61 matches found
ADN Forum <= 1.0b Insecure Cookie Handling Vulnerability
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- adnforum = 1.0b / Insecure Cookie Handling Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- $ Program: adnforum $ Version: = 1.0b $ File affected: index.php $ Download:...
ADN Forum 1.0b - Insecure Cookie Handling
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- adnforum eNYe-Sec - www.enye-sec.org Cookie is base64 based and the ascii format used is: user:23ed4e45887ad4311ff654bd4aab6540:user:0 user:md5 pass:user:0 Programmer forgot to check the pass and only use the nick to autenticate the user...
adnforums-insecure.txt
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- adnforum eNYe-Sec - www.enye-sec.org Cookie is base64 based and the ascii format used is: user:23ed4e45887ad4311ff654bd4aab6540:user:0 user:md5 pass:user:0 Programmer forgot to check the pass and only use the nick to autenticate the user...
Gentoo Security Advisory GLSA 200504-09 (Axel)
The remote host is missing updates announced in advisory GLSA 200504-09. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ADN Forum <= 1.0b Insecure Cookie Handling Vulnerability
Exploit for unknown platform in category web applications ======================================================== ADN Forum = 1.0b Insecure Cookie Handling Vulnerability ======================================================== -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- adnforum =...
rgb72 WCMS 1.0 - 'index.php' SQL Injection
source: https://www.securityfocus.com/bid/31298/info rgb72 WCMS is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data,...
wcms-admin.txt
!/usr/bin/perl ================================================= WCMS v.1.0b Arbitrary Add Admin Exploit ================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------...
wcms-sql.txt
======================================================================= WCMS v.1.0b newsdetail.asp id Remote SQL Injection Vulnerability ======================================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground...
WCMS v.1.0b Arbitrary Add Admin Exploit
Exploit for unknown platform in category web applications ======================================= WCMS v.1.0b Arbitrary Add Admin Exploit ======================================= !/usr/bin/perl ================================================= WCMS v.1.0b Arbitrary Add Admin Exploit...
WCMS 1.0b - news_detail.asp SQL Injection
WCMS 1.0b - newsdetail.asp SQL Injection ======================================================================= WCMS v.1.0b newsdetail.asp id Remote SQL Injection Vulnerability ======================================================================= ,--^----------,--------,-----,-------^--, |...
CVE-2008-0469
SQL injection vulnerability in index.php in Tiger Php News System TPNS 1.0b and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter in a newscat action...
CVE-2002-2322
Ultimate PHP Board UPB 1.0b stores the users.dat data file under the web root with insufficient access control, which allows remote attackers to obtain usernames and passwords...
CVE-2007-2940
Multiple PHP remote file inclusion vulnerabilities in FlaP 1.0b 1.0 Beta allow remote attackers to execute arbitrary PHP code via a URL in the pachtofile parameter to 1 skin/html/table.php or 2 login.php...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in FlaP 1.0b 1.0 Beta allow remote attackers to execute arbitrary PHP code via a URL in the pachtofile parameter to 1 skin/html/table.php or 2 login.php...
CVE-2007-2940
CVE-2007-2940 affects FlaP 1.0b (1.0 Beta). The vulnerability is a PHP remote file inclusion in the pachtofile parameter of skin/html/table.php and login.php, enabling remote attackers to execute arbitrary PHP code via a crafted URL. Documents do not provide exploit specifics or impacted versions...
CVE-2007-2940
Multiple PHP remote file inclusion vulnerabilities in FlaP 1.0b 1.0 Beta allow remote attackers to execute arbitrary PHP code via a URL in the pachtofile parameter to 1 skin/html/table.php or 2 login.php...
FlaP 1.0b - pachtofile Remote File Inclusion
FlaP 1.0b - pachtofile Remote File Inclusion FlaP v.1.0. Beta = Remote File Inclusion Vulnerability Vuln Code ERROR1:skin/html/table.php ? include "$pachtofile/leftmenu.php"; RFI CODE BUG1: Example1:http://victim.com/path/skin/html/table.php?pachtofile=Sh3LL Script...
FlaP 1.0b (pachtofile) Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ============================================================ FlaP 1.0b pachtofile Remote File Inclusion Vulnerabilities ============================================================ FlaP v.1.0. Beta = Remote File Inclusion Vulnerability Vul...
Request It 1.0b (index.php id) Remote File Inclusion Vulnerability
No description provided by source. Request It : Song Request System 1.0b - remote file inclusion Software: Request It : Song Request System Type: remote file inclusion Version: 1.0b Date: 2007-04-09 Url: http://scripts.ringsworld.com/organizers/requestit/ Risc: middle...