CVE-2009-1670

user/index.php in TCPDB 3.8 does not require administrative authentication, which allows remote attackers to add admin accounts via unspecified vectors. NOTE: some of these details are obtained from third party information...

Default credentials

Application Access Server A-A-S 2.0.48 has "wildbat" as its default password for the admin account, which makes it easier for remote attackers to obtain access...

TCPDB 3.8 - Arbitrary Add Admin Account

======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script :TCPDB version 3.8 Add Admin Exploit + Download : http://www.tcpdb.com/modules.php?name=Downloads&dop=viewdownload&cid=2...

Document Library 1.0.1 - Arbitrary Change Admin

Document Library 1.0.1 - Arbitrary Change Admin @=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @=Contry : Turkish @=======================================@ @=Script...

ShopEx 4.7.2 0day-vulnerability warning-the black bar safety net

Author: unknown I am nameless, and this time write a shopex4. 7. 2 vulnerability Has been notified of the official, today it is issued to, First syssite/shopadmin/orderservice. php background this document does not verify the identity of the user, It is important$vid parameter is not filtered...

win32 telnetbind by winexec 111 bytes

No description provided by source. ; payload:add admin acount & Telnet Listening ; Author: DATASNIPER ; size:111 bytes ; platform:WIN32/XP SP2 FR ; thanks:Arab4services team & AT4RE Team ; more info: visit my blog http://datasniper.arab4services.net ; The Sh3llcode: ;...

win32 telnetbind by winexec 111 bytes

win32 telnetbind by winexec 111 bytes. Shellcode exploit for win32 platform ; payload:add admin acount & Telnet Listening ; Author: DATASNIPER ; size:111 bytes ; platform:WIN32/XP SP2 FR ; thanks:Arab4services team & AT4RE Team ; more info: visit my blog http://datasniper.arab4services.net ; The...

win32 telnetbind by winexec 111 bytes

Exploit for win32 platform in category shellcode ===================================== win32 telnetbind by winexec 111 bytes ===================================== ; payload:add admin acount & Telnet Listening ; Author: DATASNIPER ; size:111 bytes ; platform:WIN32/XP SP2 FR ; thanks:Arab4services...

Default Password (password) for 'admin' Account

The account 'admin' on the remote host has the password 'password'. An attacker may leverage this issue to gain access, likely as an administrator, to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "admin"; password = "password";...

eZ Publish Privilege Escalation

= 3.5.6 Resolved in 3.9.5, 3.10.1, 4.0.1 More info: http://ez.no/developer/security/securityadvisories/ezpublish39/ezsa2008003insufficientformhandlingmadeprivilegeescalationpossible tested on version 3.9.0 usage: ./eZPublishprivilegeescalationexploit.php -u=username -p=password -e=email...

CVE-2008-5221

The accountsave action in admin/userinfo.php in wPortfolio 0.3 and earlier does not require authentication and does not require knowledge of the original password, which allows remote attackers to change the admin account password via modified password and passwordretype parameters...

Authentication flaw

The accountsave action in admin/userinfo.php in wPortfolio 0.3 and earlier does not require authentication and does not require knowledge of the original password, which allows remote attackers to change the admin account password via modified password and passwordretype parameters...

CVE-2008-5221

The accountsave action in admin/userinfo.php in wPortfolio 0.3 and earlier does not require authentication and does not require knowledge of the original password, which allows remote attackers to change the admin account password via modified password and passwordretype parameters...

Natterchat 1.1 - Authentication Bypass

Natterchat 1.1 - Authentication Bypass + Script Name : NATTERCHAT v1.1 remote login bypass + Author : Bl@ckbe@rD 'Tunisian TerrorisT' + Contact : blackbeard-sqlA.Thotmail.fr ; + Dork : Powered by NATTERCHAT v 1.1 --//-- + Expl0iT : 1 Go to the Login page...

[waraxe-2008-SA#068] - Sql Injection in vBulletin 3.7.3.pl1

waraxe-2008-SA068 - Sql Injection in vBulletin 3.7.3.pl1 =============================================================================== Author: Janek Vind "waraxe" Date: 17. November 2008 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-68.html Description of vulnerable software:...

E-topbiz Online Store 1 - Authentication Bypass

E-topbiz Online Store 1 - Authentication Bypass E-topbiz Online Store 1 Auth Bypass SQL Injection Vulnerability author: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : bIktIm a.q Exploit: username: realadminname ' or ' 1=1 password:...

E-topbiz Online Store 1 - Authentication Bypass

E-topbiz Online Store 1 Auth Bypass SQL Injection Vulnerability author: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : bIktIm a.q Exploit: username: realadminname ' or ' 1=1 password: ZoRLu note: generally admin name: admin for demo:...

ayco-sql.txt

Author : By CrackersChild Contact: [email protected] Greetz : milw0rm.com & tryag.cc & All My Friends Note : Siz Pekeke Denen itler ; Siz ne turk ne de kurt olabilirsiniz. Siz Dupe Duz OROSPU cocuklarisiniz ! Script : Ayco Okul Portali tr Sql injection Vulnerability...

Linksys WRT350N unauthorized access

Outdated SAMBA version is used, default admin:admin account is present and default guest account...

Full PHP Emlak Script - landsee.php SQL Injection

Full PHP Emlak Script - landsee.php SQL Injection source: https://www.securityfocus.com/bid/30962/info Full PHP Emlak Script is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input. Attackers may exploit this issue to compromise the application, access...