Anata CMS 1.0b5 (change.php) Arbitrary Add Admin Vulnerability

Exploit for unknown platform in category web applications ============================================================== Anata CMS 1.0b5 change.php Arbitrary Add Admin Vulnerability ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||...

Exploit for vBulletin "obscure" XSS (3.7.1 & 3.6.10)

====================================================================== Advisory : Exploit for vBulletin "obscure" XSS Release Date : June 13th 2008 Application : vBulletin Version : vBulletin 3.7.1 and lower, vBulletin 3.6.10 and lower Platform : PHP Vendor URL : http://www.vbulletin.com/ Authors...

vbulletin-xss.txt

====================================================================== Advisory : Exploit for vBulletin "obscure" XSS Release Date : June 13th 2008 Application : vBulletin Version : vBulletin 3.7.1 and lower, vBulletin 3.6.10 and lower Platform : PHP Vendor URL : http://www.vbulletin.com/ Authors...

IPTBB 0.5.6 Arbitrary Add-Admin Exploit

No description provided by source. ========================================= IPTBB 0.5.6 Arbitrary Add-Admin Exploit ========================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

PHPEasyData 1.5.4 - adminlogin.php?Username SQL Injection

PHPEasyData 1.5.4 - adminlogin.php?Username SQL Injection source: https://www.securityfocus.com/bid/29659/info PHPEasyData is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage the cross-site...

IPTBB 0.5.6 Arbitrary Add-Admin Exploit

Exploit for unknown platform in category web applications ======================================= IPTBB 0.5.6 Arbitrary Add-Admin Exploit ======================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

absolute-screwups.txt

www.BugReport.ir AmnPardaz Security Research Team Title: Xigla Multiple Products - Multiple Vulnerabilities Vendor: http://www.xigla.com/ Exploit: N/A Impact: Medium Fix: N/A Original Advisory: http://bugreport.ir/index.php?/41 1. Description: Xigla company has several web based products From...

iptbb-admin.txt

========================================= IPTBB 0.5.6 Arbitrary Add-Admin Exploit ========================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | / XXXXXX /| / /...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Starsgames Control Panel 4.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the st parameter...

CVE-2008-2458

Cross-site scripting XSS vulnerability in index.php in Starsgames Control Panel 4.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the st parameter...

CVE-2008-2458

CVE-2008-2458 is a Cross-site Scripting (XSS) vulnerability in the Starsgames Control Panel up to version 4.6.2, exploitable via the st parameter in index.php. The underlying issue is an input handling flaw that allows remote attackers to inject arbitrary HTML/script. Impact is described as parti...

starsgames-xss.txt

========================================================== Starsgames Control Panel XSS =Example= Alert: - http://target/index.php?showtopic=18&st=alert/xss/ Iframe & Fake Login: - http://target/index.php?showtopic=18&st= Let's Fun... Greetz: ZeQ3uL,BAD $ectors, Snapter, Conan, Win7dos, JabAv0C...

Starsgames Control Panel <= 4.6.2 Remote XSS Vulnerability

========================================================== Starsgames Control Panel = 4.6.2 Remote XSS Vulnerability ========================================================== AUTHOR : CWH Underground DATE : 19 May 2008 SITE : www.citec.us APPLICATION : Starsgames Control Panel VERSION : = 4.6.2...

CVE-2008-2023

Multiple SQL injection vulnerabilities in PD9 Software MegaBBS 2.2 allow remote attackers to execute arbitrary SQL commands via the 1 invisible and 2 timeoffset parameters to profile/controlpanel.asp and the 3 attachmentid parameter to forums/attach-file.asp...

MegaBBS Forum 2.2 (SQL/XSS) Multiple Remote Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: MegaBBS Forum Multiple Vulnerabilities. Vendor: http://www.pd9soft.com/ Vulnerable Version: 2.2 Exploit: Available Impact: Medium Fix: N/A Original Advisory: http://bugreport.ir/index.php?/37 1. Descriptio...

Quick Classifieds 1.0 - 'controlpannel/color_help.php3?DOCUMENT_ROOT' Remote File Inclusion

source: https://www.securityfocus.com/bid/28417/info Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; othe...

Horde Webmail file inclusion proof of concept & patch.

Horde 3.1.6 arbitrary file inclusion vulnerability, proof of concept & patch. A severe security vulnerability affects any unix distribution running version 3.1.6 of the Horde webmail client included in most popular webhosting control panels. All previous versions are also affected and it is...

Thecus N5200Pro NAS Server Control Panel RFI Vulnerability

No description provided by source. Thecus N5200Pro NAS Server Control Panel Remote File nclude Author : CrackersChild Mail : [email protected] Bug in : usrgetform.html ?php $htm=$REQUEST'name'; requireonce"/img/htdocs/webconfig"; requireonce"/img/www/inc/function.php"; getsysconf;...

thecus-rfi.txt

Thecus N5200Pro NAS Server Control Panel Remote File İnclude Author : CrackersChild Mail : [email protected] Bug in : usrgetform.html Exploit : www.site.com:9443/usr/usrgetform.html?name=Shelz? İnfo : http://www.thecus.com/productsover.php?cid=11&pid=8 Greetz: Str0ke...

Thecus N5200Pro NAS Server Control Panel RFI Vulnerability

Exploit for hardware platform in category remote exploits ========================================================== Thecus N5200Pro NAS Server Control Panel RFI Vulnerability ========================================================== Thecus N5200Pro NAS Server Control Panel Remote File Include...