Infopop UBB.Threads Admin Credentials via SQL Injection

Discovered: 07-18-08 By: SecureState R&D Team sasquatch www.securestate.com Background: ----------- SQL injection has previously been discovered http://www.securityfocus.com/bid/14052/ New Details: ------------ UBBThreads is nice enough to encrypt/mask the regular users' passwords in the database...

CVE-2009-0644

CVE-2009-0644 concerns the HTTP interface of the Swann DVR4-SecuraNet platform, where a default administrative username/password exists. The available documents indicate this flaw can allow remote attackers to obtain privileged access. The entries do not specify affected versions, exploit details...

BlogWrite 0.91 Remote FD / SQL Injection Exploit

No description provided by source. !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

Bloggeruniverse v2Beta (editcomments.php id) SQL Injection Exploit

No description provided by source. !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

InselPhoto 1.1 (query) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

BlogWrite 0.91 - Remote File Disclosure / SQL Injection

!/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS | |----------------------------------------------------------------------------------------------------------------------------------|...

BlogWrite 0.91 Remote FD / SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================ BlogWrite 0.91 Remote FD / SQL Injection Exploit ================================================ !/usr/bin/perl...

InselPhoto 1.1 SQL Injection

!/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS | |----------------------------------------------------------------------------------------------------------------------------------|...

InselPhoto 1.1 - query SQL Injection

InselPhoto 1.1 - query SQL Injection !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

Bloggeruniverse 2.0 Beta - id SQL Injection

Bloggeruniverse 2.0 Beta - id SQL Injection !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

Bloggeruniverse v2Beta (editcomments.php id) SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================== Bloggeruniverse v2Beta editcomments.php id SQL Injection Exploit ================================================================== !/usr/bin/perl...

Bloggeruniverse 2.0 Beta - 'id' SQL Injection

!/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS | |----------------------------------------------------------------------------------------------------------------------------------|...

Blogger Universe SQL Injection/ Code Execution

!/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS | |----------------------------------------------------------------------------------------------------------------------------------|...

InselPhoto 1.1 (query) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================== InselPhoto 1.1 query Remote SQL Injection Exploit =================================================== !/usr/bin/perl...

InselPhoto 1.1 - 'query' SQL Injection

!/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS | |----------------------------------------------------------------------------------------------------------------------------------|...

Social Engine (category_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= Social Engine categoryid SQL Injection Vulnerability ======================================================= Exploit: http://localhost/blog.php?user=darkthronex&categoryid=-5+UNION...

Web Server 'admin/password' Default Credentials (deprecated)

Binary data 4823.prm...

EPOLL SYSTEM 3.1 - Password.dat Disclosure

EPOLL SYSTEM 3.1 - Password.dat Disclosure !/usr/bin/python Portal Name: EPOLL SYSTEM Version : All version 'Google Dork : Powered by Egorix Exploit Coded by: PouyaServer Exploit Discovered by: PouyaServer Contact Me : [email protected] Epoll system login page = www.site.com/Path/admin.php...

Sad Ravens Click Counter 1.0 - passwd.dat File Disclosure

Sad Ravens Click Counter 1.0 - passwd.dat File Disclosure !/usr/bin/python Portal Name: Sad Raven's Click Counter version : 1.0 'Google Dork : Sad Raven's Click Counter v1.0 Exploit Coded by: PouyaServer Exploit Discovered by: PouyaServer Contact Me : [email protected] import urllib import s...

Social Engine (browse_classifieds.php s) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Social Engine browseclassifieds.php s SQL Injection Vulnerability ====================================================================...