3775 matches found
ActiveKB <= 1.5 Insecure Cookie Handling/Arbitrary Admin Access
Exploit for unknown platform in category web applications =============================================================== ActiveKB = 1.5 Insecure Cookie Handling/Arbitrary Admin Access ===============================================================...
Internet Photoshow (Special Edition) Insecure Cookie Handling Vuln
No description provided by source. --==+================================================================================+==-- --==+ Internet Photoshow Special Edition Insecure Cookie Handling +==-- --==+================================================================================+==-- Discover...
ActiveKB 1.5 - Insecure Cookie Handling/Arbitrary Admin Access
--==+================================================================================+==-- --==+ ActiveKB = 1.5 Insecure Cookie Handling/Arbitrary Admin Access +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 1...
Design/Logic Flaw
Cicoandcico CcMail 1.0.1 and earlier does not verify that the thiscookie cookie corresponds to an authenticated session, which allows remote attackers to obtain access to the "admin area" via a modified thiscookie cookie...
CVE-2008-1904
Cicoandcico CcMail 1.0.1 and earlier does not verify that the thiscookie cookie corresponds to an authenticated session, which allows remote attackers to obtain access to the "admin area" via a modified thiscookie cookie...
CVE-2008-1904: Improper Authentication
Cicoandcico CcMail 1.0.1 and earlier does not verify that the thiscookie cookie corresponds to an authenticated session, which allows remote attackers to obtain access to the "admin area" via a modified thiscookie cookie...
CcMail <= 1.0.1 Insecure Cookie Handling Vulnerability
No description provided by source. --==+================================================================================+==-- --==+ CcMail = 1.0.1 Insecure Cookie Handling +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz...
CcMail 1.0.1 - Insecure Cookie Handling
CcMail 1.0.1 - Insecure Cookie Handling --==+================================================================================+==-- --==+ CcMail = 1.0.1 Insecure Cookie Handling +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz...
CcMail 1.0.1 - Insecure Cookie Handling
--==+================================================================================+==-- --==+ CcMail = 1.0.1 Insecure Cookie Handling +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 11 April 2008 Script...
prozilla-delete.txt
--==+================================================================================+==-- --==+ Prozilla Reviews Script 1.0 Arbitrary Delete User Vulnerability +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: ...
Prozilla Reviews Script 1.0 Arbitrary Delete User Vulnerability
Exploit for unknown platform in category web applications =============================================================== Prozilla Reviews Script 1.0 Arbitrary Delete User Vulnerability ===============================================================...
Picture Rating 1.0 Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl -- Picture Rating 1.0 Blind SQL Injection Exploit -- -Info/Instructions- After running this perl script, you will have admin details therefore you will be able to login to the admin area at http://site.com/control/ ok once you have logged in has...
Prozilla Reviews Script 1.0 - Arbitrary Delete User
Prozilla Reviews Script 1.0 - Arbitrary Delete User --==+================================================================================+==-- --==+ Prozilla Reviews Script 1.0 Arbitrary Delete User Vulnerability +==--...
Prozilla Topsites 1.0 - Arbitrary EditAdd Users
Prozilla Topsites 1.0 - Arbitrary EditAdd Users --==+================================================================================+==-- --==+ Prozilla Topsites 1.0 Arbitrary Edit/Add Users Vulnerability +==--...
Prozilla Topsites 1.0 - Arbitrary Edit/Add Users
--==+================================================================================+==-- --==+ Prozilla Topsites 1.0 Arbitrary Edit/Add Users Vulnerability +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 7...
Gaming Directory 1.0 (cat_id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ Gaming Directory 1.0 catid Remote SQL Injection Vulnerability ================================================================...
CVE-2008-0835: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in indexen.php in Simple CMS 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the area parameter...
PowerNews (Newsscript) 2.5.6 Local File Inclusion Vulnerabilities
No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-014 Application: PowerNews Newsscript Versions Affected: 2.5.6 Vendor URL: http://www.powerscripts.org/ Bug: Multiple Local File Include Exploits: YES Reported: 01.02.2008 Vendor Response: none Solution:...
PowerNews 2.5.6 - Local File Inclusion
PowerNews 2.5.6 - Local File Inclusion Digital Security Research Group DSecRG Advisory DSECRG-08-014 Application: PowerNews Newsscript Versions Affected: 2.5.6 Vendor URL: http://www.powerscripts.org/ Bug: Multiple Local File Include Exploits: YES Reported: 01.02.2008 Vendor Response: none...
Sqlhello overflow process-vulnerability warning-the black bar safety net
Two days before the use of sqlhello overflow vulnerability tools with a local area network inside a colleague made a joke, made his win2k shell So also want to play about overflow. First with Delphi write a vulnerable program. If not check the input string length, then the input string length is...