http://securityreason.com/exploit_alert ExploitAlert Database monitors new exploits and helps you to keep track of the latest exploits, 0days, proof of concepts. en-us Copyright © SecurityReason. All Rights Reserved. Sun, 21 Mar 2010 03:23:18 +0100 http://securityreason.com/exploit_alert http://securityreason.com/gfx/logo.gif 70 144 ExploitAlert Database - SecurityReason.com exploit_databasehttp://feedburner.google.comSubscribe with My Yahoo!Subscribe with NewsGatorSubscribe with My AOLSubscribe with BloglinesSubscribe with NetvibesSubscribe with GoogleSubscribe with PageflakesSubscribe with PlusmoSubscribe with The Free DictionarySubscribe with Bitty BrowserSubscribe with Live.comSubscribe with Excite MIXSubscribe with WebwagSubscribe with Podcast ReadySubscribe with WikioSubscribe with Daily Rotation http://feedproxy.google.com/~r/exploit_database/~3/xXwesYpEMMw/8001 http://securityreason.com/exploitalert/8001 Fri, 19 Mar 2010 20:30:12 +0100 Program : Httpdx v1.5.3b<br /> PoC : Remote Crash Service (if http.log=1)<br /> Homepage : http://sourceforge.net/projects/httpdx/<br /> Found by : Jonathan Salwan<br /> This Advisory : Jonathan Salwan<br /> Contact : j.salwan@sysdream.com<br /> <br /> //----- Application description<br /> <br /> Single-process HTTP1.1/FTP server; no threads or processes started per<br /> connection, runs with only few threads. Includes directory listi<br>... <p><a href="http://feedads.g.doubleclick.net/~a/QUxKb2sk1gUheZCvUTjSNXBN4Fk/0/da"><img src="http://feedads.g.doubleclick.net/~a/QUxKb2sk1gUheZCvUTjSNXBN4Fk/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/QUxKb2sk1gUheZCvUTjSNXBN4Fk/1/da"><img src="http://feedads.g.doubleclick.net/~a/QUxKb2sk1gUheZCvUTjSNXBN4Fk/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/exploit_database/~4/xXwesYpEMMw" height="1" width="1"/> http://securityreason.com/exploitalert/8001 http://feedproxy.google.com/~r/exploit_database/~3/iu3ZxvOEh6k/8000 http://securityreason.com/exploitalert/8000 Fri, 19 Mar 2010 20:28:31 +0100 =========================================<br /> Yaniv Miron aka &quot;Lament&quot; Advisory March 12, 2010<br /> IBM Lotus 6.x HTTP Response Splitting Vulnerability<br /> =========================================<br /> <br /> =====================<br /> I. BACKGROUND<br /> =====================<br /> <br /> IBM Lotus Software delivers robust collaboration software that empowers<br /> people to connect, collaborate, and innovate while optimizing the way they<br /> work. With Lotus you <br>... <p><a href="http://feedads.g.doubleclick.net/~a/ZyUQCIs5gTheOCUAVo0Ya_TrLkQ/0/da"><img src="http://feedads.g.doubleclick.net/~a/ZyUQCIs5gTheOCUAVo0Ya_TrLkQ/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/ZyUQCIs5gTheOCUAVo0Ya_TrLkQ/1/da"><img src="http://feedads.g.doubleclick.net/~a/ZyUQCIs5gTheOCUAVo0Ya_TrLkQ/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/exploit_database/~4/iu3ZxvOEh6k" height="1" width="1"/> http://securityreason.com/exploitalert/8000 http://feedproxy.google.com/~r/exploit_database/~3/hH4aH6TMsTk/7999 http://securityreason.com/exploitalert/7999 Fri, 19 Mar 2010 20:27:59 +0100 Advisory Name: SQL injection in Manage Engine Service Desk Plus 7.6<br /> Vulnerability Class: SQL injection<br /> Release Date: 03-18-2010<br /> Affected Applications: Confirmed in version 7.6. Other versions may also be<br /> affected.<br /> Affected Platforms: Multiple<br /> Local / Remote: Remote<br /> Severity: High &amp;#8211; CVSS: 9 (AV:N/AC:L/Au:S/C:C/I:C/A:C)<br /> Researcher: Nahuel Grisolía<br /> Vendor Status: Acknowledged. Not fixed.<br /> Vulnerability Description:<br /> <br>... <p><a href="http://feedads.g.doubleclick.net/~a/hN5xTiXla4pV2weBOGe1lhGxA40/0/da"><img src="http://feedads.g.doubleclick.net/~a/hN5xTiXla4pV2weBOGe1lhGxA40/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/hN5xTiXla4pV2weBOGe1lhGxA40/1/da"><img src="http://feedads.g.doubleclick.net/~a/hN5xTiXla4pV2weBOGe1lhGxA40/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/exploit_database/~4/hH4aH6TMsTk" height="1" width="1"/> http://securityreason.com/exploitalert/7999 http://feedproxy.google.com/~r/exploit_database/~3/YQH3SW2-QI4/7998 http://securityreason.com/exploitalert/7998 Fri, 19 Mar 2010 20:24:56 +0100 <br /> view source<br /> print?<br /> # Exploit Title: Shutter 0.1.4 Blind SQL Injection<br /> # Date: March 18, 2010<br /> # Author: Blake<br /> # Software Link:<br /> http://sourceforge.net/projects/shutter-php/files/shutter/v0.1.4/shutter_0.<br /> 1.4.zip/download<br /> # Version: version 0.1.4<br /> <br /> The albumID and photoID parameters are vulnerable to SQL Injection.<br /> <br /> POC:<br /> http://server/shutter/admin.html?albumID=2%20and%20substring%28@@version,1,<br /> <br>... <p><a href="http://feedads.g.doubleclick.net/~a/6D971p64eyL7DjlhpZngUb49Aoo/0/da"><img src="http://feedads.g.doubleclick.net/~a/6D971p64eyL7DjlhpZngUb49Aoo/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/6D971p64eyL7DjlhpZngUb49Aoo/1/da"><img src="http://feedads.g.doubleclick.net/~a/6D971p64eyL7DjlhpZngUb49Aoo/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/exploit_database/~4/YQH3SW2-QI4" height="1" width="1"/> http://securityreason.com/exploitalert/7998 http://feedproxy.google.com/~r/exploit_database/~3/oAIxG1naQco/7997 http://securityreason.com/exploitalert/7997 Fri, 19 Mar 2010 20:24:13 +0100 [~] SiteDone Custom Edition 2.0 SQL Injection &amp; XSS Vulnerability<br /> [~]<br /> [~] http://www.sitedone.com<br /> [~]<br /> [~]<br /> [~]<br /> ---------------------------------------------------------------------------<br /> --------------------<br /> [~] Bug founded by d3v1l [Avram Marius]<br /> [~]<br /> [~] Date: 18.03.2010<br /> [~]<br /> [~]<br /> [~] http://security-sh3ll.blogspot.com<br /> [~]<br /> [~]<br /> ------------------------------------------------------------<br>... <p><a href="http://feedads.g.doubleclick.net/~a/rhZrsLZ0LlhOPiCmz3wjC8TLCRw/0/da"><img src="http://feedads.g.doubleclick.net/~a/rhZrsLZ0LlhOPiCmz3wjC8TLCRw/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/rhZrsLZ0LlhOPiCmz3wjC8TLCRw/1/da"><img src="http://feedads.g.doubleclick.net/~a/rhZrsLZ0LlhOPiCmz3wjC8TLCRw/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/exploit_database/~4/oAIxG1naQco" height="1" width="1"/> http://securityreason.com/exploitalert/7997 http://feedproxy.google.com/~r/exploit_database/~3/HjDFlA0Rw-k/7996 http://securityreason.com/exploitalert/7996 Fri, 19 Mar 2010 20:23:03 +0100 sEc-r1z crEw The Leaders for Penetration Testing In Middle East.<br /> +==========================================================================<br /> =========+<br /> ./SEC-R1Z _ __ _ _ _ _ ___ _ _ _ _ __ _ _ _ _ _ <br /> / /_ _ _ _ / _ _\/ _ _ /\ \&lt; |/_ _ _ _ /<br /> \ \_ _ _ _/ /___ / / __ | |) / | | / /<br /> \_ _ _ _/ /___ / / | __ || / | | / /<br /> _______\ \_ _ <br>... <p><a href="http://feedads.g.doubleclick.net/~a/86h69ds__HtccbAHbgDG5MOOQKk/0/da"><img src="http://feedads.g.doubleclick.net/~a/86h69ds__HtccbAHbgDG5MOOQKk/0/di" border="0" ismap="true"></img></a><br/> <a href="http://feedads.g.doubleclick.net/~a/86h69ds__HtccbAHbgDG5MOOQKk/1/da"><img src="http://feedads.g.doubleclick.net/~a/86h69ds__HtccbAHbgDG5MOOQKk/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/exploit_database/~4/HjDFlA0Rw-k" height="1" width="1"/> http://securityreason.com/exploitalert/7996