523 matches found
phpBazar-2.1.1fix - Remote Administration-Panel
phpBazar-2.1.1fix - Remote Administration-Panel phpBazar-2.1.1fix Remote Administration-Panel Vulnerability Found by? :? kurdish hackers team C0ntact : pshela at YaHoo .com ?????????????????? Groups : Kurd-Team site?? : www.kurdteam.org =======================================================...
phpBazar-2.1.1fix Remote Administration-Panel Vulnerability
No description provided by source. phpBazar-2.1.1fix Remote Administration-Panel Vulnerability ! Found by? :? kurdish hackers team ! C0ntact : pshela at YaHoo .com ?????????????????? ! Groups : Kurd-Team ! site?? : www.kurdteam.org =======================================================...
phpBazar 2.1.1fix Remote Administration-Panel Vulnerability
Exploit for unknown platform in category web applications =========================================================== phpBazar-2.1.1fix Remote Administration-Panel Vulnerability =========================================================== =======================================================...
WordPress Plugin My Category Order 2.8 - SQL Injection
WordPress Plugin My Category Order 2.8 - SQL Injection Source: WordPress Plugin: My Category Order = 2.8 mycategoryorder.php / SQL Injection Vulnerability Download: http://wordpress.org/extend/plugins/my-category-order/ No Dork Author: ManhLuat93 at hcegroupdotnet Errors appears only when you hav...
WordPress Plugin My Category Order <= 2.8 SQL Injection Vulnerability
No description provided by source. Source: WordPress Plugin: My Category Order = 2.8 mycategoryorder.php / SQL Injection Vulnerability Download: http://wordpress.org/extend/plugins/my-category-order/ No Dork Author: ManhLuat93 at hcegroupdotnet Errors appears only when you have admin control Open...
Arab Portal 2.2 SQL Injection
Script Name : Arab portal 2.2 Remote Auth SQL Bypass Vulnerabilitiy Script home : http://www.arab-portal.info/arabportal22.zip Exploit risk level : High Found By : RoMaNcYxHaCkEr RXH Written By : Sniper Code S.C.T - 443 Our home : WwW.Sec-Code.CoM Security - Codes TeaM...
XSS in user links
A user with username "alert"foo" that is linked to via \username markup results in script being executed. Curiously, viewing the space homepage of that user results in a blank page. This of course is prevented for public signup, but if the user gets created via other means, i.e. external user...
XSS in user links
A user with username "alert"foo" that is linked to via \username markup results in script being executed. Curiously, viewing the space homepage of that user results in a blank page. This of course is prevented for public signup, but if the user gets created via other means, i.e. external user...
XSS in user links
A user with username "alert"foo" that is linked to via \username markup results in script being executed. Curiously, viewing the space homepage of that user results in a blank page. This of course is prevented for public signup, but if the user gets created via other means, i.e. external user...
Arab Portal 2.2 (Auth Bypass) Remote SQL Injection Vulnerability
No description provided by source. Script Name : Arab portal 2.2 Remote Auth SQL Bypass Vulnerabilitiy Script home : http://www.arab-portal.info/arabportal22.zip Exploit risk level : High Found By : RoMaNcYxHaCkEr RXH Written By : Sniper Code S.C.T - 443 Our home : WwW.Sec-Code.CoM Security - Cod...
Arab Portal 2.2 (Auth Bypass) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ Arab Portal 2.2 Auth Bypass Remote SQL Injection Vulnerability ================================================================ Script Name : Arab portal 2.2 Remote Auth SQL...
New5starRating 1.0 - '/admin/control_panel_sample.php' SQL Injection
source: https://www.securityfocus.com/bid/34680/info New5starRating is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modif...
Limbo CMS 1.0.4.2 CSRF Privilege Escalation PoC
Exploit for unknown platform in category web applications =============================================== Limbo CMS 1.0.4.2 CSRF Privilege Escalation PoC =============================================== Limbo cms v 1042Lt Cross-site request forgery Privilege Escalation Proof of Concept by Alfons...
CVE-2008-4245
The Admin Control Panel in Rianxosencabos CMS 0.9 does not require administrator privileges, which allows remote authenticated users to 1 change a user's privileges, 2 delete a user account, or perform unspecified other administrative actions via vectors involving an admin lista action to the...
Design/Logic Flaw
The Admin Control Panel in Rianxosencabos CMS 0.9 does not require administrator privileges, which allows remote authenticated users to 1 change a user's privileges, 2 delete a user account, or perform unspecified other administrative actions via vectors involving an admin lista action to the...
CVE-2008-4245
The CVE-2008-4245 entry concerns the Admin Control Panel of Rianxosencabos CMS 0.9, which does not require administrator privileges. This allows remote authenticated users to perform administrative actions (e.g., change a user's privileges, delete a user account) via vectors involving an admin li...
Rianxosencabos CMS 0.9 - Arbitrary Add Admin
Rianxosencabos CMS 0.9 - Arbitrary Add Admin ============================================================ Rianxosencabos CMS 0.9 Arbitrary Add-Admin Vulnerability ============================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CW...
Rianxosencabos CMS 0.9 - Arbitrary Add Admin
============================================================ Rianxosencabos CMS 0.9 Arbitrary Add-Admin Vulnerability ============================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...
paranews-xss.txt
Author : Xylitol Contact : n/a Vendor : s0nic www.monxoom.de Version: 3.4 D0rks : Powered by Paranews 3.4 Public release vulnz: 10/09/08 Impact: low Stop lammer 1. Description: Auf den Namen »ParaNews« habe ich mein Newsscript getauft, welches zur Pflege eines Newsbereich in einer Website gedacht...