Backdoored PhpMyAdmin distributed at SourceForge site

A security issue has been reported in phpMyAdmin, which can be exploited by malicious people to compromise a vulnerable system. The security issue is caused due to the distribution of a compromised phpMyAdmin source code package containing a backdoor, which can be exploited to e.g. execute...

CVE-2012-1631: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Admin:hover module for Drupal allows remote attackers to hijack the authentication of administrators for requests that unpublish all nodes, and possibly other actions, via unspecified vectors...

EasyWebTime – SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : EasyWebTime – SQL Injection Vulnerability Author : IrIsT.Ir Discovered By : BestC0d3r Email : BestC0d3ratYahoodotcom Home : http://IrIsT.Ir Software Link : http://www.easywebtime.com Security Risk : High Version : All Version...

Avcmedia CMS SQL Injection

Exploit Title : avcmedia Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.avcmedia.com Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : intext:" Developed and hosted...

WIS Coldfusion Exploit

Exploit for windows platform in category dos / poc Exploit Title: WIS Coldfusion Exploit Date: 9-9-2012 Author: Noxxie Vendor or Software Link: http://www.wis.nl/Onzeklanten link that also shows customers , gives an idea of inpact Version: All versions with search form are affected Category::...

CVE-2010-5260

Untrusted search path vulnerability in Agrin All DVD Ripper 4.0 allows local users to gain privileges via a Trojan horse wnaspi32.dll file in the current working directory, as demonstrated by a directory that contains a .ifo file. NOTE: some of these details are obtained from third party...

Design/Logic Flaw

Untrusted search path vulnerability in Agrin All DVD Ripper 4.0 allows local users to gain privileges via a Trojan horse wnaspi32.dll file in the current working directory, as demonstrated by a directory that contains a .ifo file. NOTE: some of these details are obtained from third party...

CVE-2010-5260

Untrusted search path vulnerability in Agrin All DVD Ripper 4.0 allows local users to gain privileges via a Trojan horse wnaspi32.dll file in the current working directory, as demonstrated by a directory that contains a .ifo file. NOTE: some of these details are obtained from third party...

CVE-2010-5260

CVE-2010-5260 describes an untrusted search path (DLL hijacking) vulnerability in Agrin All DVD Ripper 4.0. A local attacker can gain privileges by placing a malicious wnaspi32.dll in the current working directory, demonstrated using a directory containing an .ifo file. Affected component/file: w...

PT-2012-1470

Name of the Vulnerable Software and Affected Versions Agrin All DVD Ripper version 4.0 Description The issue allows local users to gain privileges via a Trojan horse wnaspi32.dll file in the current working directory. This can be demonstrated by a directory that contains a .ifo file...

CVE-2010-5260: Undefined Security Weakness

Untrusted search path vulnerability in Agrin All DVD Ripper 4.0 allows local users to gain privileges via a Trojan horse wnaspi32.dll file in the current working directory, as demonstrated by a directory that contains a .ifo file. NOTE: some of these details are obtained from third party...

Fire Belly Design CMS SQL Injection

Exploit Title : firebellydesign Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://firebellydesign.com Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : intext:"Design &...

Web@All CMS 2.0 Shell Upload / Local File Inclusion

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

web@all - Local File Inclusion Multiple Arbitrary File Upload Vulnerabilities

web@all - Local File Inclusion Multiple Arbitrary File Upload Vulnerabilities source: https://www.securityfocus.com/bid/55426/info web@all is prone to a local file-include vulnerability and multiple arbitrary file-upload vulnerabilities. An attacker can exploit these issues to upload arbitrary...

web@all - Local File Inclusion / Multiple Arbitrary File Upload Vulnerabilities

source: https://www.securityfocus.com/bid/55426/info web@all is prone to a local file-include vulnerability and multiple arbitrary file-upload vulnerabilities. An attacker can exploit these issues to upload arbitrary files onto the web server, execute arbitrary local files within the context of t...

Thoughtmedia CMS SQL Injection

Exploit Title : thoughtmedia Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.thoughtmedia.us/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : intext:"Developed by...

WEBSKINZ CMS SQL Injection

Exploit Title : WEBSKINZ Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.www.webskinz.com Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : intext:"DESIGNED &...

Symbion Productions CMS SQL Injection

Exploit Title : Symbion Productions Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.symbionproductions.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork :...

Drop CMS SQL Injection

Exploit Title : drop Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.drop.it/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : intext:"Webdev: www.drop.it" Expl0iTs...

FreeBSD : moinmoin -- wrong processing of group membership (4f99e2ef-f725-11e1-8bd8-0022156e8794)

MoinMoin developers report : If you have group NAMES containing 'All' or 'Known' or 'Trusted', they behaved wrong until now they erroneously included All/Known/Trusted users even if you did not list them as members, but will start working correctly with this changeset. E.g. AllFriendsGroup : -...