2521 matches found
Authentication flaw
useradmin.php in Easy Photo Gallery aka Ezphotogallery 2.1 does not require administrative authentication, which allows remote attackers to 1 add or 2 remove an Administrator account...
Explay CMS 2.1 - Insecure Cookie Handling
Explay CMS = 2.1 Insecure Cookie Handling Vulnerability + Discovered By Stack + Greetz : All my freind --- exploit: javascript:document.cookie = "login=1; path=/"; document.cookie = "pass=1; path=/"; milw0rm.com 2008-09-20...
CVE-2008-4139
CVE-2008-4139 describes a Cross-site Scripting (XSS) vulnerability in OpenSolution Quick.Cms.Lite 2.1, specifically in admin.php, where an attacker can inject arbitrary script/HTML via the query string. The available sources confirm the affected component but do not provide details on root cause ...
Explay CMS 2.1 - Persistent Cross-Site Scripting Cross-Site Request Forgery
Explay CMS 2.1 - Persistent Cross-Site Scripting Cross-Site Request Forgery ================================== Explay CMS 2. CSRF User can get admin rights if admin open malicious page that contain, for instance: or merely insert it to comment or article text. milw0rm.com 2008-09-19...
Explay CMS 2.1 - Persistent Cross-Site Scripting / Cross-Site Request Forgery
================================== Explay CMS 2. CSRF User can get admin rights if admin open malicious page that contain, for instance: or merely insert it to comment or article text. milw0rm.com 2008-09-19...
Linux Kernel 'SCTP'模块存在漏洞
BUGTRAQ ID: 31121 CVE ID：CVE-2008-3792 CNCVE ID：CNCVE-20083792 Linux是一款开放源代码的操作系统。 Linux内核'SCTP'模块存在多个安全问题，本地攻击者可以利用漏洞获得敏感信息或使内核崩溃。 问题代码如下： file: net/sctp/socket.c ... SCTPSTATIC int sctpgetsockoptstruct sock sk, int level, int optname, char user optval, int user optlen int retval = 0; int len;...
Easy Photo Gallery 2.1 Arbitrary Add Admin / remove user Vulnerability
No description provided by source. ---------------------------------------------------------------- Script : Ezphotogallery 2.1 Type : Vulnerabilities Add Admin user/Remove user Google Dork : "100% | 50% | 25%" "Back to gallery" inurl:"show.php?imageid="...
RHEL 2.1 : libxml2 (RHSA-2008:0886)
Updated libxml2 packages that fix various security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team. The libxml2 packages provide a library that allows you to manipulate XML files. It...
Easy Photo Gallery 2.1 XSS/FD/Bypass/SQL Injection Exploit
No description provided by source. !/usr/bin/perl ---------------------------------------------------------------- Script : Ezphotogallery 2.1 Type : Multiple Vulnerabilities Xss/Login Bypass/Sql injection Exploit/File Disclosure Method : GET Alert : High Google Dork : "100% | 50% | 25%" "Back to...
Easy Photo Gallery 2.1 Arbitrary Add Admin / remove user Vulnerability
Exploit for unknown platform in category web applications ====================================================================== Easy Photo Gallery 2.1 Arbitrary Add Admin / remove user Vulnerability ======================================================================...
Easy Photo Gallery 2.1 - Arbitrary Add Admin / remove user
---------------------------------------------------------------- Script : Ezphotogallery 2.1 Type : Vulnerabilities Add Admin user/Remove user Google Dork : "100% | 50% | 25%" "Back to gallery" inurl:"show.php?imageid=" ---------------------------------------------------------------- Discovered b...
Easy Photo Gallery 2.1 - Cross-Site Scripting File DisclosureBypass SQL Injection
Easy Photo Gallery 2.1 - Cross-Site Scripting File DisclosureBypass SQL Injection !/usr/bin/perl ---------------------------------------------------------------- Script : Ezphotogallery 2.1 Type : Multiple Vulnerabilities Xss/Login Bypass/Sql injection Exploit/File Disclosure Method : GET Alert :...
OpenVPN Client RCE Vulnerability
OpenVPN Client is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-3722
SQL injection vulnerability in forum/neu.asp in fipsCMS 2.1 allows remote attackers to execute arbitrary SQL commands via the kat parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Sql injection
SQL injection vulnerability in forum/neu.asp in fipsCMS 2.1 allows remote attackers to execute arbitrary SQL commands via the kat parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-3722
The CVE-2008-3722 entry documents a SQL injection vulnerability in fipsCMS 2.1, specifically in forum/neu.asp where the kat parameter can be used to inject arbitrary SQL. The issue originates from improper handling of user input and allows remote attackers to execute commands against the database...
CVE-2008-3722
SQL injection vulnerability in forum/neu.asp in fipsCMS 2.1 allows remote attackers to execute arbitrary SQL commands via the kat parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
FipsCMS 2.1 - 'neu.asp' SQL Injection
source: https://www.securityfocus.com/bid/30712/info fipsCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data,...