Butterfly Organizer 2.0.1 (view.php id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Butterfly Organizer 2.0.1 view.php id SQL Injection Vulnerability =================================================================== 0x01 Informations: Name : Butterfly...

Butterfly Organizer 2.0.1 SQL Injection

0x01 Informations: Name : Butterfly Organizer 2.0.1 Sql Injection Download : http://www.hotscripts.com/jump.php?listingid=72677&jumptype=1 Vulnerability : Remote Sql Injection Author : Osirys Contact : osirysatlivedotit Notes : Proud to be Italian : Same bug of the previous version:...

Butterfly ORGanizer 2.0.1 - id SQL Injection

Butterfly ORGanizer 2.0.1 - id SQL Injection 0x01 Informations: Name : Butterfly Organizer 2.0.1 Sql Injection Download : http://www.hotscripts.com/jump.php?listingid=72677&jumptype=1 Vulnerability : Remote Sql Injection Author : Osirys Contact : osirysatlivedotit Notes : Proud to be Italian : Sa...

Unfixed XSS vulnerability at butterfly-angels.info

Security researcher BackDoor, has submitted on 09/03/2008 a cross-site-scripting XSS vulnerability affecting butterfly-angels.info, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/03/2008. It is...

Butterfly Organizer 2.0.0 (SQL/XSS) Multiple Remote Vulnerabilities

No description provided by source. ====================================================================== Butterfly Organizer 2.0.0 SQL/XSS Multiple Remote Vulnerabilities ====================================================================== ,--^----------,--------,-----,-------^--, | |||||||||...

Butterfly Organizer 2.0.0 (SQL/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== Butterfly Organizer 2.0.0 SQL/XSS Multiple Remote Vulnerabilities ===================================================================...

Butterfly Organizer 2.0.0 Arbitrary Delete (Category/Account) Exploit

Exploit for unknown platform in category web applications ===================================================================== Butterfly Organizer 2.0.0 Arbitrary Delete Category/Account Exploit ===================================================================== !/usr/bin/perl -w Butterfly...

Butterfly ORGanizer 2.0.0 - SQL Injection / Cross-Site Scripting

====================================================================== Butterfly Organizer 2.0.0 SQL/XSS Multiple Remote Vulnerabilities ====================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground...

butterfly-sqlxss.txt

====================================================================== Butterfly Organizer 2.0.0 SQL/XSS Multiple Remote Vulnerabilities ====================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground...

Butterfly ORGanizer 2.0.0 - Arbitrary Delete (Category/Account)

!/usr/bin/perl -w Butterfly Organizer 2.0.0 ; $b = LWP::UserAgent-new or die "Could not initialize browser\n"; $b-agent'Mozilla/4.0 compatible; MSIE 7.0; Windows NT 5.1'; $host = $ARGV0 . "/category-delete.php?tablehere=".$cat."&isjsconfirmed=1"; $res = $b-requestHTTP::Request-newGET=$host; $answ...

Butterfly ORGanizer 2.0.0 - Arbitrary Delete (CategoryAccount)

Butterfly ORGanizer 2.0.0 - Arbitrary Delete CategoryAccount !/usr/bin/perl -w Butterfly Organizer 2.0.0 ; $b = LWP::UserAgent-new or die "Could not initialize browser\n"; $b-agent'Mozilla/4.0 compatible; MSIE 7.0; Windows NT 5.1'; $host = $ARGV0...

Butterfly ORGanizer 2.0.0 - SQL Injection Cross-Site Scripting

Butterfly ORGanizer 2.0.0 - SQL Injection Cross-Site Scripting ====================================================================== Butterfly Organizer 2.0.0 SQL/XSS Multiple Remote Vulnerabilities ======================================================================...

CVE-2007-4485

PHP remote file inclusion vulnerability in visitor.php in Butterfly online visitors counter 1.08, when used with certain older versions of PHP with improper SERVER superglobal handling, allows remote attackers to execute arbitrary PHP code via a URL in the SERVERDOCUMENTROOT parameter. NOTE: it...

CVE-2007-4485

CVE-2007-4485 affects Butterfly online visitors counter 1.08. The vulnerability arises in visitor.php where, when used with certain older PHP versions and improper handling of the SERVER superglobal, an attacker can cause a remote PHP code execution by supplying a URL in _SERVER[DOCUMENT_ROOT]. T...

Butterfly online vistors counter 1.08 RFI

App Name : Butterfly online vistors counter v.1.08 HomePage : http://www.phoenix.frihost.net/butterfly/readme.php Vuln type : Remote File Include RFI Vulnerability Discovered by : iNs Vuln Code: visitor.php includeonce $SERVER"DOCUMENTROOT" . "/butterfly/custom.php"; // include settings POC:...