29 matches found
CVE-2014-2875
The session.lua library in CGILua 5.2 alpha 1 and 5.2 alpha 2 uses weak session IDs generated based on OS time, which allows remote attackers to hijack arbitrary sessions via a brute force attack. NOTE: CVE-2014-10399 and CVE-2014-10400 were SPLIT from this ID...
CVE-2014-2875
The session.lua library in CGILua 5.2 alpha 1 and 5.2 alpha 2 uses weak session IDs generated based on OS time, which allows remote attackers to hijack arbitrary sessions via a brute force attack. NOTE: CVE-2014-10399 and CVE-2014-10400 were SPLIT from this ID...
CGILua <= 3.0 - SQL Injection
No description provided by source. Exploit Title: CGILua SQL Injection Google Dork: inurl:/cgilua.exe/sys/ Vendor Homepage: https://web.tecgraf.puc-rio.br/cgilua/ Version: = 3.0 Date: 09/12/2013 Exploit Author: aceeeeeeeer Contact: http://www.twitter.com/aceeeeeeeer Tested on: Windows greetz:...
Syhunt Advisory: CGILua session.lua Predictable Session ID Vulnerability
Syhunt Advisory: CGILua session.lua Predictable Session ID Vulnerability Advisory-ID: 201404301 Discovery Date: 03.27.2014 Release Date: 04.30.2014 Affected Applications: CGILua 5.0.x, CGILua 5.1.x., CGILua 5.2 alpha 1 & CGILua 5.2 alpha 2 Class: Predictable Session ID Status: Unpatched/Vendor...
CGILua 3.0 /publique/cgi/cgilua.exe/sys/start.htm SQL注入漏洞
No description provided by source...
CGILua <= 3.0 - SQL Injection Vulnerability
Exploit for cgi platform in category web applications Exploit: /cgi/cgilua.exe/sys/start.htm?sid= SQLi Demo: http://www.server.com/publique/cgi/cgilua.exe/sys/start.htm?sid=157 0day.today 2018-01-10...
CGILua 3.0 SQL Injection
Exploit Title: CGILua SQL Injection Google Dork: inurl:/cgilua.exe/sys/ Vendor Homepage: https://web.tecgraf.puc-rio.br/cgilua/ Version: = 3.0 Date: 09/12/2013 Exploit Author: aceeeeeeeer Contact: http://www.twitter.com/aceeeeeeeer Tested on: Windows greetz: CrazyDuck - Synchr0N1ze - No\one -...
CGILua 3.0 - SQL Injection
CGILua 3.0 - SQL Injection Exploit Title: CGILua SQL Injection Google Dork: inurl:/cgilua.exe/sys/ Vendor Homepage: https://web.tecgraf.puc-rio.br/cgilua/ Version: = 3.0 Date: 09/12/2013 Exploit Author: aceeeeeeeer Contact: http://www.twitter.com/aceeeeeeeer Tested on: Windows greetz: CrazyDuck -...
CGILua 3.0 - SQL Injection
Exploit Title: CGILua SQL Injection Google Dork: inurl:/cgilua.exe/sys/ Vendor Homepage: https://web.tecgraf.puc-rio.br/cgilua/ Version: = 3.0 Date: 09/12/2013 Exploit Author: aceeeeeeeer Contact: http://www.twitter.com/aceeeeeeeer Tested on: Windows greetz: CrazyDuck - Synchr0N1ze - No\one -...