CVE-2008-2297

The admin.php file in Rantx allows remote attackers to bypass authentication and gain privileges by setting the logininfo cookie to "", which is present in the password file and probably passes an insufficient comparison...

CVE-2008-2282

admin.php in Internet Photoshow and Internet Photoshow Special Edition SE allows remote attackers to bypass authentication by setting the loginadmin cookie to true...

CVE-2008-2282: Improper Authentication

admin.php in Internet Photoshow and Internet Photoshow Special Edition SE allows remote attackers to bypass authentication by setting the loginadmin cookie to true...

GNU/Gallery <= 1.1.1.0 (admin.php) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== GNU/Gallery Vulnerability: http://site.com/admin.php?show=../../../../../../../etc/passwd NOTE/TIP: fair amount of sites running, althou no good dork. 0day.today 2018-04...

GNU/Gallery 1.1.1.0 - 'admin.php' Local File Inclusion

--==+================================================================================+==-- --==+ GNU/Gallery Vulnerability: http://site.com/admin.php?show=../../../../../../../etc/passwd NOTE/TIP: fair amount of sites running, althou no good dork. GREETZ: milw0rm.com, h4ck-y0u.org, CipherCrew !...

CVE-2008-2293: Undefined Security Weakness

admin.php in Multi-Page Comment System MPCS 1.0 and 1.1 allows remote attackers to bypass authentication and gain privileges by setting the CommentSystemAdmin cookie to 1...

CVE-2008-2297: Undefined Security Weakness

The admin.php file in Rantx allows remote attackers to bypass authentication and gain privileges by setting the logininfo cookie to " ", which is present in the password file and probably passes an insufficient comparison...

GNUGallery 1.1.1.0 - admin.php Local File Inclusion

GNUGallery 1.1.1.0 - admin.php Local File Inclusion --==+================================================================================+==-- --==+ GNU/Gallery Vulnerability: http://site.com/admin.php?show=../../../../../../../etc/passwd NOTE/TIP: fair amount of sites running, althou no good dor...

CVE-2008-2298: Improper Authentication

Admin.php in Web Slider 0.6 allows remote attackers to bypass authentication and gain privileges by setting the admin cookie to 1...

internetphotoshow-cookie.txt

--==+================================================================================+==-- --==+ Internet Photoshow Special Edition Insecure Cookie Handling +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 14 M...

Cross site scripting

Cross-site scripting XSS vulnerability in admin.php in LifeType 1.2.8 allows remote attackers to inject arbitrary web script or HTML via the newBlogUserName parameter in an addBlogUser action, a different vector than CVE-2008-2178...

CVE-2008-2196

Cross-site scripting XSS vulnerability in admin.php in LifeType 1.2.8 allows remote attackers to inject arbitrary web script or HTML via the newBlogUserName parameter in an addBlogUser action, a different vector than CVE-2008-2178...

CVE-2008-2196

The CVE-2008-2196 entry concerns a Cross-Site Scripting (XSS) flaw in LifeType; specifically admin.php handles addBlogUser via the newBlogUserName parameter (LifeType 1.2.8). The vulnerability allows remote attackers to inject arbitrary script/HTML, a vector distinct from CVE-2008-2178. Public re...

CVE-2008-2196: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin.php in LifeType 1.2.8 allows remote attackers to inject arbitrary web script or HTML via the newBlogUserName parameter in an addBlogUser action, a different vector than CVE-2008-2178...

Internet PhotoShow (Special Edition) - Insecure Cookie Handling

--==+================================================================================+==-- --==+ Internet Photoshow Special Edition Insecure Cookie Handling +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 14 M...

Cross site scripting

Cross-site scripting XSS vulnerability in admin.php in LifeType 1.2.7 allows remote attackers to inject arbitrary web script or HTML via the searchTerms parameter in an editArticleCategories operation aka an admin category search...

CVE-2008-2178

Technical details for CVE-2008-2178 are not publicly available in the provided documents; monitor for updates.

CVE-2008-2178: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin.php in LifeType 1.2.7 allows remote attackers to inject arbitrary web script or HTML via the searchTerms parameter in an editArticleCategories operation aka an admin category search...

CVE-2008-2177: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in phpDirectorySource 1.1.06, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 lid parameter to show.php and the 2 login parameter to admin.php...

Sql injection

SQL injection vulnerability in admin/news.php in PHP Forge 3.0 beta 2 allows remote attackers to execute arbitrary SQL commands via the id parameter in the news module to admin.php...