CVE-2009-2604

CVE-2009-2604 concerns multiple SQL injection vulnerabilities in Zen Help Desk 2.1, specifically in adminlogin.asp. The vulnerability allows remote attackers to execute arbitrary SQL commands via the (1) userid and (2) PassWord parameters to admin.asp. The affected component is the admin login fl...

CVE-2008-6868

CVE-2008-6868 is an XSS vulnerability affecting EditeurScripts products, notably EditeurScripts EsBaseAdmin 2.1 (default/login.php), where the msg parameter can inject arbitrary script/HTML. OpenVAS details indicate the issue stems from insufficient sanitization of user-supplied data across multi...

AWCM 2.1 Local File Inclusion / Auth Bypass Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== AWCM 2.1 Local File Inclusion / Auth Bypass Vulnerabilities ===========================================================...

Groone's GLink ORGanizer 2.1 - 'cat' Blind SQL Injection

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + GLinks v2.1 cat Remote Blind SQL Injection Vulnerability + Software : President Bios + Author : 599eme Man + Contact : [email protected] + Thanks : Moudi,...

WebVision 2.1 SQL Injection

!/usr/bin/perl -w WebVision 2.1 n Remote SQL Injection Exploit Demo : http://www.webdev4all.nl/demowebsite/ Dork : Webdevelopment Tinx-IT Dork2: Copyright © 2006-2008 Tinx-IT and open your mind admin panel : www.target.com/path/cms Found by : Mr.tro0oqy E-mail : [email protected] special thank...

WebVision 2.1 - news.php?n SQL Injection

WebVision 2.1 - news.php?n SQL Injection !/usr/bin/perl -w WebVision 2.1 n Remote SQL Injection Exploit Demo : http://www.webdev4all.nl/demowebsite/ Dork : Webdevelopment Tinx-IT Dork2: Copyright © 2006-2008 Tinx-IT and open your mind admin panel : www.target.com/path/cms Found by : Mr.tro0oqy...

WebVision 2.1 (news.php n) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w WebVision 2.1 n Remote SQL Injection Exploit Demo : http://www.webdev4all.nl/demowebsite/ Dork : Webdevelopment Tinx-IT Dork2: Copyright © 2006-2008 Tinx-IT and open your mind admin panel : www.target.com/path/cms Found by : Mr.tro0oqy Yemeni...

WebVision 2.1 - 'news.php?n' SQL Injection

!/usr/bin/perl -w WebVision 2.1 n Remote SQL Injection Exploit Demo : http://www.webdev4all.nl/demowebsite/ Dork : Webdevelopment Tinx-IT Dork2: Copyright © 2006-2008 Tinx-IT and open your mind admin panel : www.target.com/path/cms Found by : Mr.tro0oqy E-mail : [email protected] special thank...

Syslog-ng: Chroot escape

Background Syslog-ng is a flexible and scalable system logger. Description Florian Grandel reported that Syslog-ng does not call chdir before chroot which leads to an inherited file descriptor to the current working directory. Impact A local attacker might exploit a separate vulnerability in...

Nwahy Dir 2.1 Arbitrary Change Admin Password Exploit

No description provided by source. ? / Nwahy Dir v2.1 Change Admin Password Exploit - Author : rEcruit - Mail : [email protected] - Download : http://nwahy.com/showdownload-3105.html - Vuln in ./admincp/admininfo.php code $u = addslashes$COOKIE'username'; $query = mysqlquery "SELECT FROM dliladmi...

Nwahy Dir 2.1 - Arbitrary Change Admin Password

......................"; else /code - Works On : 1. Nwahy Articles v1 2. Nwahy scripts v1 3. Nwahy book v1 - Note : Path to Control Panel "/admincp/" . / errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; function Usage print "\n\n"; print...

Rapidsendit Clone 2.1 Insecure Cookie

====================================================================================== o Rapidsendit Clone 2.1 Insecure Cookie Handling Vulnerability Software : Rapidsendit Clone version 2.1 Vendor : http://www.rapidsendit.com/ Demo : http://www.rapidsendit.com/script/demo.html Author : NoGe...

CVE-2009-2294

Integer overflow in the Pngdatainfocallback function in Dillo 2.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a PNG image with crafted 1 width or 2 height values...

CVE-2009-2294

Integer overflow in the Pngdatainfocallback function in Dillo 2.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a PNG image with crafted 1 width or 2 height values...

Directory traversal

Directory traversal vulnerability in index.php in Clicknet CMS 2.1 allows remote attackers to read arbitrary files via a .. dot dot in the side parameter...

CVE-2009-2294

Integer overflow in the Pngdatainfocallback function in Dillo 2.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a PNG image with crafted 1 width or 2 height values...

CVE-2009-2294

Integer overflow in the Pngdatainfocallback function in Dillo 2.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a PNG image with crafted 1 width or 2 height values...

fipsCMS Light 2.1 Database Disclosure

!/usr/bin/perl fipsCMS Light 2.1 Arbitrary Database Disclosure Exploit Exploit by d3b4g script:http://fipsasp.com Demo: http://demo.fipsasp.com/fipsCMSlight/fipsdb/db.mdb From Tiny little island of maldivies use LWP::Simple; use LWP::UserAgent; print "\fipsCMS Light 2.1 Arbitrary Database...

Clicknet CMS 2.1 (side) Arbitrary File Disclosure Vulnlerability

No description provided by source. + Clicknet CMS v2.1side File Disclosure Vulnerability + Discovered By ThE g0bL!N + Vendor:http://cms.clicknet.dk + Download:http://cms.clicknet.dk/download/index.php?test=2 + Dork:"Powered by Clicknet CMS" + Note: All Site Danemark So Fuck It please : + Greets :...

Clicknet CMS 2.1 (side) Arbitrary File Disclosure Vulnlerability

Exploit for unknown platform in category web applications ================================================================ Clicknet CMS 2.1 side Arbitrary File Disclosure Vulnlerability ================================================================ + Clicknet CMS v2.1side File Disclosure...