crownweb - 'page.cfm' SQL Injection

crownweb page.cfm Sql Injection Vulnerability =================================================================== .:. Email : [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : crownweb .:. Language : Cfm .:. Script Download: http://www.crownweb.net/ .:. Bug Type...

crownweb (page.cfm) Sql Injection Vulnerability

Exploit for unknown platform in category web applications =============================================== crownweb page.cfm Sql Injection Vulnerability =============================================== .:. Script : crownweb .:. Language : Cfm .:. Script Download: http://www.crownweb.net/ .:. Bug Ty...

Comtrend ADSL Router Cross Site Scripting

Exploit Title: XSS in cpanel of Comtrend ADSL Router Date: 23-1-2010 Author: Yoyahack Software: Comtrend Version: CT-507IT / XSS in the control panel Comtrend ADSL Router / / Autor: Yoyahack Site: undersecurity.net / Exploit:...

Command line under a new account method-vulnerability warning-the black bar safety net

Today research about the user control panel file nusrmgr. cpl, the discovery call is to the Shell. Users to add users, it also simultaneously calls the wscript. shell, Shell. Application, Shell. LocalMachine these three components. But added to the user while this one Shell. Users is sufficient. ...

SA-CONTRIB-2010-007 - Control Panel - Cross Site Scripting

The Control Panel module enables users to add a new graphical control panel page. The module does not sanitize some of the user-supplied data before displaying it, leading to a Cross Site Scripting XSS vulnerability. Only users with the 'administer blocks' permission are able to exploit this...

RoseOnlineCMS 3 B1 - Remote Authentication Bypass

RoseOnlineCMS 3 B1 - Remote Authentication Bypass '/ -.- --------------------oOO------OOo------------------- | RoseOnlineCMS ! Download: http://sourceforge.net/projects/rosecms/files/ ! Date: 16.01.2010 ! Remote: yes ! Code : " method="post" Username: Password: ?php ifisset$POST'submit' //...

On plesk virtual host to mention the right-vulnerability warning-the black bar safety net

This virtual machine in a foreign country relatively popular. Safety performance is also very high, where the next record to mention the right methods. 1. mysql adminthe original rootand the default passwordsetupdidn't change,by mysql to provide the right 2. Parallels Plesk Control Panel,in 8 8 8...

Milonic News SQL Injection

Exploit Title: Milonic News viewnews SQL Injection Vulnerability Date: 5/1/2010 Author: Err0R Software Link: N/A Version: N/A Tested on: CVE : Code : 11010 =============================================================================...

Milonic News (viewnews) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================== Milonic News viewnews SQL Injection Vulnerability =================================================== ----------------------------------------------------------------------------- + dork ...

Milonic News - 'viewnews' SQL Injection

============================================================================= +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ----------------------------------------------------------------------------- + Title : Milonic News viewnews SQL Injection Vulnerability +...

Simple Portal V2.0 <= Auth Bypass

Exploit for unknown platform in category web applications ================================= Simple Portal V2.0 = Auth Bypass ================================= ? Script: Simple Portal V2.0 ? Language: PHP ? Vendor http://www.simpleportal.net/ === Exploit Bypass SQL === Expl0it: Add Path/Panel Y0ur...

Chipmunk Board Script 1.x Multiple XSRF Vulnerabilities

No description provided by source. ------------------------------------------------------------------------------------------------- Title: Chipmunk Board Script 1.x Multiple XSRF Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.comhttp://gmail.com Date: 11. December 2009...

Chipmunk Board Script 1.x - Multiple Cross-Site Request Forgery Vulnerabilities

Chipmunk Board Script 1.x - Multiple Cross-Site Request Forgery Vulnerabilities ------------------------------------------------------------------------------------------------- Title: Chipmunk Board Script 1.x Multiple XSRF Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.co...

Design/Logic Flaw

Harold Bakker's NewsScript HB-NS 1.3 allows remote attackers to obtain access to the admin control panel via a direct request to admin.php...

CVE-2009-4262

HB-NS NewsScript 1.3 is affected by CVE-2009-4262, where remote attackers can obtain access to the admin control panel by making a direct request to admin.php. The vulnerability is described in multiple sources (NVD) with a CVSS v2 base score of 7.5 (HIGH) and an attack vector of NETWORK, requiri...

CVE-2009-4222

phpBazar 2.1.1fix and earlier does not require administrative authentication for admin/admin.php, which allows remote attackers to obtain access to the admin control panel via a direct request...

Design/Logic Flaw

phpBazar 2.1.1fix and earlier does not require administrative authentication for admin/admin.php, which allows remote attackers to obtain access to the admin control panel via a direct request...

CVE-2009-4222

phpBazar 2.1.1fix and earlier does not require administrative authentication for admin/admin.php, which allows remote attackers to obtain access to the admin control panel via a direct request...

Invision Power Board 2.3.6/3.0.4 - Local File Inclusion / SQL Injection

============================================= - Severity: Moderately High ============================================= I. VULNERABILITY ------------------------- Invision Power Board = 3.0.4 Local PHP File Inclusion and SQL Injection Invision Power Board = 2.3.6 SQL Injection II. BACKGROUND...

phpBazar 2.1.1fix Remote Administration-Panel Vulnerability

Exploit for unknown platform in category web applications =========================================================== phpBazar-2.1.1fix Remote Administration-Panel Vulnerability =========================================================== =======================================================...