PHPenpals <= 1.1 (mail.php ID) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =========================================================== PHPenpals D | | -p0c: | -SQL INJECTION: | | -http://localhost/Scripts/phpenpals/mail.php?ID=-1+union+select+1,@@version-- | -Vuls: @array = 'profile.php?personalID=' ,...

Insufficient Authentication vulnerability in Acer notebooks

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Insufficient Authentication уязвимости в ноутбуках Acer. Уязвимость я обнаружил 28.04.2009 на двух моих ноутбуках. На данных ноутбуках используется Windows XP Home Rus, в случае других ОС уязвимость также может присутствовать. В Windows XP Home в...

Job Script 2.0 Arbitrary Change Admin Password Exploit

No description provided by source. head titleJob Script V2.0 - Job Board Software change pasword admin /title /head /head body div id="page" div id="middle" div class="center" table width=100% cellspacing=15 tr td width="223"badmin :/b/[email protected]/td /tr /table body div id="page" div...

Simple Customer 1.3 Arbitrary Change Admin Password Exploit

No description provided by source. ---- Remote Change admin Password---- ---------------------------- script:Simple Customer 1.3 ---------------------------- Author: ahmadbady email:[email protected] -------------------- download from:http://www.simplecustomer.com/ New Version 1.3...

Job Script 2.0 Password Changer

Job Script V2.0 - Job Board Software change pasword admin admin :[email protected] Change password Cod3d By:TiGeR-dZ ;Script:Job Script V2.0 - Job Board Software Download:http://www.jobscript.net/job-board-software/ Mail:[email protected]...

Simple Customer 1.3 Password Changer

---- Remote Change admin Password---- ---------------------------- script:Simple Customer 1.3 ---------------------------- Author: ahmadbady email:[email protected] -------------------- download from:http://www.simplecustomer.com/ New Version 1.3 -------------------- xpl: coded by ahmadbady...

Job Script 2.0 Arbitrary Change Admin Password Exploit

Exploit for unknown platform in category web applications ====================================================== Job Script 2.0 Arbitrary Change Admin Password Exploit ====================================================== Job Script V2.0 - Job Board Software change pasword admin admin...

Job Script 2.0 - Arbitrary Change Admin Password

Job Script 2.0 - Arbitrary Change Admin Password Job Script V2.0 - Job Board Software change pasword admin admin :[email protected] Change password Cod3d By:TiGeR-dZ ;Script:Job Script V2.0 - Job Board Software Download:http://www.jobscript.net/job-board-software/ Mail:[email protected] milw0rm.com...

Simple Customer 1.3 Arbitrary Change Admin Password Exploit

Exploit for unknown platform in category web applications =========================================================== Simple Customer 1.3 Arbitrary Change Admin Password Exploit =========================================================== ---- Remote Change admin Password----...

CVE-2009-1556

img/main.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allows remote authenticated users to read arbitrary files in img/ via a filename in the nextfile parameter, as demonstrated by reading .htpasswd to obtain the admin password, a different vulnerabili...

ABC Advertise 1.0 Password Disclosure

homepage : http://www.zakkis.ca./index.php?p=39 + ABC Advertise 1.0 Admin Data Disclosure + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Admin Data Disclosure - Go to http://127.0.0.1/path/admin.inc.php - You will find there the admin username and password. Example : login=admin...

ABC Advertise 1.0 Admin Password Disclosure Vulnerability

No description provided by source. homepage : http://www.zakkis.ca./index.php?p=39 + ABC Advertise 1.0 Admin Data Disclosure + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Admin Data Disclosure - Go to http://127.0.0.1/path/admin.inc.php - You will find there the admin username...

ABC Advertise 1.0 - Admin Password Disclosure

homepage : http://www.zakkis.ca./index.php?p=39 + ABC Advertise 1.0 Admin Data Disclosure + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Admin Data Disclosure - Go to http://127.0.0.1/path/admin.inc.php - You will find there the admin username and password. Example : login=admin...

ABC Advertise 1.0 - Admin Password Disclosure

ABC Advertise 1.0 - Admin Password Disclosure homepage : http://www.zakkis.ca./index.php?p=39 + ABC Advertise 1.0 Admin Data Disclosure + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Admin Data Disclosure - Go to http://127.0.0.1/path/admin.inc.php - You will find there the admi...

CVE-2008-6752

CVE-2008-6752 affects the Twitter Clone (TClone) plugin for ReVou Micro Blogging. The bug occurs in adminlogin/password.php where the original password is not verified before changing passwords, enabling a remote attacker to change the administrator’s password and gain privileges by sending a Cha...

CRE Loaded 6.2 - 'products_id' SQL Injection

+-------------------------------------+ + Homepage: http://www.creloaded.com/ + Product: CRE Loaded v6.2 + File: productinfo.php + Parameter: productid +-------------------------------------+ + SQL Injection: +...

w3bcms Gaestebuch 3.0.0 - Blind SQL Injection

w3bcms Gaestebuch 3.0.0 - Blind SQL Injection !/usr/bin/perl use LWP::UserAgent; use HTTP::Request::Common qwPOST; use Getopt::Long; '/ -.- ------------------oOO------OOo----------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security...

Design/Logic Flaw

asp/bslogin.asp in QuickerSite 1.8.5 does not properly restrict access to administrative functionality, which allows remote attackers to 1 change the admin password via the cSaveAdminPW action; 2 modify site information, such as the contact address, via the saveAdmin; and 3 modify the site design...

CVE-2008-6673

asp/bslogin.asp in QuickerSite 1.8.5 does not properly restrict access to administrative functionality, which allows remote attackers to 1 change the admin password via the cSaveAdminPW action; 2 modify site information, such as the contact address, via the saveAdmin; and 3 modify the site design...

Zabbix 1.6.2 Cross Site Request Forgery

nGenuity Information Services - Security Advisory Advisory ID: NGENUITY-2009-006 - Zabbix Multiple Frontend CSRF Application: Zabbix 1.6.2 Vendor: Zabbix Vendor website: http://www.zabbix.com Author: Adam Baldwin [email protected] I. BACKGROUND "ZABBIX is an enterprise-class open source...