2823 matches found
Phorum admin.php3无需验证修改管理员口令漏洞
BUGTRAQ: 2271 Phorum是一款基于PHP的WEB论坛程序，可使用在Linux和Unix操作系统下，也可使用在Microsoft Windows操作系统下。Phorum存在一个问题，远程攻击者可以访问本地系统文件。 admin.php3脚本用于安全和管理被创建的论坛。它带有口令保护，但存在漏洞可以无需访问权限修改管理员口令。一旦拥有了管理功能的访问权限，就可以进入 Master Setting 功能，在 default .langfile name 输入框输入想要访问的系统本地文件，重新载入admin.php3页面后就可以浏览这个文件的内容了。 3.0.7 and...
MindDezign Photo Gallery 2.2 - SQL Injection
================================================================================== MindDezign Photo Gallery 2.2 index.php id Remote SQL Injection Vulnerability ================================================================================== ,--^----------,--------,-----,-------^--, | |||||||||...
Printlog <= 0.4 (filename) Remote File Disclosure Vulnerability
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Printlog = 0.4: Remote File Edition Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= $ Program: Printlog $ File affected: index.php $ Version: 0.4 $ Download: http://www.hardkap.net/pritlog Found...
Wordpress 2.6.1 SQL Column Truncation Vulnerability
No description provided by source. WordPress 2.6.1 SQL Column Truncation Vulnerability PoC found by irk4zatyahoo.pl homepage: http://irk4z.wordpress.com/ this is not critical vuln ; first, read this discovery: http://www.suspekt.org/2008/08/18/mysql-and-sql-column-truncation-vulnerabilities/ in...
WordPress < 2.6.2 Administrative Password Reset
Binary data 4648.prm...
WordPress 2.6.1 - SQL Column Truncation
WordPress 2.6.1 - SQL Column Truncation WordPress 2.6.1 SQL Column Truncation Vulnerability PoC found by irk4zatyahoo.pl homepage: http://irk4z.wordpress.com/ this is not critical vuln ; first, read this discovery: http://www.suspekt.org/2008/08/18/mysql-and-sql-column-truncation-vulnerabilities/...
WordPress Core 2.6.1 - SQL Column Truncation
WordPress 2.6.1 SQL Column Truncation Vulnerability PoC found by irk4zatyahoo.pl homepage: http://irk4z.wordpress.com/ this is not critical vuln ; first, read this discovery: http://www.suspekt.org/2008/08/18/mysql-and-sql-column-truncation-vulnerabilities/ in this hack we can remote change admin...
Mini-NUKE v2.3 Freehost (tr) Multiple Remote SQL Injection Vulnerabilities
Exploits admin user name : http://localhost/mininuke/members.asp?action=memberdetails&uid=1+union+select+0,kuladi,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27+from+members+where+seviye=1 admin password :...
MyClan Sql Injection
MyClan Sql Injection AUTHOR : IRCRASH R3d.W0rm Sina Yazdanmehr Discovered by : IRCRASH R3d.W0rm Sina Yazdanmehr Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr Script Download : www.sourceforge.net/projects/haudenschilt DORK : Copyright A© 2005-2006...
phpwind任意修改管理员密码漏洞
PHPWind 论坛系统 是一套采用 php+mysql 数据库 方式运行并可生成 html 页面的全新且完善的强大系统。因具有非凡的访问速度和卓越的负载能力而深受国内外朋友的喜爱。但是80sec在其中发现了一个安全漏洞，成功利用此漏洞可以直接修改管理员的密码进入后台，取得管理员权限。...
estorekit-sql.txt
Viva IslaM Viva IslaM Remote SQL Injection Vulnerability E-Store Kit-1 viewdetails.php pid E-Store Kit-2 viewdetails.php pid E-Store Kit-1 Pro PayPal Edition viewdetails.php pid E-Store Kit-2 PayPal Edition viewdetails.php pid www.magicscripts.com AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM &...
HIOX Browser Statistics 2.0 - Arbitrary Add Admin
HIOX Browser Statistics 2.0 - Arbitrary Add Admin "; fclose$file; $creat = "false"; echo "New User Created Please Wait You will be Redirected to Login Page "; else echo "Enter correct Username or Password "; if$creat == "true" ? table align=center valign=center bgcolo...
Scripteen Free Image Hosting Script 1.2 (cookie) Pass Grabber Exploit
Exploit for unknown platform in category web applications ===================================================================== Scripteen Free Image Hosting Script 1.2 cookie Pass Grabber Exploit ===================================================================== Scripteen Free Image Hosting...
Scripteen Free Image Hosting Script 1.2 - cookie Pass Grabber
Scripteen Free Image Hosting Script 1.2 - cookie Pass Grabber Scripteen Free Image Hosting Script V1.2. cookie Admin Password Grabber Exploit Coded By RMx - Liz0ziM Web:www.biyosecurity.com Dork:"Powered by Scripteen Free Image Hosting Script V1.2" TARGET HOST: Example:www.xxxx.com TARGET PATH:...
Scripteen Free Image Hosting Script 1.2 - 'cookie' Pass Grabber
Scripteen Free Image Hosting Script V1.2. cookie Admin Password Grabber Exploit Coded By RMx - Liz0ziM Web:www.biyosecurity.com Dork:"Powered by Scripteen Free Image Hosting Script V1.2" TARGET HOST: Example:www.xxxx.com TARGET PATH: Example:/ or /scriptpath/ Sending Exploit..'; $packet ="GET...
Sun Java ASP Server Default Admin Password
The remote host is running Sun Java ASP server. It is possible to access the remote server with default admin credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid33437; scriptversion"1.13";...
FreeCMS.us 0.2 - index.php SQL Injection
FreeCMS.us 0.2 - index.php SQL Injection Viva IslaM Viva IslaM Remote SQL Injection Vulnerability FreeCMS 0.2 index.php page AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : FreeCMS Vesrion : 0.2 site : www.Freecms.us -:: SQL ::- www.site.com/...
[ECHO_ADV_97$2008] Pre News Manager <= 1.0 (index.php id) Sql Injection Vulnerability
ECHOADV97$2008 ----------------------------------------------------------------------------------------- ECHOADV97$2008 Pre News Manager = 1.0 index.php id Sql Injection Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran...
GLLCTS2 <= 4.2.4 (login.php detail) SQL Injection Exploit
No description provided by source. ?php settimelimit0; ignoreuserabort0; function addhtmlspace$count $out2 = strrepeat"",$count; return $out2; function writecontent$title,$desc,$content $out = "div class='content'div class='item'h1$title/h1div class='descr'$desc/divbrp$content/p/div"; return $out...
Cartweaver 3 (prodId) Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl Cartweaver 3 PHP Blind SQL Injection Substring Vulnerability Bug by: h0yt3r Dork: n/a brainusing required Releasing it to the public No error messages are being returned. Exploit need a vaild Product ID! SQL Injection:...