ASP ActionCalendar 1.3 - Authentication Bypass

Founded By : SuB-ZeRo WaLiD E-mail : [email protected] Home : WwW.dz-security.Net GreeTZ : D-unit & X.CJP.x & www.dz-security.net & gaza --------------------------------------------------------- vondor : www.warrenstudios.com --------------------------------------------------------- Exploit Auth...

PHP-Fusion Mod E-Cart 1.3 (items.php CA) SQL Injection Vulnerability

No description provided by source. PHP-Fusion Mod E-Cart Sql Injection AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : Http://IRCRASH.COM IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina Yazdanmehr - Hadi Kiamarsi Download :...

SA-CONTRIB-2009-001 - Project release - Multiple vulnerabilities

Exploitable from: Remote Vulnerabilities: Arbitrary file upload, Cross-site scripting XSS The Project release module is a component within the broader Project module. This announcement covers the following two issues: 1. Project release enables file attachments to create a specific version of cod...

TaskDriver 1.3 - Remote Change Admin Password

TaskDriver 1.3 - Remote Change Admin Password \n\n", $argv0; exit; list$script, $target, $pass = $argv; $xpl = curlinit; curlsetoptarray$xpl, array CURLOPTURL = "$target/profileedit.php", CURLOPTCOOKIE = "auth=fook!admin", CURLOPTRETURNTRANSFER = true, CURLOPTPOST = t...

phpAddEdit 1.3 Login Bypass

------------------------------------- PhpAddEdit 1.3 Login By Pass ------------------------------------- Found By: x0r Evolution Team Email: [email protected] ------------------------------------- Bug In: Addedit-login.php if !$loginerror // --- Set admin cookie so favorite form field will sho...

CVE-2008-5433

CVE-2008-5433 is a cross-site scripting (XSS) vulnerability in PunBB 1.3 and 1.3.1, exploitable via the password field in login.php. The provided documents describe an ability for remote attackers to inject arbitrary web script or HTML, constituting a vulnerability in the login mechanism. The NVD...

PhpAddEdit 1.3 (Cookie) Login Bypass Vulnerability

Exploit for unknown platform in category web applications ================================================== PhpAddEdit 1.3 Cookie Login Bypass Vulnerability ================================================== ------------------------------------- PhpAddEdit 1.3 Login By Pass...

phpAddEdit 1.3 (editform) Local File Inclusion Vulnerability

No description provided by source. phpaddedit-1.3 LFI Author: nuclear script:http://sourceforge.net/projects/phpaddedit/ vuln:http://target.com/addedit-render.php?editform=../../../../../../../etc/passwd%00 vulnerable code: if !$formname && $GET"editform" $formname = $GET"editform"; ... if...

PhpAddEdit 1.3 - cookie Authentication Bypass

PhpAddEdit 1.3 - cookie Authentication Bypass ------------------------------------- PhpAddEdit 1.3 Login By Pass ------------------------------------- Found By: x0r Evolution Team Email: [email protected] ------------------------------------- Bug In: Addedit-login.php if !$loginerror // --- Se...

phpAddEdit 1.3 - editform Local File Inclusion

phpAddEdit 1.3 - editform Local File Inclusion phpaddedit-1.3 LFI Author: nuclear script:http://sourceforge.net/projects/phpaddedit/ vuln:http://target.com/addedit-render.php?editform=../../../../../../../etc/passwd%00 vulnerable code: if !$formname && $GET"editform" $formname = $GET"editform";...

phpAddEdit 1.3 - 'editform' Local File Inclusion

phpaddedit-1.3 LFI Author: nuclear script:http://sourceforge.net/projects/phpaddedit/ vuln:http://target.com/addedit-render.php?editform=../../../../../../../etc/passwd%00 vulnerable code: if !$formname && $GET"editform" $formname = $GET"editform"; ... if $errormessage || $error ||...

CVE-2007-6719

SQL injection vulnerability in Wiz-Ad 1.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in Wiz-Ad 1.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-6719

CVE-2007-6719 describes a SQL injection in Wiz-Ad 1.3 that allows remote attackers to execute arbitrary SQL commands via unknown vectors. The vulnerability is documented across multiple feeds (NVD, Red Hat, CVE listing) with the same core description; no concrete affected versions beyond Wiz-Ad 1...

CVE-2007-6719

SQL injection vulnerability in Wiz-Ad 1.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

DevelopItEasy Membership System 1.3 - Authentication Bypass

DevelopItEasy Membership System 1.3 - Authentication Bypass || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | //...

CVE-2008-4877

SQL injection vulnerability in admin.php in WebCards 1.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in admin.php in WebCards 1.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-4878

Unrestricted file upload vulnerability in the "Add Image Macro" feature in WebCards 1.3 allows remote authenticated administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the uploaded file...

CVE-2008-4877

CVE-2008-4877 describes a SQL injection in WebCards 1.3, specifically in admin.php, exploitable when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to manipulate the underlying SQL via the user parameter, potentially causing arbitrary SQL execution. This is documented acr...