2823 matches found
PHP-Nuke 6.x 7.6 Top module - SQL Injection
PHP-Nuke 6.x 7.6 Top module - SQL Injection /bin/bash This is just basic-ly modules.php?name=Top&querylang=union%20select%200,pwd,0,0%20from%20nukeauthors%20where%20radminsuper=1 works thou /str0ke PHPNuke Top Module Remote SQL Injection by Fabrizi Andrea 2005 andrea.fabrizi at gmail.com Work wit...
CVE-2005-0640
Computer Associates CA Unicenter Asset Management UAM 4.0 does not properly initialize the "Change Credentials for Database" window, which allows local users to recover the SQL Admin password via certain methods...
CVE-2005-0640
Computer Associates CA Unicenter Asset Management UAM 4.0 does not properly initialize the "Change Credentials for Database" window, which allows local users to recover the SQL Admin password via certain methods...
ACNS Denial of Service and Default Admin Password Vulnerabilities
...
DCP-Portal Multiple Scripts SQL Injection
The remote host is running DCP-Portal, a content management system powered by PHP. The version of DCP-Portal installed on the remote host fails to sanitize user-supplied input to many of its parameters before using it, either in database queries or dynamic web page generation. An attacker may be...
mybbSQL.txt
Description: MyBB is a powerful, efficient and free forum package developed in PHP and MySQL. MyBB has been designed with the end users in mind, you and your subscribers. Full control over your discussion system is presented right at the tip of your fingers, from multiple styles and themes to the...
[Full-Disclosure] Webroot Spy Sweeper Enterprise Adminpassord open to the world
Not sure if this list is the right place for this....... Spy Sweeper Enterprise from webroot http://www.webroot.com/products/spysweeper/enterprise/ leaves the admin password in plain site you can find it by going to HKEYLOCALMACHINESOFTWAREWebrootEnterpriseSpy Sweeperap This can be done from the...
Super Guestbook superguestconfig Admin Password Disclosure
Binary data 1564.prm...
Sun Java ASP Server Default Admin Password
Binary data 4575.prm...
edimaxBackdoor.txt
Vendor: Edimax Type: 7205APL Firmware: 2.40a-00 Kind of bug: Security Description: Normally a user called addmin, has to create a password on the Accesspoint. When you create a back-up of the settings of your Accesspoint, it will result in a config.bin file. Opening the file in Notepad gave the...
Edimax 7205APL
Vendor: Edimax Type: 7205APL Firmware: 2.40a-00 Kind of bug: Security Description: Normally a user called addmin, has to create a password on the Accesspoint. When you create a back-up of the settings of your Accesspoint, it will result in a config.bin file. Opening the file in Notepad gave the...
U.S. Robotics Broadband Router 8003 admin password visible
Hello. US Robotics Broadband Router 8003 is a small home/SOHO router which is configured using a HTML interface. This interface, as usual, asks for a password in order to let you view or change configuration parameters. But the password is checked first by a javascript function that just compares...
jportal.txt
Jportal is a portal system, quite commonly used: Google Results 1 - 10 of about 56,100 for "powered by jportal". 0.22 seconds Homepage: http://jportal2.com/ I've read its code and found: in module/print.inc.php: function artprint .... $query = "SELECT FROM $arttbl WHERE id=$id"; ... What to say? ...
JPortal SQL Injects
Jportal is a portal system, quite commonly used: Google Results 1 - 10 of about 56,100 for "powered by jportal". 0.22 seconds Homepage: http://jportal2.com/ I've read its code and found: in module/print.inc.php: function artprint .... $query = "SELECT FROM $arttbl WHERE id=$id"; ... What to say? ...
Samsung switches unauthorized access
Administrativ access without knowledge of admin password is possible...
CVE-2004-0266
Affects Php-Nuke 6.x to 7.1.0 where the SQL injection vulnerability is in the public_message capability (c_mid parameter) that can disclose the administrator password. Exploitation details or specific patches are not provided in the connected documents. The OpenVAS/Nessus references confirm long-...
OpenBB 1.06 SQL Injection
Hello bugtraq readers, A vulnerability exists in OpenBB 1.06 that could allow an attacker to manipulate SQL queries and obtain sensitive information from the database such as the administrator md5 password hash. This vulnerability exists because the index.php script of the application does not...
Множество уязвимостей в ChitChat Message Board
Множество уязвимостей в ChitChat Message Board Название скрипта: ChitChat Message Board Уязвимая версия: = v.2.8 Сайт производителя: http://www.cyber-cats.com/php Автор: Jaime Kartak Найдено: ziGGy Дата: 21st December 2003 ============ Introduction ============ ChitChat Message Board - симпатична...
GuppY 2.4 - Remote File Access
GuppY 2.4 - Remote File Access source: https://www.securityfocus.com/bid/8769/info GuppY is prone to an issue that could allow a remote attacker to read or write to files on the vulnerable server. This issue presents itself in the tinymsg.php component of the software. The attacker could only...
GuppY 2.4 - Remote File Access
source: https://www.securityfocus.com/bid/8769/info GuppY is prone to an issue that could allow a remote attacker to read or write to files on the vulnerable server. This issue presents itself in the tinymsg.php component of the software. The attacker could only access files to which the webserve...