CVE-2009-2569

Multiple cross-site scripting XSS vulnerabilities in Verlihub Control Panel VHCP 1.7e allow remote attackers to inject arbitrary web script or HTML via 1 the nick parameter in a login action to index.php or 2 the URI in a news request to index.html...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Verlihub Control Panel VHCP 1.7e allow remote attackers to inject arbitrary web script or HTML via 1 the nick parameter in a login action to index.php or 2 the URI in a news request to index.html...

CVE-2009-2569

Multiple cross-site scripting XSS vulnerabilities in Verlihub Control Panel VHCP 1.7e allow remote attackers to inject arbitrary web script or HTML via 1 the nick parameter in a login action to index.php or 2 the URI in a news request to index.html...

CVE-2009-2569

Verlihub Control Panel (VHCP) 1.7e contains cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary script/HTML via (1) the nick parameter in a login action to index.php and (2) the URI in a news request to index.html. The connected documents confirm these two v...

Netrix CMS 1.0 - Authentication Bypass

Netrix CMS 1.0 - Authentication Bypass ======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script :Netrix CMS 1.0 Auth Bypass Remote SQL Injection Vulnerability + Found by :...

Netrix CMS 1.0 Authentication Bypass Vulnerability

No description provided by source. ======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script :Netrix CMS 1.0 Auth Bypass Remote SQL Injection Vulnerability + Found by : Mr.tro0oq...

Netrix CMS 1.0 - Authentication Bypass

======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script :Netrix CMS 1.0 Auth Bypass Remote SQL Injection Vulnerability + Found by : Mr.tro0oqy + Script site : www.netrix.hu +...

Netrix CMS 1.0 SQL Injection

======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script :Netrix CMS 1.0 Auth Bypass Remote SQL Injection Vulnerability + Found by : Mr.tro0oqy + Script site : www.netrix.hu +...

CVE-2008-6859

Xigla Software Absolute Control Panel XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

CVE-2008-6859

Consolidated data from connected documents confirms CVE-2008-6859 affects Xigla Software Absolute Control Panel XE 1.5. The vulnerability allows remote attackers to bypass authentication and obtain administrative access by setting a specific cookie value. Exploitation is feasible over network wit...

CVE-2008-6859

Xigla Software Absolute Control Panel XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

Nwahy Dir 2.1 Change Admin Password

......................"; else /code - Works On : 1. Nwahy Articles v1 2. Nwahy scripts v1 3. Nwahy book v1 - Note : Path to Control Panel "/admincp/" . / errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; function Usage print "\n\n"; print...

Nwahy Dir 2.1 Arbitrary Change Admin Password Exploit

Exploit for unknown platform in category web applications ===================================================== Nwahy Dir 2.1 Arbitrary Change Admin Password Exploit ===================================================== ......................"; else /code - Works On : 1. Nwahy Articles v1 2. Nwah...

CVE-2009-2168

cpanel/login.php in EgyPlus 7ammel aka 7ml 1.0.1 and earlier sends a redirect to the web browser but does not exit when the supplied credentials are incorrect, which allows remote attackers to bypass authentication by providing arbitrary username and password parameters...

Arab Portal 2.2 SQL Injection

Script Name : Arab portal 2.2 Remote Auth SQL Bypass Vulnerabilitiy Script home : http://www.arab-portal.info/arabportal22.zip Exploit risk level : High Found By : RoMaNcYxHaCkEr RXH Written By : Sniper Code S.C.T - 443 Our home : WwW.Sec-Code.CoM Security - Codes TeaM...

XSS in user links

A user with username "alert"foo" that is linked to via \username markup results in script being executed. Curiously, viewing the space homepage of that user results in a blank page. This of course is prevented for public signup, but if the user gets created via other means, i.e. external user...

XSS in user links

A user with username "alert"foo" that is linked to via \username markup results in script being executed. Curiously, viewing the space homepage of that user results in a blank page. This of course is prevented for public signup, but if the user gets created via other means, i.e. external user...

XSS in user links

A user with username "alert"foo" that is linked to via \username markup results in script being executed. Curiously, viewing the space homepage of that user results in a blank page. This of course is prevented for public signup, but if the user gets created via other means, i.e. external user...

Arab Portal 2.2 (Auth Bypass) Remote SQL Injection Vulnerability

No description provided by source. Script Name : Arab portal 2.2 Remote Auth SQL Bypass Vulnerabilitiy Script home : http://www.arab-portal.info/arabportal22.zip Exploit risk level : High Found By : RoMaNcYxHaCkEr RXH Written By : Sniper Code S.C.T - 443 Our home : WwW.Sec-Code.CoM Security - Cod...

Arab Portal 2.2 (Auth Bypass) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Arab Portal 2.2 Auth Bypass Remote SQL Injection Vulnerability ================================================================ Script Name : Arab portal 2.2 Remote Auth SQL...