FubarForum 1.6 - Authentication Bypass Change User Password

..:: R31P0lathotmail.com ::.. Tanx from : str0ke Script : FubarForum Version : 1.6 Dork : "Powered by FubarForum v1.6" /forum/index.php?page=profile&userid=1 Greetz to: Corenamed, Unsecured, Esedark, pax0r, zrallter, th0r... and TerminalHacker milw0rm.com 2008-12-29...

FubarForum 1.6 Arbitrary Admin Bypass Vulnerability

No description provided by source. in the name of god ..:: [email protected] ::.. Tanx from : Expl0its Script : FubarForum Version : 1.6 Dork : "Powered by FubarForum v1.6" /forum/index.php?page=admin milw0rm.com 2008-12-28...

FubarForum 1.6 - Arbitrary Authentication Bypass

FubarForum 1.6 - Arbitrary Authentication Bypass in the name of god ..:: [email protected] ::.. Tanx from : Expl0its Script : FubarForum Version : 1.6 Dork : "Powered by FubarForum v1.6" /forum/index.php?page=admin milw0rm.com 2008-12-28...

FubarForum 1.6 - Arbitrary Authentication Bypass

in the name of god ..:: [email protected] ::.. Tanx from : Expl0its Script : FubarForum Version : 1.6 Dork : "Powered by FubarForum v1.6" /forum/index.php?page=admin milw0rm.com 2008-12-28...

FubarForum 1.6 Arbitrary Admin Bypass Vulnerability

Exploit for unknown platform in category web applications =================================================== FubarForum 1.6 Arbitrary Admin Bypass Vulnerability =================================================== Script : FubarForum Version : 1.6 Dork : "Powered by FubarForum v1.6"...

PHPg 1.6 (XSS/PD/DoS) Multiple Remote Vulnerabilities

No description provided by source. PHPg 1.6 has a few XSSes, path disclosures, and a DoS vulnerability. Home: http://black-dwarf.com HS: http://www.hotscripts.com/Detailed/86225.html Found by: Anarchy Angel - http://hha.zapto.org Temp XSS: http://site.com/phpg/index.php?url=" XSS Temp XSS:...

phpg 1.6 - Cross-Site Scripting Full Path Disclosure Denial of Service

phpg 1.6 - Cross-Site Scripting Full Path Disclosure Denial of Service PHPg 1.6 has a few XSSes, path disclosures, and a DoS vulnerability. Home: http://black-dwarf.com HS: http://www.hotscripts.com/Detailed/86225.html Found by: Anarchy Angel - http://hha.zapto.org Temp XSS:...

phpg 1.6 - Cross-Site Scripting / Full Path Disclosure / Denial of Service

PHPg 1.6 has a few XSSes, path disclosures, and a DoS vulnerability. Home: http://black-dwarf.com HS: http://www.hotscripts.com/Detailed/86225.html Found by: Anarchy Angel - http://hha.zapto.org Temp XSS: http://site.com/phpg/index.php?url=" XSS Temp XSS:...

OneOrZero helpdesk 1.6.x. - Arbitrary File Upload

!/usr/bin/perl =about OneOrZero 1.6. Perl exploit AUTHOR discovered & written by Ams ax330d doggy gmail dot com VULN. DESCRIPTION: In 'tinfo.php' script there are function named uploadAttachment through which we are able to upload files. It does not checks what the file is uploaded. EXPLOIT WORK:...

CVE-2008-5649

CVE-2008-5649 describes an SQL injection vulnerability in AlstraSoft Article Manager Pro 1.6, specifically in admin/admin.php where the username parameter can be manipulated to execute arbitrary SQL commands. Documented impact indicates remote attackers could achieve complete confidentiality, int...

CVE-2008-5296

Gallery 1.5.x before 1.5.10 and 1.6 before 1.6-RC3, when registerglobals is enabled, allows remote attackers to bypass authentication and gain administrative via unspecified cookies. NOTE: some of these details are obtained from third party information...

Arbitrary file deletion

mkmailpost in newsgate 1.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/mmp temporary file...

CVE-2008-4975

The CVE-2008-4975 entry concerns mkmailpost in newsgate 1.6, where a symlink attack on a /tmp/mmp##### temporary file allows local users to overwrite arbitrary files. The root cause is a symlink-based file overwrite vulnerability in the mkmailpost routine, enabling local privilege impact (complet...

CVE-2008-4975

mkmailpost in newsgate 1.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/mmp temporary file...

Sql injection

SQL injection vulnerability in viewevent.php in myEvent 1.6 allows remote attackers to execute arbitrary SQL commands via the eventdate parameter...

CVE-2008-4650

SQL injection vulnerability in viewevent.php in myEvent 1.6 allows remote attackers to execute arbitrary SQL commands via the eventdate parameter...

CVE-2008-4650

The CVE-2008-4650 entry describes an SQL injection in the myEvent 1.6 application, specifically in viewevent.php via the eventdate parameter. This allows remote attackers to execute arbitrary SQL commands. The provided connected documents confirm the affected component and the root cause (SQL inj...

myEvent 1.6 (viewevent.php) Remote SQL Injection Vulnerability

No description provided by source. myEvent 1.6 viewevent.php Remote SQL Injection Vulnerability url: http://mywebland.com/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own...

myevent-sql.txt

myEvent 1.6 viewevent.php Remote SQL Injection Vulnerability url: http://mywebland.com/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk. Author will be not responsible...

myEvent 1.6 - 'eventdate' SQL Injection

myEvent 1.6 viewevent.php Remote SQL Injection Vulnerability url: http://mywebland.com/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk. Author will be not responsible...