eSyndiCat Input Validation Error Vulnerability

eSyndiCat is Directory websystem, a product of eSyndiCat.com It has security hole allow attackers get admin and more and more. Infected version: eSyndiCat Pro v1.x Infected file: manage-admins.php Use poc file to attack: ------------------------------------------------ pDiscovered by H2P - A memb...

psipuss 1.0 (editusers.php) Remote Change Admin Password Exploit

No description provided by source. ?php / '/ -.- --------------------oOO------OOo------------------- | Y! Underground Group | &n...

Pre News Manager 1.0 - SQL Injection

Pre News Manager 1.0 - SQL Injection ============================================== Pre News Manager v1.0 Remote SQL Injection ============================================== Found: Cyber-Security.org ============================================== Script site: http://www.preproject.com/news.asp...

Pre News Manager 1.0 - SQL Injection

============================================== Pre News Manager v1.0 Remote SQL Injection ============================================== Found: Cyber-Security.org ============================================== Script site: http://www.preproject.com/news.asp...

psipuss 1.0 (editusers.php) Remote Change Admin Password Exploit

Exploit for unknown platform in category web applications ================================================================ psipuss 1.0 editusers.php Remote Change Admin Password Exploit ================================================================ ?php / '/ -.-...

psipuss 1.0 - 'editusers.php' Remote Change Admin Password

?php / '/ -.- --------------------oOO------OOo------------------- | Y! Underground Group | | www.dj7xpl.2600.ir | | Dj7xpl @ 2600.ir | ------------------------------------------------------ ! Portal : psipuss version 1.0 ! Vendor : http://www.psi-labs.com/photosimagesuploadscript.html ! Author :...

Picture-Engine 1.2.0 - 'wall.php?cat' SQL Injection

126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex = '\b\d1,3.\d1,3.\d1,3.\d1,3:\d1,5\b'; function...

Guesbara 1.2 - Administrator Password Change

source: https://www.securityfocus.com/bid/23029/info Guesbara is prone to a vulnerability that may permit attackers to change the administrative password. Exploiting this issue may allow an attacker to gain administrative access to the affected application. Successful exploits will result in a...

Guesbara 1.2 - Administrator Password Change

Guesbara 1.2 - Administrator Password Change source: https://www.securityfocus.com/bid/23029/info Guesbara is prone to a vulnerability that may permit attackers to change the administrative password. Exploiting this issue may allow an attacker to gain administrative access to the affected...

Php-Stats <= 0.1.9.1b (PC-REMOTE-ADDR) SQL Injection Exploit

No description provided by source. ?php printr' --------------------------------------------------------------------------- Php-Stats = 0.1.9.1b PC-REMOTE-ADDR sql injection / cleat text admin pass disclosure by rgod mail: retrog at alice dot it site: http://retrogod.altervista.org...

PHP-Stats 0.1.9.1b - 'PC-REMOTE-ADDR' SQL Injection

126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex = '\b\d1,3.\d1,3.\d1,3.\d1,3:\d1,5\b'; function...

CVE-2007-1192

Thomas R. Pasawicz HyperBook Guestbook 1.30 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download an admin password hash via a direct request for data/gbconfiguration.dat...

CVE-2007-1192

Thomas R. Pasawicz HyperBook Guestbook 1.30 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download an admin password hash via a direct request for data/gbconfiguration.dat...

Improper access control

Thomas R. Pasawicz HyperBook Guestbook 1.30 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download an admin password hash via a direct request for data/gbconfiguration.dat...

CVE-2007-1192

Thomas R. Pasawicz HyperBook Guestbook 1.30 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download an admin password hash via a direct request for data/gbconfiguration.dat...

CVE-2007-1192

CVE-2007-1192 affects HyperBook Guestbook 1.30. The issue is improper access control: sensitive data is stored under the web root, enabling a remote attacker to directly download the admin password hash from data/gbconfiguration.dat. This constraint is evidenced across multiple sources in the con...

nabopoll 1.2 Remote Unprotected Admin Section Vulnerability

By Cr@zyKing [email protected] Thakns : ApAci & Erne & Uyussman & Eno7 & Thehacker & CrackersChild Script : nabopoll 1.1.2 Risk : Remote Add Admin Exploit |High Site : http://nabocorp.com/ Google Dork : inurl:"nabopoll/" Exploit : http://target.com/nabopoll/admin/configedit.php Mysql Config For...

Fullaspsite Asp Hosting Sitesi - tr SQL Injection

Fullaspsite Asp Hosting Sitesi - tr SQL Injection Fullaspsite Asp Hosting tr == SQL Injection Vulnerability Author : cl24zy - DrEgHoT - TuF4N Site : www.hacklive.org , www.illegal-attack.org Contact: [email protected] Download Link Of Fullaspsite Asp Hosting Sitesi tr :...

CVE-2007-0313

Unspecified vulnerability in GONICUS System Administration GOsa before 2.5.8 allows remote authenticated users to modify certain settings, including the admin password, via crafted POST requests...

DEBIAN-CVE-2007-0313

Unspecified vulnerability in GONICUS System Administration GOsa before 2.5.8 allows remote authenticated users to modify certain settings, including the admin password, via crafted POST requests...