2671 matches found
WebFileExplorer 3.1 - Authentication Bypass
WebFileExplorer 3.1 - Authentication Bypass Product Name: WebFileExplorer Version : 3.1 URL : http://www.webfileexplorer.com/ Price : 99 $ USD Credits to : Giovanni Buzzin, "Osirys" osirysatautisticidotorg WebFileExplorer v3.1, is prone to multiple vulnerabilities. At first, an attacker can injec...
WebFileExplorer 3.1 - Authentication Bypass
Product Name: WebFileExplorer Version : 3.1 URL : http://www.webfileexplorer.com/ Price : 99 $ USD Credits to : Giovanni Buzzin, "Osirys" osirysatautisticidotorg WebFileExplorer v3.1, is prone to multiple vulnerabilities. At first, an attacker can inject his evil sql code in the login form,...
Spywaredb3.2squared.com SQL Injection
Dear Full-Disclosure, Since F-Secure, Kaspersky, Symantec, SecurityFocus and Secunia apparently don't care about fake anti-virus authors, I'm giving you this awesome, yet simple flaw that will give you access to their main control panel. ======== !background ======== I originally found this while...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Acute Control Panel 1.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the themedirectory parameter to 1 container.php and 2 header.php in themes/...
Sql injection
SQL injection vulnerability in login.php in Acute Control Panel 1.0.0 allows remote attackers to execute arbitrary SQL commands via the username parameter...
CVE-2009-1248
Multiple PHP remote file inclusion vulnerabilities in Acute Control Panel 1.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the themedirectory parameter to 1 container.php and 2 header.php in themes/...
CVE-2009-1247
SQL injection vulnerability in login.php in Acute Control Panel 1.0.0 allows remote attackers to execute arbitrary SQL commands via the username parameter...
CVE-2009-1247
CVE-2009-1247 is an SQL injection vulnerability in Acute Control Panel 1.0.0. The flaw is in login.php, exploitable via the username parameter to execute arbitrary SQL commands remotely. NVD lists a base score of 7.5 (HIGH) with network access, low attack complexity, and no authentication. Connec...
CVE-2009-1248
CVE-2009-1248 affects Acute Control Panel 1.0.0, with multiple PHP remote file inclusion vulnerabilities. The issue allows an attacker to craft a URL in the theme_directory parameter to container.php or header.php within themes/ to execute arbitrary PHP code on the server. The underlying root cau...
CVE-2009-1248
Multiple PHP remote file inclusion vulnerabilities in Acute Control Panel 1.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the themedirectory parameter to 1 container.php and 2 header.php in themes/...
CVE-2009-1247
SQL injection vulnerability in login.php in Acute Control Panel 1.0.0 allows remote attackers to execute arbitrary SQL commands via the username parameter...
CVE-2009-1248: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in Acute Control Panel 1.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the themedirectory parameter to 1 container.php and 2 header.php in themes/...
CVE-2009-1247: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in login.php in Acute Control Panel 1.0.0 allows remote attackers to execute arbitrary SQL commands via the username parameter...
Acute Control Panel SQL Injection Vulnerability and Remote File Include Vulnerability
Acute Control Panel is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and multiple remote file-include issues. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...
Acute Control Panel 1.0.0 RFI / SQL Injection
Acute Control Panel 1.0.0 RFI/SQL Injection Auth Bypass + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Remote File Inclusion Vulnerable code in container.php ----------------------------------------------------------- -----------------------------------------------------------...
DirectAdmin <= 1.33.1 Symlink Permission Bypass Vuln (untested)
No description provided by source. /H\ /T\ |T-HHHHHHH-T| HHHHHHHHHH| HHHHHHHHHH| H-T H-T \T-HHHHH-T/ HHHHHHHHH/ HHHHHHHHH/ H-T H-T H-T H-T H-T H-THHHHHH-T /HHHHH\ H-T H-T H-T H-THHHHHH-T THHHHHT H-T H-T H-T H-T H-T \HHHHH/ H-T H-T H-T H-T H-T H-T H-T H-T H-T H-T H-T /H\ HHHHHHHHH\...
Acute Control Panel 1.0.0 (SQL/RFI) Multiple Remote Vulnerabilities
No description provided by source. + Acute Control Panel 1.0.0 RFI/SQL Injection Auth Bypass + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Remote File Inclusion Vulnerable code in container.php ----------------------------------------------------------- ?php...
acute control panel 1.0.0 - SQL Injection Remote File Inclusion
acute control panel 1.0.0 - SQL Injection Remote File Inclusion + Acute Control Panel 1.0.0 RFI/SQL Injection Auth Bypass + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Remote File Inclusion Vulnerable code in container.php...
ExpressionEngine Cross Site Scripting
nGenuity Information Services - Security Advisory Advisory ID: NGENUITY-2009-003 - ExpressionEngine Persistent Cross-Site Scripting Application: ExpressionEngine 1.6.4 possibly earlier-1.6.6 Vendor: EllisLab, INC Vendor website: http://www.expressionengine.com Author: Adam Baldwin...