PHP-Fusion 7.00.1 - 'messages.php' SQL Injection

\n" . " php $argv0 localhost /php-fusion/ user s3cret "SELECT database"\n". " php $argv0 localhost / user s3cret "SELECT loadfile0x2F6574632F706173737764"\n\n"; die; echo "Logging into system..."; //login to php-fusion using login and pass $logindata = send$host, array "path" =...

MauryCMS <= 0.53.2 Remote Shell Upload Exploit

No description provided by source. !/usr/bin/perl =about MauryCMS = 0.53.2 Remote Shell Upload Exploit ---------------------------------------------- by athos - stakerathotmaildotit download on http://cms.maury91.org thnx Osirys =cut use strict; use warnings; use LWP::UserAgent; my...

PHP-Fusion 7.00.1 - messages.php SQL Injection

PHP-Fusion 7.00.1 - messages.php SQL Injection \n" . " php $argv0 localhost /php-fusion/ user s3cret "SELECT database"\n". " php $argv0 localhost / user s3cret "SELECT loadfile0x2F6574632F706173737764"\n\n"; die; echo "Logging into system..."; //login to php-fusion using login and pass...

CVE-2008-5113

CVE-2008-5113 affects WordPress 2.6.3, where reliance on the REQUEST superglobal in certain dangerous situations enables remote attackers to perform delayed, persistent CSRF via crafted cookies, potentially deleting user accounts or causing denial of service. The description notes an independent ...

BandSite CMS 1.1.4 - Insecure Cookie Handling

BandSite CMS 1.1.4 - Insecure Cookie Handling + BandSite CMS 1.1.4 Insecure Cookie Handling Vulnerability + Discovered By Mountassif Moad + www.v4-team.com + Greetz : All my Freind Exploit: javascript:document.cookie = "loginauth=true; path=/"; milw0rm.com 2008-11-13...

CVE-2008-5040

Graphiks MyForum 1.3 allows remote attackers to bypass authentication and gain administrative access by setting the 1 myforumlogin and 2 myforumpass cookies to 1...

Authentication flaw

Graphiks MyForum 1.3 allows remote attackers to bypass authentication and gain administrative access by setting the 1 myforumlogin and 2 myforumpass cookies to 1...

CVE-2008-5040

Graphiks MyForum 1.3 allows remote attackers to bypass authentication and gain administrative access by setting the 1 myforumlogin and 2 myforumpass cookies to 1...

XPSHOP Shopping Mall system Cookies spoofing vulnerability-vulnerability warning-the black bar safety net

Article authors: 1 2 1 7 1 1 0 9 0 Information source: evil octal information security team www.eviloctal.com） Accidentally found this loophole..official now also don't know...I'm not elsewhere in the published Oh.. This vulnerability is bad...to the straight pull change people the administrator...

XPSHOP商城系统Cookies欺骗漏洞

No description provided by source. http://www.hackeye.com/article/5496/...

XPSHOP Shopping Mall system vulnerabilities-vulnerability warning-the black bar safety net

XPSHOP Shopping Mall system vulnerabilities Accidentally found this loophole..official now also don't know...I'm not elsewhere in the published Oh.. This vulnerability is bad...to the straight pull change people the administrator password!! A little bit wicked!!!... But for the sake of our networ...

JVN#67060882 sISAPILocation vulnerability bypasses HTTP header rewrite function

sISAPILocation, developed by an individual developer, is an ISAPI filter for IIS Internet Information Services. sISAPILocation contains a vulnerability that allows the HTTP header rewrite function to be bypassed. Impact When sISAPILocation is used to configure settings, such as to specify charact...

DZCP (deV!L_z Clanportal) 1.4.9.6 - Blind SQL Injection

DZCP deV!Lz Clanportal 1.4.9.6 - Blind SQL Injection use HTTP::Cookies; use LWP::UserAgent; my $ua = LWP::UserAgent-new cookiejar = HTTP::Cookies-new,; $ua-agent 'Mozilla/5.0 Gecko/20061206 Firefox/1.5.0.9' ; usage; print "\n"; $server = $ARGV0; $dir = $ARGV1; $username = $ARGV2; $password =...

DZCP (deV!L_z Clanportal) 1.4.9.6 - Blind SQL Injection

use HTTP::Cookies; use LWP::UserAgent; my $ua = LWP::UserAgent-new cookiejar = HTTP::Cookies-new,; $ua-agent 'Mozilla/5.0 Gecko/20061206 Firefox/1.5.0.9' ; usage; print "\n"; $server = $ARGV0; $dir = $ARGV1; $username = $ARGV2; $password = $ARGV3; if !$password die "Argh! Read teh Usage!\n"; $url...

deV!Lz Clanportal [DZCP] <= 1.4.9.6 Blind SQL Injection Exploit

No description provided by source. use HTTP::Cookies; use LWP::UserAgent; my $ua = LWP::UserAgent-new cookiejar = HTTP::Cookies-new,; $ua-agent 'Mozilla/5.0 Gecko/20061206 Firefox/1.5.0.9' ; usage; print "\n"; $server = $ARGV0; $dir = $ARGV1; $username = $ARGV2; $password = $ARGV3; if !$password...

Sambar XSS Vulnerability - Active Check

The Sambar web server comes with a set of CGIs that are prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2008 Renaud Deraison Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...

Authentication flaw

Atomic Photo Album 1.1.0 pre4 does not properly handle the apacookielogin and apacookiepassword cookies, which probably allows remote attackers to bypass authentication and gain administrative access via modified cookies...

CVE-2008-4714

Atomic Photo Album 1.1.0 pre4 does not properly handle the apacookielogin and apacookiepassword cookies, which probably allows remote attackers to bypass authentication and gain administrative access via modified cookies...

MindDezign Photo Gallery 2.2 - Arbitrary Add Admin

MindDezign Photo Gallery 2.2 - Arbitrary Add Admin !/usr/bin/perl ============================================================= MindDezign Photo 2.2 Gallery Arbitrary Add Admin Exploit ============================================================= ,--^----------,--------,-----,-------^--, |...

minddezignpg-admin.txt

!/usr/bin/perl ============================================================= MindDezign Photo 2.2 Gallery Arbitrary Add Admin Exploit ============================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground...