, 01 Oct 2008 00:24:28 GMT SG Real Estate Portal version 2.0 suffers from an insecure cookie handling vulnerability. http://packetstormsecurity.org/files/70507/sgrealestate-sql.txt http://packetstormsecurity.org/files/70507/sgrealestate-sql.txt http://packetstormsecurity.org/files/70507/sgrealestate-sql.txt.html Wed, 01 Oct 2008 00:23:20 GMT SG Real Estate Portal version 2.0 remote blind SQL injection exploit. http://packetstormsecurity.org/files/70506/sgrealestate-sqllfi.txt http://packetstormsecurity.org/files/70506/sgrealestate-sqllfi.txt http://packetstormsecurity.org/files/70506/sgrealestate-sqllfi.txt.html Wed, 01 Oct 2008 00:22:14 GMT SG Real Estate Portal version 2.0 suffers from blind SQL injection and local file inclusion vulnerabilities. http://packetstormsecurity.org/files/70505/autodesk-exec.txt http://packetstormsecurity.org/files/70505/autodesk-exec.txt http://packetstormsecurity.org/files/70505/autodesk-exec.txt.html Wed, 01 Oct 2008 00:20:45 GMT Autodesk DWF Viewer Control / LiveUpdate Module remote code execution exploit. http://packetstormsecurity.org/files/70503/faq-sql.txt http://packetstormsecurity.org/files/70503/faq-sql.txt http://packetstormsecurity.org/files/70503/faq-sql.txt.html Wed, 01 Oct 2008 00:01:08 GMT FAQ Management script suffers from a remote SQL injection vulnerability. http://packetstormsecurity.org/files/70502/a4deskphp-rfi.txt http://packetstormsecurity.org/files/70502/a4deskphp-rfi.txt http://packetstormsecurity.org/files/70502/a4deskphp-rfi.txt.html Tue, 30 Sep 2008 23:58:06 GMT A4Desk PHP Event Calendar suffers from a remote file inclusion vulnerability. http://packetstormsecurity.org/files/70501/major_rls56.txt http://packetstormsecurity.org/files/70501/major_rls56.txt http://packetstormsecurity.org/files/70501/major_rls56.txt.html Tue, 30 Sep 2008 23:56:48 GMT moziloWiki versions 1.0.1 and below suffer from directory traversal, cross site scripting, and session fixation vulnerabilities. http://packetstormsecurity.org/files/70500/wordpressmu-xss.txt http://packetstormsecurity.org/files/70500/wordpressmu-xss.txt http://packetstormsecurity.org/files/70500/wordpressmu-xss.txt.html Tue, 30 Sep 2008 23:54:27 GMT WordPress MU versions below 2.6 suffer from a cross site scripting vulnerability in wpmu-blogs.php. http://packetstormsecurity.org/files/70497/msie7-dos.txt http://packetstormsecurity.org/files/70497/msie7-dos.txt http://packetstormsecurity.org/files/70497/msie7-dos.txt.html Tue, 30 Sep 2008 23:49:05 GMT Microsoft Internet Explorer 7 denial of service exploit that is rumored to work on Konqueror as well. http://packetstormsecurity.org/files/70496/googsaf-dos.txt http://packetstormsecurity.org/files/70496/googsaf-dos.txt http://packetstormsecurity.org/files/70496/googsaf-dos.txt.html Tue, 30 Sep 2008 23:46:39 GMT Google Chrome version 0.2.149.30 and Safari version 3.1.2 suffer from a denial of service vulnerability. http://packetstormsecurity.org/files/70494/efront-upload.txt http://packetstormsecurity.org/files/70494/efront-upload.txt http://packetstormsecurity.org/files/70494/efront-upload.txt.html Tue, 30 Sep 2008 23:40:44 GMT eFront versions 3.5.1 build 2710 and below suffer from a remote arbitrary upload vulnerability. http://packetstormsecurity.org/files/70493/minbank-rfi.txt http://packetstormsecurity.org/files/70493/minbank-rfi.txt http://packetstormsecurity.org/files/70493/minbank-rfi.txt.html Tue, 30 Sep 2008 23:39:11 GMT Micronation Banking System version 1.5.0 suffers from multiple remote file inclusion vulnerabilities. http://packetstormsecurity.org/files/70492/arabcms-lfi.txt http://packetstormsecurity.org/files/70492/arabcms-lfi.txt http://packetstormsecurity.org/files/70492/arabcms-lfi.txt.html Tue, 30 Sep 2008 23:35:09 GMT Arab CMS suffers from a local file inclusion vulnerability in rss.php. http://packetstormsecurity.org/files/70461/wireshark-dos.tgz http://packetstormsecurity.org/files/70461/wireshark-dos.tgz http://packetstormsecurity.org/files/70461/wireshark-dos.tgz.html Mon, 29 Sep 2008 20:22:13 GMT Wireshark version 1.0.x .ncf file local denial of service exploit. http://packetstormsecurity.org/files/70459/easy4u-sqlxss.txt http://packetstormsecurity.org/files/70459/easy4u-sqlxss.txt http://packetstormsecurity.org/files/70459/easy4u-sqlxss.txt.html Mon, 29 Sep 2008 20:18:53 GMT Easy4U CMS suffers from remote SQL injection and cross site scripting vulnerabilities in main.php. http://packetstormsecurity.org/files/70456/pgmatchmaking-sql.txt http://packetstormsecurity.org/files/70456/pgmatchmaking-sql.txt http://packetstormsecurity.org/files/70456/pgmatchmaking-sql.txt.html Mon, 29 Sep 2008 20:15:34 GMT PG Matchmaking script suffers from multiple remote SQL injection vulnerabilities. http://packetstormsecurity.org/files/70455/msiegdi-poc.txt http://packetstormsecurity.org/files/70455/msiegdi-poc.txt http://packetstormsecurity.org/files/70455/msiegdi-poc.txt.html Mon, 29 Sep 2008 20:14:12 GMT Microsoft Internet Explorer GDI+ proof of concept exploit that leverages the vulnerability discussed in MS08-0520. http://packetstormsecurity.org/files/70454/explorer-dos.tgz http://packetstormsecurity.org/files/70454/explorer-dos.tgz http://packetstormsecurity.org/files/70454/explorer-dos.tgz.html Mon, 29 Sep 2008 20:11:26 GMT Microsoft Windows Explorer unspecified .zip file denial of service exploit. http://packetstormsecurity.org/files/70453/eventscal-rfi.txt http://packetstormsecurity.org/files/70453/eventscal-rfi.txt http://packetstormsecurity.org/files/70453/eventscal-rfi.txt.html Mon, 29 Sep 2008 20:05:25 GMT Events Calendar version 1.1 suffers from a remote file inclusion vulnerability. http://packetstormsecurity.org/files/70452/phpfusionfresh-sql.txt http://packetstormsecurity.org/files/70452/phpfusionfresh-sql.txt http://packetstormsecurity.org/files/70452/phpfusionfresh-sql.txt.html Mon, 29 Sep 2008 20:03:00 GMT The PHP-Fusion Freshlinks module suffers from a remote SQL injection vulnerability. http://packetstormsecurity.org/files/70451/postcomments-cookie.txt http://packetstormsecurity.org/files/70451/postcomments-cookie.txt http://packetstormsecurity.org/files/70451/postcomments-cookie.txt.html Mon, 29 Sep 2008 20:02:09 GMT Post Comments version 3.0 suffers from an insecure cookie handling vulnerability. http://packetstormsecurity.org/files/70450/xbtit-sql.txt http://packetstormsecurity.org/files/70450/xbtit-sql.txt http://packetstormsecurity.org/files/70450/xbtit-sql.txt.html Mon, 29 Sep 2008 20:01:16 GMT xbtit version 2.0.0 suffers from a remote SQL injection vulnerability in scrape.php. http://packetstormsecurity.org/files/70449/webbiscuitsec-rfi.txt http://packetstormsecurity.org/files/70449/webbiscuitsec-rfi.txt http://packetstormsecurity.org/files/70449/webbiscuitsec-rfi.txt.html Mon, 29 Sep 2008 20:00:28 GMT Webbiscuits Events Calendar version 1.1 suffers from a remote file inclusion vulnerability. http://packetstormsecurity.org/files/70448/joomlaimage-traverse.txt http://packetstormsecurity.org/files/70448/joomlaimage-traverse.txt http://packetstormsecurity.org/files/70448/joomlaimage-traverse.txt.html Mon, 29 Sep 2008 18:54:37 GMT The Joomla imagebrowser component versions 0.1.5 RC2 and below suffer from a directory traversal vulnerability.