Confixx 2 - DB SQL Injection

Confixx 2 - DB SQL Injection source: https://www.securityfocus.com/bid/9830/info It has been reported that an input validation error with the potential for use in a SQL injection attack is present in the "dbmysqlloeschen2.php" script. When a user is requesting the "dbmysqlloeschen2.php" script, o...

Confixx 2 - Perl Debugger Remote Command Execution

Confixx 2 - Perl Debugger Remote Command Execution source: https://www.securityfocus.com/bid/9831/info The Confixx PERL debugging utility functionality has been reported to be prone to a remote command execution vulnerability. The issue is reported to occur when a command sequence is appended to ...

[Full-Disclosure] Confixx 2.0.xx SQL_Injections and reading MySQL Root-PW

SQL-Injections in Confixx 2.0.xx // reading MySQL Root-PW include"auth.php"; dbconnect$dbhost, $dbuser, $dbpass; $id = dbquery"select countdatenbank as mysql from mysqldatenbanken where kunde = '$PHPAUTHUSER'"; $werte = dbfetcharray$id; $mysql = $werte"mysql"; $id = dbquery"select dbname from...

Confixx 2 - Perl Debugger Remote Command Execution

source: https://www.securityfocus.com/bid/9831/info The Confixx PERL debugging utility functionality has been reported to be prone to a remote command execution vulnerability. The issue is reported to occur when a command sequence is appended to a HTTP request for a PERL script resource, the...

Unauthorized access to confixx

Server may be accessed via default account mysqlshell-user...

confixx (remote access)

hi, Information about Confixx from http://www.confixx.de: ====================================================== Confixx is a comfortable tool to automate customer administration on Linux-based webservers with graphic interfaces for Admin, Resellers and End Users. Currently there are more than 42...