235 matches found
CVE-2010-4273
CVE-2010-4273 denotes a SQL injection vulnerability in the DescargarVista ACC IMoveis 1.1 package, specifically in imoveis.php. The flaw is triggered by the id parameter and permits remote attackers to execute arbitrary SQL commands, enabling potential data disclosure or modification. The affecte...
CVE-2010-4273: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in imoveis.php in DescargarVista ACC IMoveis 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
ACC IMoveis 4.0 SQL Injection Vulnerability
Exploit for php platform in category web applications =========================================== ACC IMoveis 4.0 SQL Injection Vulnerability =========================================== Exploit Title : iMoveis SQL Injection Vulnerability Date : 26/10/2010 Author : EraGoN Software link :...
ACC IMoveis 4.0 - SQL Injection
Exploit Title : iMoveis SQL Injection Vulnerability Date : 26/10/2010 Author : EraGoN Software link : http://baixar7.com/download/acc-imoveis-script-php.rar/3d1e7bf4b9 Version : 1.1 Tested on : Linux / Windows XP Dork : inurl:imoveis.php?id= Error You have an error in your SQL syntax; check the...
CVE-2009-4905
Multiple cross-site request forgery CSRF vulnerabilities in index.php in Acc Statistics 1.1 allow remote attackers to hijack the authentication of administrators for requests that change 1 passwords, 2 usernames, and 3 e-mail addresses...
CVE-2009-4906
Cross-site request forgery CSRF vulnerability in index.php in Acc PHP eMail 1.1 allows remote attackers to hijack the authentication of administrators for requests that change passwords...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in index.php in Acc PHP eMail 1.1 allows remote attackers to hijack the authentication of administrators for requests that change passwords...
CVE-2009-4905
CVE-2009-4905 relates to multiple cross-site request forgery (CSRF) vulnerabilities in index.php of Acc Statistics 1.1. The weaknesses allow remote attackers to hijack administrator authentication to perform changes such as (1) passwords, (2) usernames, and (3) e-mail addresses. The available con...
CVE-2009-4906
CVE-2009-4906 is a CSRF vulnerability affecting Acc PHP eMail 1.1 (index.php). The issue allows remote attackers to hijack administrator authentication for requests that change passwords. Connected sources provide the same description across multiple feeds; CVSS2 base score is 6.8 (Medium) with n...
CVE-2009-4905
Multiple cross-site request forgery CSRF vulnerabilities in index.php in Acc Statistics 1.1 allow remote attackers to hijack the authentication of administrators for requests that change 1 passwords, 2 usernames, and 3 e-mail addresses...
CVE-2009-4905: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in index.php in Acc Statistics 1.1 allow remote attackers to hijack the authentication of administrators for requests that change 1 passwords, 2 usernames, and 3 e-mail addresses...
CVE-2009-4906: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in index.php in Acc PHP eMail 1.1 allows remote attackers to hijack the authentication of administrators for requests that change passwords...
Acc PHP eMail 1.1 XSRF
view source print? /\ == \ /\ \ /\ \ \ \ // End of attack ------------------------------------------------------------------------------------------ EOF...
Acc Auto Dealer Script 5.0 - Persistent Cross-Site Scripting SQL Backup
Acc Auto Dealer Script 5.0 - Persistent Cross-Site Scripting SQL Backup Vendor : http://www.accscripts.com/autos/download.html Version: 5.0 /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111 ---------------------------------------------------------------- +...
Acc PHP eMail 1.1 - Cross-Site Request Forgery
Acc PHP eMail 1.1 - Cross-Site Request Forgery /\ == \ /\ \ /\ \ \ \ // End of attack ------------------------------------------------------------------------------------------ EOF...
Acc PHP eMail v1.1 - CSRF
No description provided by source. /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111 ---------------------------------------------------------------- + Acc PHP eMail v1.1 - CSRF // Author Info x Author: bi0 x Contact: [email protected] x Homepage :...
Acc PHP eMail v1.1 - CSRF
Exploit for unknown platform in category web applications ========================= Acc PHP eMail v1.1 - CSRF ========================= /\ == \ /\ \ /\ \ \ \ // End of attack ------------------------------------------------------------------------------------------ 0day.today 2018-04-13...
Concave Yaya news publishing system WebBasicInfo. asp administrator privileges unauthenticated vulnerability-vulnerability warning-the black bar safety net
Found by:skerwww. zerobox. org The affected version Concave Yaya news publishing system 4. 7ACC version Other version not tested Vulnerability description Concave Yaya news publishing system is an ASP program in conjunction with the ACC and MYSQL CMS system Vulnerability is the path where the...
凹丫丫新闻发布系统WebBasicInfo.asp管理员权限未验证漏洞
凹丫丫新闻发布系统是一款ASP程序结合ACC和MYSQL的CMS系统 漏洞所在路径地址admin/WebBasicInfo.asp 程序员未对该页面写入管理员权限验证代码,可以直接输入代码绕过进入网站后台 进入WebBasicInfo.asp可以对网站名称,网站关键字,网站介绍,底部版权信息进行修改. 可以关闭公告.评论.友情连接功能 凹丫丫新闻发布系统4.7ACC版 其他版本还未测试 等待官方补丁程序或者自己编译管理员权限验证代码...