Calendars for the Web 4.02 - Admin Authentication Bypass

Calendars for the Web 4.02 - Admin Authentication Bypass Exploit discovered by SecVuln from http://secvuln.com Come join our clan! contact [email protected] Author == SecVuln Version == 4.02 Software == Calendars for the web by great hill corporation Calendars for the web has a vulnerability in...

CVE-2008-4484

CVE-2008-4484 affects Crux Gallery 1.32 and earlier. The main.php file vulnerability allows remote attackers to gain administrative access by supplying a name parameter value of "users" (demonstrated via index.php). The NVD entry lists a public description and CVSS v2 base score of 6.8 (MEDIUM) w...

CVE-2008-4341

CVE-2008-4341 affects MyBlog 0.9.8 and earlier. The flaw allows remote attackers to bypass authentication and gain administrative access by setting a cookie with admin=yes and login=admin, indicating a broken/authentication check based on cookie values. The provided sources describe the vulnerabl...

PHP pro bid v 6.04 SQL injection

Affected software: PHP pro bid v 6.04 as at 2008-09-11 Vendor description: The Leading Proffessional sic Auction Script Software available online today written in PHP/ Mysql Impact: SQL injection Description: categories.php and other pages of php pro bid accept user-supplied order-by and ASC/DESC...

Stash 1.0.3 Insecure Cookie Handling Vulnerability

No description provided by source. ...:::::stash-1.0.3 Insecure Cookie Handling Vulnerability ::::.... ----------------------- Discoverd By : Ciph3r special tnx to : Iranian hacker & Kurdish Security TEAM E-Mail : [email protected] cms :...

Stash 1.0.3 - Insecure Cookie Handling

...:::::stash-1.0.3 Insecure Cookie Handling Vulnerability ::::.... ----------------------- Discoverd By : Ciph3r special tnx to : Iranian hacker & Kurdish Security TEAM E-Mail : [email protected] cms : http://sourceforge.net/project/showfiles.php?groupid=206129 -----------------------...

Stash 1.0.3 - Insecure Cookie Handling

Stash 1.0.3 - Insecure Cookie Handling ...:::::stash-1.0.3 Insecure Cookie Handling Vulnerability ::::.... ----------------------- Discoverd By : Ciph3r special tnx to : Iranian hacker & Kurdish Security TEAM E-Mail : [email protected] cms :...

DEBIAN-CVE-2008-3747

The 1 geteditpostlink and 2 geteditcommentlink functions in wp-includes/link-template.php in WordPress before 2.6.1 do not force SSL communication in the intended situations, which might allow remote attackers to gain administrative access by sniffing the network for a cookie...

Trend Micro Web Management Authentication Bypass Vulnerability

Trend Micro OfficeScan is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

phpring-insecure.txt

...:::::PHP-Ring Webring System v0.9.1 Insecure Cookie Handling Vulnerability ::::.... Virangar Security Team www.virangar.net www.virangar.ir -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:t...

PHP-Ring Webring System 0.9.1 Insecure Cookie Handling Vulnerability

No description provided by source. ...:::::PHP-Ring Webring System v0.9.1 Insecure Cookie Handling Vulnerability ::::.... Virangar Security Team www.virangar.net www.virangar.ir -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all...

PHP-Ring Webring System 0.9.1 - Insecure Cookie Handling

...:::::PHP-Ring Webring System v0.9.1 Insecure Cookie Handling Vulnerability ::::.... Virangar Security Team www.virangar.net www.virangar.ir -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:t...

PHP-Ring Webring System 0.9.1 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ==================================================================== PHP-Ring Webring System 0.9.1 Insecure Cookie Handling Vulnerability ==================================================================== ------- DESCRIPTION: PHP-Ring...

phpWebNews 0.2 MySQL Edition (SQL) Insecure Cookie Handling Vuln

No description provided by source. ...:::::phpwebnews-mysql 0.2 Insecure Cookie Handling Vulnerability ::::.... Virangar Security Team www.virangar.net www.virangar.ir -------- Discoverd By :virangar security teamhadihadi special tnx :my master hadihadi tnx to:MR.nosrati,black.shadowes,MR.hesy &...

phpWebNews 0.2 MySQL Edition (SQL) Insecure Cookie Handling Vuln

Exploit for unknown platform in category web applications ================================================================ phpWebNews 0.2 MySQL Edition SQL Insecure Cookie Handling Vuln ================================================================ ...:::::phpwebnews-mysql 0.2 Insecure Cookie...

Authentication flaw

admin/index.php in Maian Links 3.1 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary linkscookie cookie...

Authentication flaw

admin/index.php in Maian Uploader 4.0 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary uploadercookie cookie...

EZWebAlbum Insecure Cookie Handling Vulnerability

No description provided by source. ...:::::EZWebAlbum Insecure Cookie Handling Vulnerability ::::.... Virangar Security Team www.virangar.net www.virangar.ir -------- Discoverd By :virangar security teamZahra:zhvirangar special tnx :my master hadihadi tnx to:MR.nosrati,black.shadowes,MR.hesy & al...

Vulnerability: SocialEngine (SocialEngine.net) high risk security flaw

SECURITY ADVISORY CS-2008-2 Vulnerability: Improper validation of external parameters Vendor: SocialEngine http://www.socialengine.net Affected versions: 2.83 Risk: High I. DESCRIPTION Improper validation of browser cookies leads to complete control over client host. II. BACKGROUND During client...

EZWebAlbum Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ================================================= EZWebAlbum Insecure Cookie Handling Vulnerability ================================================= ------- DESCRIPTION: EZWebAlbum, suffers from insecure cookie handling, when a admin logi...