Packet Storm - Information Security News, Files, Tools, Exploits, Advisories and Whitepapers http://packetstormsecurity.org/ en-us Mon, 28 May 2012 04:50:14 GMT 144400 http://packetstormsecurity.org/ http://www.google-analytics.com/__utm.gif?utmwv=1.3&utmn=2332744642&utmcs=ISO-8859-1&utmsr=31337x31337&utmsc=32-bit&utmul=en-us&utmje=0&utmfl=-&utmcn=1&utmdt=Files%u2248%20Packet%20Storm&utmhn=packetstormsecurity.org&utmr=-&utmp=%2F1006-exploits%2F&utmac=UA-18885198-1&utmcc=__utma%3D32867617.2332744642.1338180614.1338180614.1338180614.1%3B%2B__utmz%3D32867617.1338180614.1.1.utmccn%3D(direct)%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none) http://packetstormsecurity.org/files/91295/litespeedsource-disclose.txt http://packetstormsecurity.org/files/91295/litespeedsource-disclose.txt http://packetstormsecurity.org/files/91295/litespeedsource-disclose.txt.html Sat, 03 Jul 2010 17:36:21 GMT LiteSpeed Web Server remote source code disclosure exploit. http://packetstormsecurity.org/files/91348/1006-exploits.tgz http://packetstormsecurity.org/files/91348/1006-exploits.tgz http://packetstormsecurity.org/files/91348/Packet-Storm-New-Exploits-For-June-2010.html Thu, 01 Jul 2010 04:59:54 GMT This archive contains all of the 496 exploits added to Packet Storm in June, 2010. http://packetstormsecurity.org/files/91312/webdm-sql.txt http://packetstormsecurity.org/files/91312/webdm-sql.txt http://packetstormsecurity.org/files/91312/WebDM-CMS-SQL-Injection.html Wed, 30 Jun 2010 03:36:20 GMT WebDM CMS suffers from a remote SQL injection vulnerability. http://packetstormsecurity.org/files/91311/miyabicgi-exec.txt http://packetstormsecurity.org/files/91311/miyabicgi-exec.txt http://packetstormsecurity.org/files/91311/Miyabi-CGI-Tools-Input-Validation.html Wed, 30 Jun 2010 03:32:55 GMT Miyabi CGI Tools suffers from an input validation vulnerability that allows for command execution. http://packetstormsecurity.org/files/91308/ZSL-2010-4943.txt http://packetstormsecurity.org/files/91308/ZSL-2010-4943.txt http://packetstormsecurity.org/files/91308/Adobe-Reader-9.3.2-Memory-Corruption-Denial-Of-Service.html Wed, 30 Jun 2010 03:19:37 GMT Adobe Reader suffers from a remote memory corruption vulnerability that causes the application to crash while processing the malicious .PDF file. The issue is triggered when the reader tries to initialize the CoolType Typography Engine (cooltype.dll). Version 9.3.2 is affected. http://packetstormsecurity.org/files/91307/kryn-xssxsrf.txt http://packetstormsecurity.org/files/91307/kryn-xssxsrf.txt http://packetstormsecurity.org/files/91307/Kryn-CMS-0.6-Cross-Site-Request-Forgery-Cross-Site-Scripting.html Wed, 30 Jun 2010 03:17:31 GMT Kryn CMS versions 0.6 and below suffer from cross site request forgery and cross site scripting vulnerabilities. http://packetstormsecurity.org/files/91306/bbpress-xsrf.txt http://packetstormsecurity.org/files/91306/bbpress-xsrf.txt http://packetstormsecurity.org/files/91306/bbPress-1.0.2-Cross-Site-Request-Forgery.html Wed, 30 Jun 2010 03:14:44 GMT bbPress version 1.0.2 suffers from a cross site request forgery vulnerability. http://packetstormsecurity.org/files/91305/mohachat-xss.txt http://packetstormsecurity.org/files/91305/mohachat-xss.txt http://packetstormsecurity.org/files/91305/MOHA-Chat-0.1.1-Cross-Site-Scripting.html Wed, 30 Jun 2010 03:12:38 GMT MOHA Chat version 0.1.1 suffers from a cross site scripting vulnerability. http://packetstormsecurity.org/files/91304/jornaldigital-sql.txt http://packetstormsecurity.org/files/91304/jornaldigital-sql.txt http://packetstormsecurity.org/files/91304/Jornaldigital.com-SQL-Injection.html Wed, 30 Jun 2010 03:11:26 GMT Jornal Digital suffers from a remote SQL injection vulnerability. http://packetstormsecurity.org/files/91303/comunidades-sqlshell.txt http://packetstormsecurity.org/files/91303/comunidades-sqlshell.txt http://packetstormsecurity.org/files/91303/Comunidades.net-SQL-Injection-Shell-Upload.html Wed, 30 Jun 2010 03:10:32 GMT Comunidades.net suffers from shell upload and remote SQL injection vulnerabilities. http://packetstormsecurity.org/files/91302/cmscontentia-sql.txt http://packetstormsecurity.org/files/91302/cmscontentia-sql.txt http://packetstormsecurity.org/files/91302/CMS-Contentia-SQL-Injection.html Wed, 30 Jun 2010 03:08:27 GMT CMS Contentia suffers from a remote SQL injection vulnerability. http://packetstormsecurity.org/files/91301/holocms-sql.txt http://packetstormsecurity.org/files/91301/holocms-sql.txt http://packetstormsecurity.org/files/91301/HoloCMS-9.0.47-SQL-Injection.html Wed, 30 Jun 2010 03:07:33 GMT HoloCMS version 9.0.47 suffers from a remote SQL injection vulnerability. http://packetstormsecurity.org/files/91300/lioosyscms-sql.txt http://packetstormsecurity.org/files/91300/lioosyscms-sql.txt http://packetstormsecurity.org/files/91300/LIOOSYS-CMS-SQL-Injection.html Wed, 30 Jun 2010 03:06:54 GMT LIOOSYS CMS suffers from a remote SQL injection vulnerability. http://packetstormsecurity.org/files/91292/arcademsx-xss.txt http://packetstormsecurity.org/files/91292/arcademsx-xss.txt http://packetstormsecurity.org/files/91292/ArcademSX-2.904-Cross-Site-Scripting.html Wed, 30 Jun 2010 02:45:56 GMT ArcademSX version 2.904 suffers from a cross site scripting vulnerability. http://packetstormsecurity.org/files/91291/BONSAI-2010-0107.txt http://packetstormsecurity.org/files/91291/BONSAI-2010-0107.txt http://packetstormsecurity.org/files/91291/TornadoStore-1.4.3-Cross-Site-Scripting.html Wed, 30 Jun 2010 02:42:30 GMT TornadoStore versions 1.4.3 and below suffer from cross site scripting vulnerabilities. http://packetstormsecurity.org/files/91290/BONSAI-2010-0106.txt http://packetstormsecurity.org/files/91290/BONSAI-2010-0106.txt http://packetstormsecurity.org/files/91290/TornadoStore-1.4.3-SQL-Injection.html Wed, 30 Jun 2010 02:37:30 GMT TornadoStore versions 1.4.3 and below suffer from a remote SQL injection vulnerability. http://packetstormsecurity.org/files/91289/gekkocms-sql.txt http://packetstormsecurity.org/files/91289/gekkocms-sql.txt http://packetstormsecurity.org/files/91289/Gekko-CMS-SQL-Injection.html Wed, 30 Jun 2010 02:36:28 GMT Gekko CMS suffers from a remote SQL injection vulnerability. http://packetstormsecurity.org/files/91288/atarimdesign-sql.txt http://packetstormsecurity.org/files/91288/atarimdesign-sql.txt http://packetstormsecurity.org/files/91288/Atarim-Design-SQL-Injection.html Wed, 30 Jun 2010 02:35:23 GMT Atarim Design suffers from a remote SQL injection vulnerability. http://packetstormsecurity.org/files/91287/IS-2010-005.txt http://packetstormsecurity.org/files/91287/IS-2010-005.txt http://packetstormsecurity.org/files/91287/D-Link-DAP-1160-Authentication-Bypass.html Wed, 30 Jun 2010 02:33:34 GMT The D-Link DAP-1160 suffers from an authentication bypass vulnerability. http://packetstormsecurity.org/files/91286/ypnincjokescript-sql.txt http://packetstormsecurity.org/files/91286/ypnincjokescript-sql.txt http://packetstormsecurity.org/files/91286/YPNinc-JokeScript-SQL-Injection.html Wed, 30 Jun 2010 01:26:06 GMT YPNinc JokeScript suffers from a remote SQL injection vulnerability. http://packetstormsecurity.org/files/91285/grafikcms112-xss.txt http://packetstormsecurity.org/files/91285/grafikcms112-xss.txt http://packetstormsecurity.org/files/91285/Grafik-CMS-1.1.2-Cross-Site-Scripting.html Wed, 30 Jun 2010 01:17:58 GMT Grafik CMS version 1.1.2 suffers from a cross site scripting vulnerability. http://packetstormsecurity.org/files/91284/portalapp40-xss.txt http://packetstormsecurity.org/files/91284/portalapp40-xss.txt http://packetstormsecurity.org/files/91284/PortalApp-4.0-Cross-Site-Scripting.html Wed, 30 Jun 2010 01:17:15 GMT PortalApp version 4.0 suffers from cross site scripting vulnerabilities. http://packetstormsecurity.org/files/91283/portalapp4-xss.txt http://packetstormsecurity.org/files/91283/portalapp4-xss.txt http://packetstormsecurity.org/files/91283/PortalApp-4.0-Cross-Site-Scripting.html Wed, 30 Jun 2010 01:16:08 GMT PortalApp version 4.0 suffers from a cross site scripting vulnerability. http://packetstormsecurity.org/files/91282/grafikcms-xss.txt http://packetstormsecurity.org/files/91282/grafikcms-xss.txt http://packetstormsecurity.org/files/91282/Grafik-CMS-1.1.2-Cross-Site-Scripting.html Wed, 30 Jun 2010 01:14:56 GMT Grafik CMS version 1.1.2 suffers from a cross site scripting vulnerability. http://packetstormsecurity.org/files/91281/grafikcms-sql.txt http://packetstormsecurity.org/files/91281/grafikcms-sql.txt http://packetstormsecurity.org/files/91281/Grafik-CMS-1.1.2-SQL-Injection.html Wed, 30 Jun 2010 01:13:42 GMT Grafik CMS version 1.1.2 suffers from a remote SQL injection vulnerability.