CVE-2009-0866

pHNews Alpha 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for extra/genbackup.php...

CVE-2009-0866

CVE-2009-0866 affects pHNews Alpha 1. The issue is improper access control that allows a remote attacker to download the database by requesting extra/genbackup.php, placing sensitive data under the web root at risk. The root cause is insufficient access restrictions on stored data. Public details...

CVE-2009-0866: Undefined Security Weakness

pHNews Alpha 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for extra/genbackup.php...

pHNews Alpha 1 (header.php mod) SQL Injection Vulnerability

No description provided by source. 0x01 Informations: Name : pHNews Alpha 1 Download : http://www.hotscripts.com/listings/jump/download/50111/ Vulnerability : Sql Injection Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/header.php Code $mod ...

pHNews Alpha 1 (genbackup.php) Database Disclosure Vulnerability

No description provided by source. 0x01 Informations: Name : pHNews Alpha 1 Download : http://www.hotscripts.com/listings/jump/download/50111/ Vulnerability : Db Discloure Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/extra/genbackup.php 0x...

pHNews Alpha 1 Database Disclosure

0x01 Informations: Name : pHNews Alpha 1 Download : http://www.hotscripts.com/listings/jump/download/50111/ Vulnerability : Db Discloure Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/extra/genbackup.php 0x03 Exploit: Exploit:...

pHNews Alpha 1 - genbackup.php Database Disclosure

pHNews Alpha 1 - genbackup.php Database Disclosure 0x01 Informations: Name : pHNews Alpha 1 Download : http://www.hotscripts.com/listings/jump/download/50111/ Vulnerability : Db Discloure Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is...

pHNews Alpha 1 - mod SQL Injection

pHNews Alpha 1 - mod SQL Injection 0x01 Informations: Name : pHNews Alpha 1 Download : http://www.hotscripts.com/listings/jump/download/50111/ Vulnerability : Sql Injection Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/header.php Code $mod ...

pHNews Alpha 1 - 'mod' SQL Injection

0x01 Informations: Name : pHNews Alpha 1 Download : http://www.hotscripts.com/listings/jump/download/50111/ Vulnerability : Sql Injection Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/header.php Code $mod = $GET"mod"; // If no mod is select...

pHNews Alpha 1 (genbackup.php) Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================ pHNews Alpha 1 genbackup.php Database Disclosure Vulnerability ================================================================ 0x01 Informations: Name : pHNews Alpha 1...

pHNews Alpha 1 SQL Injection

0x01 Informations: Name : pHNews Alpha 1 Download : http://www.hotscripts.com/listings/jump/download/50111/ Vulnerability : Sql Injection Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/header.php Code $mod = $GET"mod"; // If no mod is select...

pHNews Alpha 1 (header.php mod) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== pHNews Alpha 1 header.php mod SQL Injection Vulnerability =========================================================== 0x01 Informations: Name : pHNews Alpha 1 Download :...

pHNews Alpha 1 - 'genbackup.php' Database Disclosure

0x01 Informations: Name : pHNews Alpha 1 Download : http://www.hotscripts.com/listings/jump/download/50111/ Vulnerability : Db Discloure Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/extra/genbackup.php 0x03 Exploit: Exploit:...

Amaya Web Browser 11 (bdo tag) Remote Stack Overflow Exploit (vista)

No description provided by source. !/usr/bin/perl Amaya 11 bdo tag stack overflow author: Rob Carter [email protected] targets: windows vista sp1 modified the alpha-numeric shell-code from metasploit since the first 12 bytes didn't fall within the ASCII range of 0x01-0x7f. otherwise my payload...

TxtBlog 1.0 Alpha Remote Command Execution Exploit

Exploit for unknown platform in category web applications ================================================== TxtBlog 1.0 Alpha Remote Command Execution Exploit ================================================== !/usr/bin/perl...

TxtBlog 1.0 Alpha - Remote Command Execution

!/usr/bin/perl ----------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------- App = TxtBlog v 1.0 Alpha Downl = http://downloads.sourceforge.net/txtblogcms/txtblogcms-1.0a.zip Remote Command...

The Rat CMS Alpha 2 - Blind SQL Injection

--+++=============================================================+++-- --+++====== The Rat CMS Alpha 2 Blind SQL Injection Exploit ======+++-- --+++=============================================================+++-- !/usr/bin/perl use strict; use warnings; use IO::Socket; sub query my $chr = shif...

Alpha - execve() Shellcode (112 bytes)

Alpha - execve Shellcode 112 bytes. Shellcode exploit for Alpha platform char shellcode= "\x30\x15\xd9\x43" / subq $30,200,$16 / / $16 = $30 - 200 / $16 must have the shellcode address. However, before / / the bsr instruction, $16 can't have the address. / / This instruction just store the...

The Rat Cms Alpha 2 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= The Rat Cms Alpha 2 Auth Bypass SQL Injection Vulnerability ============================================================= --------------------------------- The Rat Cms Auth By...

The Rat CMS Alpha 2 - Authentication Bypass

--------------------------------- The Rat Cms Auth By Pass --------------------------------- Autore: x0r Email: [email protected] -------------------------------- Bug In: \login.php $sql = "SELECT userid FROM tblauthuser WHERE userid = '$userId' AND userpassword = PASSWORD'$password'"; $result...