69 matches found
Aztek Forum 4.0 - myadmin.php User Privilege Escalation
Aztek Forum 4.0 - myadmin.php User Privilege Escalation !/usr/bin/perl use IO::Socket; Aztek Forum 4.00 Change User Rights Remote Exploit only if the magicquote are : OFF aztekgar.pl 127.0.0.1 /aztek/ Admin Attacker +------------------------------------------------------------+ - Aztek 4.0 Give...
Aztek Forum 4.00 (myadmin.php) User Privilege Escalation Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; Aztek Forum 4.00 Change User Rights Remote Exploit only if the magicquote are : OFF Hum hum , sorry for my bad english i'm french ; Note : Before using this exploit you must create a count on the board : And this count will receive...
Aztek Forum 4.00 (myadmin.php) User Privilege Escalation Exploit
Exploit for unknown platform in category web applications ================================================================ Aztek Forum 4.00 myadmin.php User Privilege Escalation Exploit ================================================================ !/usr/bin/perl use IO::Socket; Aztek Forum 4.0...
Aztek Forum 4.0 - 'myadmin.php' User Privilege Escalation
!/usr/bin/perl use IO::Socket; Aztek Forum 4.00 Change User Rights Remote Exploit only if the magicquote are : OFF aztekgar.pl 127.0.0.1 /aztek/ Admin Attacker +------------------------------------------------------------+ - Aztek 4.0 Give Admin rights to a normal user - - - - coded by Sparah -...
CVE-2006-1112
Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a long login value in a register form, which displays the installation path in a MySQL error message...
Design/Logic Flaw
Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a long login value in a register form, which displays the installation path in a MySQL error message...
Sql injection
Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a "/" in the msg parameter to index.php, which reveals usernames and passwords in a MySQL error message, possibly due to a forced SQL error or SQL injection...
CVE-2006-1111
Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a "/" in the msg parameter to index.php, which reveals usernames and passwords in a MySQL error message, possibly due to a forced SQL error or SQL injection...
Cross site scripting
Cross-site scripting XSS vulnerability in Aztek Forum 4.0 allows remote attackers to inject arbitrary web script or HTML via the message body in a new message...
CVE-2006-1110
Cross-site scripting XSS vulnerability in Aztek Forum 4.0 allows remote attackers to inject arbitrary web script or HTML via the message body in a new message...
CVE-2006-1112
The CVE-2006-1112 issue affects Aztek Forum 4.0. A remote attacker can cause exposure of sensitive information by supplying a long login value in the register form, which triggers a MySQL error that reveals the installation path. Root cause: error message disclosure via user-controlled login inpu...
CVE-2006-1110
Cross-site scripting XSS vulnerability in Aztek Forum 4.0 allows remote attackers to inject arbitrary web script or HTML via the message body in a new message...
CVE-2006-1112
Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a long login value in a register form, which displays the installation path in a MySQL error message...
CVE-2006-1111
CVE-2006-1111 affects Aztek Forum 4.0. The vulnerability arises from a vulnerability in index.php where a "/ " value in the msg parameter can trigger a MySQL error message that reveals usernames and passwords. The root cause is described as possibly due to a forced SQL error or SQL injection. The...
CVE-2006-1110
CVE-2006-1110 affects Aztek Forum 4.0 with a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary script or HTML via the message body when creating a new message. The CVSS-derived impact indicates partial integrity loss and no confidentiality/availability impact, with ...
CVE-2006-1111
Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a "/" in the msg parameter to index.php, which reveals usernames and passwords in a MySQL error message, possibly due to a forced SQL error or SQL injection...
[SA19096] Aztek Forum Message Body Script Insertion Vulnerability
TITLE: Aztek Forum Message Body Script Insertion Vulnerability SECUNIA ADVISORY ID: SA19096 VERIFY ADVISORY: http://secunia.com/advisories/19096/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Aztek Forum http://secunia.com/product/4254/ DESCRIPTION: loren...
CVE-2005-0700
The exportindex action in myadmin.php for Aztek Forum 4.0 allows remote attackers to obtain database files, possibly by setting the ATKADMIN cookie...
CVE-2005-0700
The CVE-2005-0700 entry affects Aztek Forum 4.0, where the export_index action in myadmin.php can be exploited by remote attackers to obtain database files, potentially by setting the ATK_ADMIN cookie. The available description states the vulnerability allows access to database files and indicate...
