Chipmunk Blog (Auth Bypass) Add Admin Exploit

Exploit for unknown platform in category web applications ============================================= Chipmunk Blog Auth Bypass Add Admin Exploit ============================================= 0x01 Informations: Script : Chipmunk Blog Download : http://www.chipmunk-scripts.com/blog/blog.zip...

chipmunkboard-sqlxss.txt

--------------------------------------------------------- Portal Name: Chipmunk Board Vendor : http://www.chipmunk-scripts.com/page.php?ID=8 Download : http://www.chipmunk-scripts.com/board/board.zip Vulnerable File : index.php Dork: Powered by c Chipmunk Board Author : PouyaServer ,...

chipmunkdir-sqlxss.txt

--------------------------------------------------------- Portal Name: Chipmunk Directory Vendor : http://www.chipmunk-scripts.com/page.php?ID=15 Download : http://www.chipmunk-scripts.com/directory/directory.zip Vulnerable File's : index.php,recommend.php Dork: Powered by c Chipmunk Directory...

chipmunkguestbook-sqlxss.txt

--------------------------------------------------------- Portal Name: Chipmunk Guestbook Vendor : http://www.chipmunk-scripts.com/page.php?ID=13 Download : http://www.chipmunk-scripts.com/guestbook/guestbooks.zip Vulnerable File's : index.php Dork: Powered by c Chipmunk Guestbook Author :...

chipmunkblo-xss.txt

--------------------------------------------------------- Portal Name: Chipmunk blog Vendor : http://www.chipmunk-scripts.com/page.php?ID=9 Download : http://www.chipmunk-scripts.com/blog/blog.zip Vulnerable File's : members.php,archive.php,photos.php Dork: Powered by c Chipmunk Blogger Author :...

chipmunktopsites-sqlxss.txt

--------------------------------------------------------- Portal Name: Chipmunk Topsites Vendor : http://www.chipmunk-scripts.com/page.php?ID=10 Download : http://www.chipmunk-scripts.com/topsites/topsites.zip Vulnerable File's : addreview.php,index.php,reviews.php,authenticate.php Dork: Powered ...

chipmunk topsites - Authentication Bypass / Cross-Site Scripting

Chipmunk Topsites Auth Bypass SQL Injection & XSS Multiple Remote Vuln. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : N0T: RedHaK Kardesime ozel tesekurler...

chipmunk-bypassxss.txt

Chipmunk Topsites Auth Bypass SQL Injection & XSS Multiple Remote Vuln. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : N0T: RedHaK Kardesime ozel tesekurler...

chipmunk topsites - Authentication Bypass Cross-Site Scripting

chipmunk topsites - Authentication Bypass Cross-Site Scripting Chipmunk Topsites Auth Bypass SQL Injection & XSS Multiple Remote Vuln. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi...

Chipmunk Topsites (Auth Bypass/XSS) Multiple Remote Vulnerabilities

No description provided by source. Chipmunk Topsites Auth Bypass SQL Injection & XSS Multiple Remote Vuln. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : N0T:...

Chipmunk Topsites (Auth Bypass/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== Chipmunk Topsites Auth Bypass/XSS Multiple Remote Vulnerabilities =================================================================== Chipmunk Topsites Auth Bypass SQL...

CVE-2008-4921

board/admin/reguser.php in Chipmunk CMS 1.3 allows remote attackers to bypass authentication and gain administrator privileges via a direct request. NOTE: some of these details are obtained from third party information...

Authentication flaw

board/admin/reguser.php in Chipmunk CMS 1.3 allows remote attackers to bypass authentication and gain administrator privileges via a direct request. NOTE: some of these details are obtained from third party information...

CVE-2008-4921

Chipmunk CMS 1.3 contains an authentication bypass vulnerability in the file board/admin/reguser.php that allows remote attackers to gain administrator privileges through a direct/crafted request. The root cause is not explicitly detailed in the provided documents, only that an unauthenticated us...

CVE-2008-4921

board/admin/reguser.php in Chipmunk CMS 1.3 allows remote attackers to bypass authentication and gain administrator privileges via a direct request. NOTE: some of these details are obtained from third party information...

CVE-2008-4921: Undefined Security Weakness

board/admin/reguser.php in Chipmunk CMS 1.3 allows remote attackers to bypass authentication and gain administrator privileges via a direct request. NOTE: some of these details are obtained from third party information...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Chipmunk Blog Blogger allow remote attackers to inject arbitrary web script or HTML via the membername parameter to 1 members.php, 2 comments.php, 3 photos.php, 4 archive.php, or 5 cat.php. NOTE: the provenance of this information is unknown; t...

CVE-2008-3186

Multiple cross-site scripting XSS vulnerabilities in Chipmunk Blog Blogger allow remote attackers to inject arbitrary web script or HTML via the membername parameter to 1 members.php, 2 comments.php, 3 photos.php, 4 archive.php, or 5 cat.php. NOTE: the provenance of this information is unknown; t...

CVE-2008-3186

Multiple cross-site scripting XSS vulnerabilities in Chipmunk Blog Blogger allow remote attackers to inject arbitrary web script or HTML via the membername parameter to 1 members.php, 2 comments.php, 3 photos.php, 4 archive.php, or 5 cat.php. NOTE: the provenance of this information is unknown; t...

CVE-2008-3186

Chipmunk Blog (Blogger) contains cross-site scripting (XSS) vulnerabilities in the membername parameter of five PHP scripts (members.php, comments.php, photos.php, archive.php, cat.php). Root cause: improper handling of user-supplied membername leads to script/HTML injection. Impact: allows remot...