2577 matches found
Dark Hart Portal (login.php) Remote File Inclusion Vulnerability
No description provided by source. ------------------------------------------------------------------------------------- Dark Portal login.php Remote File Inclusion Vulnerability ------------------------------------------------------------------------------------- Author: CoBRa21 Mail:...
IP Reg <= 0.4 - Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl ----------------------------------------------- IP Reg = 0.4 Blind SQL Injection Exploit Discovered By StAkeR - StAkeRathotmaildotit Discovered On 03/10/2008 ----------------------------------------------- Download...
Koobi Pro 6.1 - Gallery (img_id)
No description provided by source. Koobi Pro v6.1 gallery imgid AUTHOR : BILGEKAGAN HOME : http://www.1923turk.biz DORK 1 : allinurl: index.php?p=gallerypic imgid EXPLOiT: index.php?p=gallerypic&imgid=-1+union+select+0,1,2,concatemail,0x3a,pass,4,5,6,7,8+from+kpro6user aDMN PANEL: admin/login.php...
PT-2014-5983
Name of the Vulnerable Software and Affected Versions VideoWhisper Live Streaming Integration plugin versions 4.27.2 and earlier Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the room name...
Easy POS System - SQL Injection (login.php)
No description provided by source...
KPPW Sql 最新版 注入#2
简要描述： 更新日期: 2014-05-19 12:17:29 详细说明： 在control/login.php中 if kekezu::submitcheckisset$formhash|| isset$logintype ==3 if$code $strCodeCheck = kekezu::checksecode $code ; if $strCodeCheck!=1 $tips'errors''code' = $strCodeCheck; kekezu::showmsg $tips, NULL, NULL, NULL, 'error' ; isset$hdnrefer and...
PHP168 6.0 and below the version login. php memory major security vulnerability-vulnerability warning-the black bar safety net
A big problem, it is best not to ignore。。。。 The use of the code will be php Trojan is inserted into the cache/directory to easily get webshell, you can bulk. Use a search engine to search Powered by php168 v6 or what version of v5, v4, v3, v2, v1 will search to many, many more related site Since...
OpenSupports 2.0 - Blind SQL Injection
Open Support Blind SQL Injection v2.0 Vulnerability =================================================== Author indoushka ================= vendor :http://www.opensupports.com/files/Opensupportsv2EN.rar ================= Dork : Power by OpenSupports © 2009 - 2014. All Rights reserved This...
CVE-2013-5639: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in users/login.php in Gnew 2013.1 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the gnewlanguage cookie...
FineCMS 2 /member/controllers/Login.php SQL注入漏洞
No description provided by source...
CVE-2013-7137
The "remember me" functionality in login.php in Burden before 1.8.1 allows remote attackers to bypass authentication and gain privileges by setting the burdenuserrememberme cookie to 1...
CVE-2013-7137
The "remember me" functionality in login.php in Burden before 1.8.1 allows remote attackers to bypass authentication and gain privileges by setting the burdenuserrememberme cookie to 1...
CVE-2013-7137
CVE-2013-7137 affects Burden prior to 1.8.1. The vulnerability arises from insufficient validation of the burden_user_rememberme cookie, allowing remote unauthenticated users to set the cookie to 1 and gain administrative privileges via the login mechanism. Impact is authentication bypass with po...
CVE-2013-7137: Improper Authentication
The "remember me" functionality in login.php in Burden before 1.8.1 allows remote attackers to bypass authentication and gain privileges by setting the burdenuserrememberme cookie to 1...
PT-2014-3268
Name of the Vulnerable Software and Affected Versions Burden versions prior to 1.8.1 Description The issue concerns the "remember me" functionality in login.php, allowing remote attackers to bypass authentication and gain privileges. This is achieved by setting the burden user rememberme cookie t...
TheWebForum login.php username Parameter SQL Injection - Ver2 (CVE-2006-0135)
An SQL injection vulnerability has been reported in TheWebForum twf. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
RedAxScript 1.1 SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...
CVE-2013-6042: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in filemanager/login.php in the File Manager module in Softaculous Webuzo before 2.1.4 allows remote attackers to inject arbitrary web script or HTML via the user parameter...
PT-2013-5936
Name of the Vulnerable Software and Affected Versions Softaculous Webuzo versions prior to 2.1.4 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the user parameter in the...