CVE-2008-4913: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows remote attackers to delete arbitrary files via a .. dot dot in the delete parameter...

CVE-2008-4901: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/admin.php in Article Publisher Pro 1.5 allows remote attackers to execute arbitrary SQL commands via the username parameter...

Maran PHP Shop (admin.php) Insecure Cookie Handling Vulnerability

No description provided by source. Maran PHP Shop admin.php Insecure Cookie Handling Vulnerability url: http://www.maran.pamil-visions.com/maranshop.php Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational...

Maran PHP Shop (admin.php) Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ================================================================= Maran PHP Shop admin.php Insecure Cookie Handling Vulnerability ================================================================= Maran PHP Shop admin.php Insecure Cookie...

Maran PHP Shop - admin.php Insecure Cookie Handling

Maran PHP Shop - admin.php Insecure Cookie Handling Maran PHP Shop admin.php Insecure Cookie Handling Vulnerability url: http://www.maran.pamil-visions.com/maranshop.php Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was writte...

Maran PHP Shop - 'admin.php' Insecure Cookie Handling

Maran PHP Shop admin.php Insecure Cookie Handling Vulnerability url: http://www.maran.pamil-visions.com/maranshop.php Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk...

CVE-2008-4877

SQL injection vulnerability in admin.php in WebCards 1.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-4877

SQL injection vulnerability in admin.php in WebCards 1.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-4877: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin.php in WebCards 1.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-4700

SQL injection vulnerability in admin.php in Libera CMS 1.12 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the liberastaffpass cookie parameter...

CVE-2008-4700

CVE-2008-4700 affects Libera CMS 1.12 and earlier. The vulnerable component is admin.php where, if magic_quotes_gpc is disabled, an attacker can inject SQL via the libera_staff_pass cookie parameter, enabling remote arbitrary SQL execution. The connected records also mention a separate vector for...

CVE-2008-4701: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin.php in Libera CMS 1.12, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the liberastaffuser cookie parameter, a different vector than CVE-2008-4700. NOTE: the provenance of this information is unknown; the details...

CVE-2008-4700: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin.php in Libera CMS 1.12 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the liberastaffpass cookie parameter...

CVE-2008-4662: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in admin.php in LokiCMS 0.3.4, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...

LokiCMS 0.3.4 writeconfig() Remote Command Execution Exploit

No description provided by source. Author: GiReX Homepage: http://girex.altervista.org CMS: LokiCMS 0.3.4 URL: http://www.lokicms.com/ Description: LokiCMS is still vulnerable to Remote Command Execution see: http://milw0rm.com/exploits/5408 The exploit changed becouse the vars changed but the...

LokiCMS 0.3.4 (admin.php) Create Local File Inclusion Exploit

No description provided by source. LokiCMS 0.3.4 admin.php Create Local File Inclusion Exploit url: http://www.lokicms.com/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own...

lokicms-lfi.txt

LokiCMS 0.3.4 admin.php Create Local File Inclusion Exploit url: http://www.lokicms.com/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk. Author will be not responsibl...

lokicms034-exec.txt

Author: GiReX Homepage: http://girex.altervista.org CMS: LokiCMS 0.3.4 URL: http://www.lokicms.com/ Description: LokiCMS is still vulnerable to Remote Command Execution see: http://milw0rm.com/exploits/5408 The exploit changed becouse the vars changed but the bugged function is the same:...

LokiCMS 0.3.4 (admin.php) Create Local File Inclusion Exploit

Exploit for unknown platform in category web applications ============================================================= LokiCMS 0.3.4 admin.php Create Local File Inclusion Exploit ============================================================= LokiCMS 0.3.4 admin.php Create Local File Inclusion...

LokiCMS 0.3.4 - admin.php Create Local File Inclusion

LokiCMS 0.3.4 - admin.php Create Local File Inclusion LokiCMS 0.3.4 admin.php Create Local File Inclusion Exploit url: http://www.lokicms.com/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose...