45 matches found
Baal Systems <= 3.8 (Auth Bypass) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================= Baal Systems + PoC...
Baal Systems 3.8 - Authentication Bypass
Baal Systems 3.8 - Authentication Bypass + Baal Systems + Vuln Code : adminlogin.php + PoC : BaalSystemspath/adminlogin.php username: ' or' 1=1 Password: ' or' 1=1...
CVE-2008-5058
CVE-2008-5058 describes an SQL injection flaw in Pre Simple CMS: the file at siteadmin/loginsucess.php allows remote attackers to execute arbitrary SQL commands via the user parameter, accessible from siteadmin/adminlogin.php . The issue is cited in multiple sources (e.g., NVD) with a high impact...
Nukeviet 2.0 - adminlogin.php Cookie Authentication Bypass
Nukeviet 2.0 - adminlogin.php Cookie Authentication Bypass source: https://www.securityfocus.com/bid/30681/info Nukeviet is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication. Attackers can exploit this...
CVE-2006-0610
Multiple SQL injection vulnerabilities in 2200net Calendar system 1.2, with gpcmagicquotes disabled, allow remote attackers to execute arbitrary SQL commands and bypass authentication via 1 the fmdataid parameter to calendar.php and 2 the $ad'acc' variable in adminlogin.php...