Packet Storm - Information Security News, Files, Tools, Exploits, Advisories and Whitepapers http://packetstormsecurity.org/ en-us Sun, 27 May 2012 22:52:29 GMT 144400 http://packetstormsecurity.org/ http://www.google-analytics.com/__utm.gif?utmwv=1.3&utmn=1878715078&utmcs=ISO-8859-1&utmsr=31337x31337&utmsc=32-bit&utmul=en-us&utmje=0&utmfl=-&utmcn=1&utmdt=Files%u2248%20Packet%20Storm&utmhn=packetstormsecurity.org&utmr=-&utmp=%2F0811-exploits%2F&utmac=UA-18885198-1&utmcc=__utma%3D32867617.1878715078.1338159149.1338159149.1338159149.1%3B%2B__utmz%3D32867617.1338159149.1.1.utmccn%3D(direct)%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none) http://packetstormsecurity.org/files/72461/0811-exploits.tgz http://packetstormsecurity.org/files/72461/0811-exploits.tgz http://packetstormsecurity.org/files/72461/0811-exploits.tgz.html Mon, 01 Dec 2008 18:29:34 GMT Packet Storm new exploits for November, 2008. http://packetstormsecurity.org/files/72457/broadcast-rfi.txt http://packetstormsecurity.org/files/72457/broadcast-rfi.txt http://packetstormsecurity.org/files/72457/broadcast-rfi.txt.html Mon, 01 Dec 2008 03:44:22 GMT Broadcast Machine version 0.1 suffers from multiple remote file inclusion vulnerabilities. http://packetstormsecurity.org/files/72456/cpcommerce-bypass.txt http://packetstormsecurity.org/files/72456/cpcommerce-bypass.txt http://packetstormsecurity.org/files/72456/cpcommerce-bypass.txt.html Mon, 01 Dec 2008 02:21:21 GMT cpCommerce version 1.2.6 suffers from input variable overwrite and authentication bypass vulnerabilities. http://packetstormsecurity.org/files/72455/minimalablog-sqlfubypass.txt http://packetstormsecurity.org/files/72455/minimalablog-sqlfubypass.txt http://packetstormsecurity.org/files/72455/minimalablog-sqlfubypass.txt.html Mon, 01 Dec 2008 01:22:22 GMT Minimal Ablog version 0.4 suffers from file upload, administrative bypass, and remote SQL injection vulnerabilities. http://packetstormsecurity.org/files/72454/ktpccd-sql.txt http://packetstormsecurity.org/files/72454/ktpccd-sql.txt http://packetstormsecurity.org/files/72454/ktpccd-sql.txt.html Sun, 30 Nov 2008 22:32:33 GMT KTP Computer Customer Database CMS suffers from a blind SQL injection vulnerability. http://packetstormsecurity.org/files/72453/ktpccd-lfi.txt http://packetstormsecurity.org/files/72453/ktpccd-lfi.txt http://packetstormsecurity.org/files/72453/ktpccd-lfi.txt.html Sun, 30 Nov 2008 21:22:10 GMT KTP Computer Customer Database CMS local file inclusion exploit. http://packetstormsecurity.org/files/72444/activebids-sql.txt http://packetstormsecurity.org/files/72444/activebids-sql.txt http://packetstormsecurity.org/files/72444/activebids-sql.txt.html Sun, 30 Nov 2008 19:48:43 GMT Active Bids version 3.5 suffers from a blind SQL injection vulnerability. http://packetstormsecurity.org/files/72443/activetest21-sql.txt http://packetstormsecurity.org/files/72443/activetest21-sql.txt http://packetstormsecurity.org/files/72443/activetest21-sql.txt.html Sun, 30 Nov 2008 19:45:44 GMT Active Test version 2.1 suffers from a blind SQL injection vulnerability. http://packetstormsecurity.org/files/72442/activewebmail4-sql.txt http://packetstormsecurity.org/files/72442/activewebmail4-sql.txt http://packetstormsecurity.org/files/72442/activewebmail4-sql.txt.html Sun, 30 Nov 2008 19:41:18 GMT Active Web Mail version 4 suffers from a blind SQL injection vulnerability. http://packetstormsecurity.org/files/72441/activevotes22-sql.txt http://packetstormsecurity.org/files/72441/activevotes22-sql.txt http://packetstormsecurity.org/files/72441/activevotes22-sql.txt.html Sun, 30 Nov 2008 19:39:03 GMT Active Votes version 2.2 suffers from a blind SQL injection vulnerability. http://packetstormsecurity.org/files/72440/oramon-disclose.txt http://packetstormsecurity.org/files/72440/oramon-disclose.txt http://packetstormsecurity.org/files/72440/oramon-disclose.txt.html Sun, 30 Nov 2008 19:37:09 GMT OraMon version 2.0.1 suffers from a remote configuration file disclosure vulnerability. http://packetstormsecurity.org/files/72439/aspthai-disclose.txt http://packetstormsecurity.org/files/72439/aspthai-disclose.txt http://packetstormsecurity.org/files/72439/aspthai-disclose.txt.html Sun, 30 Nov 2008 19:34:46 GMT ASPThai.NET Forum version 8.5 suffers from a remote database disclosure vulnerability. http://packetstormsecurity.org/files/72438/openforum-password.txt http://packetstormsecurity.org/files/72438/openforum-password.txt http://packetstormsecurity.org/files/72438/openforum-password.txt.html Sun, 30 Nov 2008 19:33:11 GMT OpenForum version 0.66 Beta remote administrator password reset exploit. http://packetstormsecurity.org/files/72452/activebizdir-sql.txt http://packetstormsecurity.org/files/72452/activebizdir-sql.txt http://packetstormsecurity.org/files/72452/activebizdir-sql.txt.html Sun, 30 Nov 2008 19:22:11 GMT Active Business Directory version 2 suffers from a remote blind SQL injection vulnerability. http://packetstormsecurity.org/files/72451/activetimebilling-sql.txt http://packetstormsecurity.org/files/72451/activetimebilling-sql.txt http://packetstormsecurity.org/files/72451/activetimebilling-sql.txt.html Sun, 30 Nov 2008 17:44:34 GMT Active Time Billing version 3.2 suffers from a SQL injection vulnerability that allows for authentication bypass. http://packetstormsecurity.org/files/72450/activeprice-blindsql.txt http://packetstormsecurity.org/files/72450/activeprice-blindsql.txt http://packetstormsecurity.org/files/72450/activeprice-blindsql.txt.html Sun, 30 Nov 2008 17:21:21 GMT Active Price Comparison version 4 suffers from a blind SQL injection vulnerability. http://packetstormsecurity.org/files/72449/activephotogal-sql.txt http://packetstormsecurity.org/files/72449/activephotogal-sql.txt http://packetstormsecurity.org/files/72449/activephotogal-sql.txt.html Sun, 30 Nov 2008 17:20:01 GMT Active Photo Gallery version 6.2 suffers from a SQL injection vulnerability that allows for authentication bypass. http://packetstormsecurity.org/files/72448/activewebhelpdesk-sql.txt http://packetstormsecurity.org/files/72448/activewebhelpdesk-sql.txt http://packetstormsecurity.org/files/72448/activewebhelpdesk-sql.txt.html Sun, 30 Nov 2008 17:15:01 GMT Active Web Helpdesk version 2 suffers from a remote SQL injection vulnerability that allows for authentication bypass. http://packetstormsecurity.org/files/72447/activewebmail-blindsql.txt http://packetstormsecurity.org/files/72447/activewebmail-blindsql.txt http://packetstormsecurity.org/files/72447/activewebmail-blindsql.txt.html Sun, 30 Nov 2008 17:01:11 GMT Active Web Mail version 4 suffers from a blind SQL injection vulnerability. http://packetstormsecurity.org/files/72437/litolite-sql.txt http://packetstormsecurity.org/files/72437/litolite-sql.txt http://packetstormsecurity.org/files/72437/litolite-sql.txt.html Sun, 30 Nov 2008 09:37:02 GMT Lito Lite CMS remote SQL injection exploit that makes use of cate.php. http://packetstormsecurity.org/files/72436/quicktree-disclose.txt http://packetstormsecurity.org/files/72436/quicktree-disclose.txt http://packetstormsecurity.org/files/72436/quicktree-disclose.txt.html Sun, 30 Nov 2008 09:34:43 GMT Quick Tree View .NET version 3.1 suffers from a qtv.mdg database disclosure vulnerability. http://packetstormsecurity.org/files/72435/cmsmadesimple-lfi.txt http://packetstormsecurity.org/files/72435/cmsmadesimple-lfi.txt http://packetstormsecurity.org/files/72435/cmsmadesimple-lfi.txt.html Sun, 30 Nov 2008 09:31:17 GMT CMS Made Simple version 1.4.1 suffers from a local file inclusion vulnerability. http://packetstormsecurity.org/files/72434/cainabel.py.txt http://packetstormsecurity.org/files/72434/cainabel.py.txt http://packetstormsecurity.org/files/72434/cainabel.py.txt.html Sun, 30 Nov 2008 09:28:10 GMT Cain and Abel version 4.9.23 RDP file buffer overflow proof of concept exploit. http://packetstormsecurity.org/files/72433/itune-overflow.txt http://packetstormsecurity.org/files/72433/itune-overflow.txt http://packetstormsecurity.org/files/72433/itune-overflow.txt.html Sun, 30 Nov 2008 09:26:29 GMT iTunes version 8.0.2.20 and QuickTime 7.5.5 overflow proof of concept exploit that leverages .mov files. http://packetstormsecurity.org/files/72432/phptvportal-sql.txt http://packetstormsecurity.org/files/72432/phptvportal-sql.txt http://packetstormsecurity.org/files/72432/phptvportal-sql.txt.html Sat, 29 Nov 2008 20:19:05 GMT PHP TV Portal version 2.0 suffers from a remote SQL injection vulnerability in index.php.