490 matches found
Membership Site Script 1 SQL Injection
Title: Membership Site Script v1 - SQL injection Credit: Bilal KARDADOU Vendor: http://www.turnkeycentral.com Vendor URL: http://www.turnkeycentral.com/scripts/membership-site-script/ Product: Membership Site Script v1 Google Dork: N/A Product & Service Introduction: "Membership Site Script" Do y...
RSS News AutoPilot Script 1.0.1 / 3.1.0 - Admin Panel Authentication Bypass
Exploit for php platform in category web applications Exploit Title: RSS News AutoPilot Script - Admin Panel Authentication Bypass Date: 14 October 2016 Exploit Author: Arbin Godar Website : ArbinGodar.com Software Link: https://codecanyon.net/item/rss-news-autopilot-script/11812898 Version: 1.0....
RSS News AutoPilot Script 1.0.1/3.1.0 - Admin Panel Authentication Bypass
Exploit Title: RSS News AutoPilot Script - Admin Panel Authentication Bypass Date: 14 October 2016 Exploit Author: Arbin Godar Website : ArbinGodar.com Software Link: https://codecanyon.net/item/rss-news-autopilot-script/11812898 Version: 1.0.1 to 3.1.0...
RSS News AutoPilot Script 1.0.13.0.3 - Cross-Site Request Forgery
RSS News AutoPilot Script 1.0.13.0.3 - Cross-Site Request Forgery Exploit Title: RSS News AutoPilot Script 1.0.1 / 3.0.3 - CSRF to Persistent XSS and RCE Through Unrestricted File Upload Date: 30 August 2016 Exploit Author: Arbin Godar Website : ArbinGodar.com Software Link:...
RSS News AutoPilot Script 1.0.1/3.0.3 - Cross-Site Request Forgery
Exploit Title: RSS News AutoPilot Script 1.0.1 / 3.0.3 - CSRF to Persistent XSS and RCE Through Unrestricted File Upload Date: 30 August 2016 Exploit Author: Arbin Godar Website : ArbinGodar.com Software Link: https://codecanyon.net/item/rss-news-autopilot-script/11812898 Version: 1.0.1 to 3.0.3...
CVE-2005-3687
cancelaccount.php in WHM AutoPilot 2.5.30 and earlier allows remote attackers to cancel requests for arbitrary accounts via a modified c parameter...
CVE-2005-3687
CVE-2005-3687 affects WHM AutoPilot 2.5.30 and earlier. A flaw in cancel_account.php lets remote attackers cancel requests for arbitrary accounts by modifying the c parameter. The NVD metrics indicate a NETWORK attack with LOW complexity, requiring no authentication, causing PARTIAL integrity imp...
CVE-2005-3687
cancelaccount.php in WHM AutoPilot 2.5.30 and earlier allows remote attackers to cancel requests for arbitrary accounts via a modified c parameter...
CVE-2005-3687: Undefined Security Weakness
cancelaccount.php in WHM AutoPilot 2.5.30 and earlier allows remote attackers to cancel requests for arbitrary accounts via a modified c parameter...
[Full-disclosure] WMH AutoPilot: Unauthorized hosting account cancellation request
Title: WMH AutoPilot: Unauthorized hosting account cancellation request Access: Remote Product: WHM AutoPilot http://www.whmautopilot.com Severity: Moderately Low Synopsis: A vulnerability has been identified that allows the unauthorized filing of hosting account cancellation requests. Vulnerable...
CVE-2004-2524
CVE-2004-2524 affects Benchmark Designs’ WHM AutoPilot 2.4.5 and earlier. The vulnerability arises when clogin.php uses clogin_e and base64_encode to encode the target user ID in the c parameter, allowing remote attackers to read plaintext usernames and passwords from the resulting form. The desc...
CVE-2004-2524
clogin.php in Benchmark Designs' WHM AutoPilot 2.4.5 and earlier allows remote attackers to obtain plaintext username and password credentials by using the clogine and base64encode functions to encode the desired user ID in the c parameter, then read the plaintext values in the resulting form...
CVE-2004-2524: Undefined Security Weakness
clogin.php in Benchmark Designs' WHM AutoPilot 2.4.5 and earlier allows remote attackers to obtain plaintext username and password credentials by using the clogine and base64encode functions to encode the desired user ID in the c parameter, then read the plaintext values in the resulting form...
CVE-2004-1420
WHM AutoPilot 2.4.6.5 and earlier contains multiple XSS flaws in header.php, allowing remote attackers to inject arbitrary script/HTML via site_title or http_images parameters. Affected component is WHM AutoPilot’s header.php; root cause is improper handling of user-supplied values in these param...
CVE-2004-1421
CVE-2004-1421: Affects WHM AutoPilot 2.4.6.5 and earlier. The vulnerability arises from PHP remote file inclusion through the server_inc parameter in 1) step_one.php, 2) step_one_tables.php, and 3) step_two_tables.php, enabling an attacker to reference a URL on a remote server that contains execu...
CVE-2004-1422
CVE-2004-1422 : WHM AutoPilot
CVE-2004-1421
Multiple PHP remote file inclusion vulnerabilities 1 stepone.php, 2 steponetables.php, 3 steptwotables.php in WHM AutoPilot 2.4.6.5 and earlier allow remote attackers to execute arbitrary PHP code by modifying the serverinc parameter to reference a URL on a remote web server that contains the cod...
CVE-2004-1422
WHM AutoPilot 2.4.6.5 and earlier allows remote attackers to gain sensitive information via phpinfo, which reveals php settings...
CVE-2004-1420
Multiple cross-site scripting XSS vulnerabilities in header.php in WHM AutoPilot 2.4.6.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 sitetitle or 2 httpimages parameter...