5502 matches found
Black Lily 2007 (products.php class) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ======================================================================= Black Lily 2007 products.php class Remote SQL Injection Vulnerability ======================================================================= SnIper-sa.com SSSSS nnn n...
Shop-Script admin.php Admin Panel Security Bypass
The remote host is running Shop-Script, a shopping cart software application written in PHP. The version of Shop-Script installed on the remote host fails to halt execution of the script 'admin.php' if an attacker is not authenticated. The attacker could then effectively bypass the authentication...
CVE-2007-4932
admin.php in Shop-Script FREE 2.0 and earlier sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to access the admin panel...
Code injection
admin.php in Shop-Script FREE 2.0 and earlier sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to access the admin panel...
CVE-2007-4932
admin.php in Shop-Script FREE 2.0 and earlier sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to access the admin panel...
CVE-2007-4932: Improper Input Validation
admin.php in Shop-Script FREE 2.0 and earlier sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to access the admin panel...
CS Guestbook Admin Name & Md5 Security Vuln
By Cr@zyKing http://ayyildiz.org Ayyildiz Team nternationel Force Cs Guestbook admin name & admin hass md5 vuln. http://xxx.com/base/usr/0.php admin name & md5 http://xxx.com/mod.php - go to admin panel Md5 Cracking : gdataonline.com & milw0rm.com Greatz : Eno7 , TamTurk , Metlak , Blackwolf ,...
CVE-2007-4523
Multiple cross-site scripting XSS vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote authenticated users to inject arbitrary web script or HTML via one or more of the following vectors: the 1 id parameter to a pages/deletepage.php, b navigation/deletemenu.php, and c...
DeskPRO Admin Panel Multiple HTML Injections
HSC DeskPRO Admin Panel Multiple HTML Injections An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks....
ziyar-xss.txt
Ziyaretçi Defteri v1.0 XSS Vulnerability Software: Ziyaretçi Defteri v1.0 download: http://www.aspindir.com/goster/5059 demo: http://russian.buyuksari.com/ Found By: GeFORC3 G3 Exploit: 1-http://www.example.com/scriptpath/main.asp Ýsim : alert"G3"; E-mail : [email protected] Mesaj : alert"G3";...
CartWeaver (Details.cfm ProdID) Remote SQL Injection Vulnerability
No description provided by source. author:meoconxatvnbrain.net product:CartWeaver main site:www.cartweaver.com 1.with CFM CartWeaver: sql injection in: Details.cfm?ProdID=a' demo: http://www.jbracing.co.uk/Details.cfm?ProdID=1' exploit: http://www.xxx.com/Details.cfm?ProdID=sql query link admin:...
CVE-2007-4153
Multiple cross-site scripting XSS vulnerabilities in WordPress 2.2.1 allow remote authenticated administrators to inject arbitrary web script or HTML via 1 the Options Database Table in the Admin Panel, accessed through options.php; or 2 the opmlurl parameter to link-import.php. NOTE: this might...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in WordPress 2.2.1 allow remote authenticated administrators to inject arbitrary web script or HTML via 1 the Options Database Table in the Admin Panel, accessed through options.php; or 2 the opmlurl parameter to link-import.php. NOTE: this might...
CVE-2007-4153
Multiple cross-site scripting XSS vulnerabilities in WordPress 2.2.1 allow remote authenticated administrators to inject arbitrary web script or HTML via 1 the Options Database Table in the Admin Panel, accessed through options.php; or 2 the opmlurl parameter to link-import.php. NOTE: this might...
CVE-2007-4153
Multiple cross-site scripting XSS vulnerabilities in WordPress 2.2.1 allow remote authenticated administrators to inject arbitrary web script or HTML via 1 the Options Database Table in the Admin Panel, accessed through options.php; or 2 the opmlurl parameter to link-import.php. NOTE: this might...
CVE-2007-4153
CVE-2007-4153 affects WordPress 2.2.1 and describes multiple cross-site scripting (XSS) vulnerabilities. The issues allow remote authenticated administrators to inject arbitrary web script or HTML via (1) the Options Database Table in the Admin Panel (options.php) or (2) the opml_url parameter to...
CVE-2007-4079
Multiple cross-site scripting XSS vulnerabilities in AlstraSoft SMS Text Messaging Enterprise allow remote attackers to inject arbitrary web script or HTML via the 1 domain or 2 q parameter to a admin/membersearch.php, or 3 the userid parameter to b admin/edituser.php...
PHPBlogger is a simple tool to help the creation of web blogs... Encrypted admin password and other preferences are stored on /data/pref.db You can find lots of them exposed with google search: pref password= filetype:db = -------------------------------------------- The admin panel is acessible...
Webyapar 2.0 - Multiple SQL Injections
/$$$$$$$$$$$////$$$$$$$$$$$///////////////$$$$$$$$$$$$$$$//$$$$$$$$$$$$$$$/ ////////$$$$$$$$//////////$$$$$$$$/////////////////$$$$$//$$$$/////////////$$$$//////////// ////////$$$$$$$////////////$$$$$$$///////////////////////////$$$$$//$$$$/////////////$$$$////////////...
Webyapar 2.0 - Multiple SQL Injections
Webyapar 2.0 - Multiple SQL Injections /$$$$$$$$$$$////$$$$$$$$$$$///////////////$$$$$$$$$$$$$$$//$$$$$$$$$$$$$$$/ ////////$$$$$$$$//////////$$$$$$$$/////////////////$$$$$//$$$$/////////////$$$$////////////...