Arab Portal 2.2 (Auth Bypass) Remote SQL Injection Vulnerability

No description provided by source. Script Name : Arab portal 2.2 Remote Auth SQL Bypass Vulnerabilitiy Script home : http://www.arab-portal.info/arabportal22.zip Exploit risk level : High Found By : RoMaNcYxHaCkEr RXH Written By : Sniper Code S.C.T - 443 Our home : WwW.Sec-Code.CoM Security - Cod...

Traidnt Up 2.0 - Cookie Authentication Bypass

|| || | || o,7 || . o7 || q||| ow, : / / . =By: Qabandi =Email: iqaahotmail.fr From Kuwait PEACE =Vuln: Traidnt Up version 2.0 Auth Bypass / Cookie SQL Injection Vulnerability =INFO: http://traidnt.net/vb/showthread.php?t=943260 =BUY: ---- =DORK: ----...

Million Dollar Text Links 1.0 - id SQL Injection

Million Dollar Text Links 1.0 - id SQL Injection || || | || o,7 || . o7 || q||| ow, : / / . =By: Qabandi =Email: iqaahotmail.fr From Kuwait PEACE =Vuln: Million Dollar Text Links = 1.0 SQL injection =INFO: http://www.cmsnx.com/product.demo.php?id=12 =BUY:...

RoomPHPlanning 1.6 Multiple Remote Vulnerabilities

No description provided by source. o o o O O ooooooo 0 oooo OOOo o o o O O O 0 0 0 o o o o o O O O 0 0000 oooo ooooo o o oooooo o o O O O 0 0 0 0 0 0 o o O O o o O OO 0 0 0 oooo ooooo oooo OOOOOO oooooo O O O 0 0 0 0 0 0oooo0 + RoomPHPlanning v1.6 Multiple Remote Exploit Vulnerabilities +...

RoomPHPlanning 1.6 SQL Injection / Bypass / Insecure Cookie

o o o O O ooooooo 0 oooo OOOo o o o O O O 0 0 0 o o o o o O O O 0 0000 oooo ooooo o o oooooo o o O O O 0 0 0 0 0 0 o o O O o o O OO 0 0 0 oooo ooooo oooo OOOOOO oooooo O O O 0 0 0 0 0 0oooo0 + RoomPHPlanning v1.6 Multiple Remote Exploit Vulnerabilities + Discovered By : ThE g0bL!N + Greetz : All ...

RoomPHPlanning 1.6 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================== RoomPHPlanning 1.6 Multiple Remote Vulnerabilities ================================================== o o o O O ooooooo 0 oooo OOOo o o o O O O 0 0 0 o o o o o O O O 0 0000 oooo ooooo o o...

roomphplanning 1.6 - Multiple Vulnerabilities

roomphplanning 1.6 - Multiple Vulnerabilities o o o O O ooooooo 0 oooo OOOo o o o O O O 0 0 0 o o o o o O O O 0 0000 oooo ooooo o o oooooo o o O O O 0 0 0 0 0 0 o o O O o o O OO 0 0 0 oooo ooooo oooo OOOOOO oooooo O O O 0 0 0 0 0 0oooo0 + RoomPHPlanning v1.6 Multiple Remote Exploit Vulnerabilitie...

roomphplanning 1.6 - Multiple Vulnerabilities

o o o O O ooooooo 0 oooo OOOo o o o O O O 0 0 0 o o o o o O O O 0 0000 oooo ooooo o o oooooo o o O O O 0 0 0 0 0 0 o o O O o o O OO 0 0 0 oooo ooooo oooo OOOOOO oooooo O O O 0 0 0 0 0 0oooo0 + RoomPHPlanning v1.6 Multiple Remote Exploit Vulnerabilities + Discovered By : ThE g0bL!N + Greetz : All ...

MiniTwitter 0.3 Beta SQL Injection

------------------------------------------------------------ MULTIPLE REMOTE VULNERABILITIES --MiniTwitter ------------------------------------------------------------ CMS INFORMATION: --WEB: http://mt.bioscriptsdb.com/ --DOWNLOAD: http://sourceforge.net/projects/minitt/ --DEMO:...

ZaoCMS File Disclosure

-------------------------------------------------------------- ZaoCMS Remote File Disclosure Vulnerability --------------------------------------------------------------- Founder :ThE g0bL!N Home:http://www.zaocms.com/ Software : ZaoCMS Note: The OperatIon Worked By Deleting Your Cookies From The...

ZaoCMS - download.php Remote File Disclosure

ZaoCMS - download.php Remote File Disclosure -------------------------------------------------------------- ZaoCMS Remote File Disclosure Vulnerability --------------------------------------------------------------- Founder :ThE g0bL!N Home:http://www.zaocms.com/ Software : ZaoCMS Note: The...

CORE-2009-0109 - Multiple XSS in Sun Communications Express

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Multiple XSS in Sun Communications Express 1. Advisory Information Title: Multiple XSS in Sun Communications Express Advisory ID: CORE-2009-0109 Advisory URL:...

CSRF attack message thrown when JSESSIONID is changed

Symptoms: Anything that is using DWR will fail. Meaning: page editor is fully or partially unusable and it may display the text "Draft saving timed out" on top of the text area. At the same time, the following error messages are printed in the Confluence log: noformat 2009-05-15 08:06:36,011 ERRO...

Dokeos Multiple Remote Input Validation Vulnerabilities

Dokeos is prone to multiple input-validation vulnerabilities, including SQL-injection, HTML-injection, cross-site scripting, and cross-site request-forgery issues. Attackers can exploit these issues to execute arbitrary script code in the context of the webserver, compromise the application, obta...

(GET var 'member') BLIND SQL INJECTION EXPLOIT --FAMILY CONNECTIONS <= v1.9 -->

!/usr/bin/perl -------------------------------------------------------------------------------- GET var 'member' BLIND SQL INJECTION EXPLOIT --FAMILY CONNECTIONS = v1.9 -- -------------------------------------------------------------------------------- CMS INFORMATION: --WEB:...

CVE-2008-6804

Tribiq CMS 5.0.9a beta has an authentication bypass vulnerability where remote attackers can gain admin access by manipulating cookies COOKIE_LAST_ADMIN_USER and COOKIE_LAST_ADMIN_LANG. Root cause details are not fully described in the provided documents. Impact is partial confidentiality/integri...

CVE-2008-6804

Tribiq CMS 5.0.9a beta allows remote attackers to bypass authentication and gain administrative access by setting the COOKIELASTADMINUSER and COOKIELASTADMINLANG cookies. NOTE: a third party reports that the vendor disputes the existence of this issue...

PT-2009-2273 · Tribiq · Tribiq Cms

Name of the Vulnerable Software and Affected Versions: Tribiq CMS version 5.0.9a beta Description: The issue allows remote attackers to bypass authentication and gain administrative access. This is achieved by setting the COOKIE LAST ADMIN USER and COOKIE LAST ADMIN LANG cookies. Recommendations:...

Google Cross Site Scripting

Universal XSS Vulnerability in all Google Services can compromise your personal information May 8th, 2009 Vulnerability Reported: 04/18/2009 9.33 pm Google’s Response: 04/18/2009 10.19 pm Wow! that was super fast for Saturday : Vulnerability Fixed: 05/05/2009 7.05 pm Change Propogated: 05/07/2009...

CVE-2009-1587

index.php in PHP Site Lock 2.0 allows remote attackers to bypass authentication and obtain administrative access by setting the loginid, groupid, loginname, userid, and usertype cookies to certain values...