221 matches found
Host Directory PRO 2.1.0 Remote Change Admin Password Exploit
No description provided by source. titlechange password Host Directory PRO 2.1.0 /title body bgcolor="000000" trtd class="setting" form name="config" action="http://demo-host-directory-pro.phphostdirectoryscript.com/admin/config" method="post" h4Configuration/h4 table tr tdfont color="FFFFFF"Web...
Host Directory PRO 2.1.0 Remote Change Admin Password Exploit
Exploit for unknown platform in category web applications ============================================================= Host Directory PRO 2.1.0 Remote Change Admin Password Exploit ============================================================= change password Host Directory PRO 2.1.0 Configuratio...
Host Directory PRO 2.1.0 - Remote Change Admin Password
Host Directory PRO 2.1.0 - Remote Change Admin Password change password Host Directory PRO 2.1.0 Configuration Web Interface Password Admin Email Receive Authorize.Net On Off Authorize login Authorize transactionKey /fo...
Authentication flaw
profile.php in Simple Customer 1.3 does not require administrative authentication, which allows remote attackers to change the admin e-mail address and password via the email and password parameters...
CVE-2009-1637
The CVE-2009-1637 entry concerns profile.php in Simple Customer 1.3, where administrative authentication is not required. This allows remote attackers to modify the admin email address and password by passing email and password parameters. The NVD data lists a CVSS v2 base score of 6.4 (Network a...
Job Script 2.0 Arbitrary Change Admin Password Exploit
No description provided by source. head titleJob Script V2.0 - Job Board Software change pasword admin /title /head /head body div id="page" div id="middle" div class="center" table width=100% cellspacing=15 tr td width="223"badmin :/b/[email protected]/td /tr /table body div id="page" div...
Job Script 2.0 - Arbitrary Change Admin Password
Job Script V2.0 - Job Board Software change pasword admin admin :[email protected] Change password Cod3d By:TiGeR-dZ ;Script:Job Script V2.0 - Job Board Software Download:http://www.jobscript.net/job-board-software/ Mail:[email protected] milw0rm.com 2009-05-07...
CRE Loaded 6.2 - 'products_id' SQL Injection
+-------------------------------------+ + Homepage: http://www.creloaded.com/ + Product: CRE Loaded v6.2 + File: productinfo.php + Parameter: productid +-------------------------------------+ + SQL Injection: +...
phpFoX 1.6.21 Cross Site Request Forgery
phpFoX Version 1.6.21 cross site request forgery exploit dork:Powered by phpFoX found by d14l greetz to:soul,marcoj,al0xyz,stefo,aljosha,sp1r1t,invisible greetz to all good people from my country croatia phpFoX Version 1.6.21 suffers from cross site request forgery which allows attacker to change...
PunBB <= 1.2.16 Blind Password Recovery Exploit
No description provided by source. ?php / Original : http://sektioneins.de/advisories/SE-2008-01.txt Thanks to Stefan Esser, here's the exploit. Team : EpiBite firefox, petit-poney, thot Nous tenons a remercier nos mamans et papas respectifs. Let's get a fu coffee ! / // conf define'URL',...
Bigware Shop 2.0 pollid Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================== Bigware Shop 2.0 pollid Remote SQL Injection Vulnerability ========================================================== Bigware Shop 2.0 Bug found by D4m14n Vendor:...
Traffic Stats (referralUrl.php offset) Remote SQL Injection Vulnerbility
Exploit for unknown platform in category web applications ======================================================================== Traffic Stats referralUrl.php offset Remote SQL Injection Vulnerbility ========================================================================...
Traffic Stats - referralUrl.php?offset SQL Injection
Traffic Stats - referralUrl.php?offset SQL Injection --==+================================================================================+==-- --==+ Traffic Stats SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR:...
Traffic Stats - 'referralUrl.php?offset' SQL Injection
--==+================================================================================+==-- --==+ Traffic Stats SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: N/A DORK: allintext:" If you...
PHPMyInventory 2.8 - global.inc.php Remote File Inclusion
PHPMyInventory 2.8 - global.inc.php Remote File Inclusion phpMyInventory pmi v. 2.8 FOUND BY : o0xxdark0o o0xxdark0oatmsn.com DOWNLOAD : http://sourceforge.net/projects/phpmyinventory/ REMOTE FILE ICLUDE FILE : PATH\Includes\global.inc.php EXPLOIT:...
vizayn-sql.txt
/ Vizayn Urun Tanitim Sistemi v0.2 tr Remote SQL Injection Vulnerability Author : BAHADIR Contact: [email protected] Scripr HomePage: http://www.vizayn.web.tr/ws.asp?ws=102 Script Demo URL: http://ws.vizaynhosting.com/V02/ Price : 55YTL PoF Concept:...
NavBoard 2.6.0 - Remote Code Execution
"; print ""; print ""; print "Main forum settings"; print ""; print "Board Title"; print ""; print ""; print ""; print "Admin email address blank will not display"; print ""; print "input type=text name="adminemail" value="$configarr...
eSyndiCat Input Validation Error Vulnerability
eSyndiCat is Directory websystem, a product of eSyndiCat.com It has security hole allow attackers get admin and more and more. Infected version: eSyndiCat Pro v1.x Infected file: manage-admins.php Use poc file to attack: ------------------------------------------------ pDiscovered by H2P - A memb...
CCleaguePro_V1.0.1RC1 Directory Traversal Vulnerability
CCleagueProV1.0.1RC1 Directory Traversal Vulnerability ============================================================== CCleaguePro Version: 1.0.1 RC1 Website URL:http://www.castillocentral.com/ ============================================================== Discoved by Snake Unkn0wn Security...
Guestbara 1.2 - Change Admin Login and Password
Guestbara = 1.2 Change admin login & password exploit by Kacper Admin Email Admin Name Admin Pass by Kacper for DEVIL TEAM script download: http://www.hotscripts.pl/produkt-3051.html Greetz @ll DEVIL TEAM milw0rm.com 2007-03-18...