CVE-2009-1787

Multiple SQL injection vulnerabilities in PHP Dir Submit aka WebsiteSubmitter and Submitter Script allow remote attackers to bypass authentication and gain administrative access via the 1 username and 2 password parameters...

Sql injection

Multiple SQL injection vulnerabilities in PHP Dir Submit aka WebsiteSubmitter and Submitter Script allow remote attackers to bypass authentication and gain administrative access via the 1 username and 2 password parameters...

CVE-2009-1787

Multiple SQL injection vulnerabilities in PHP Dir Submit aka WebsiteSubmitter and Submitter Script allow remote attackers to bypass authentication and gain administrative access via the 1 username and 2 password parameters...

PHP Dir Submit (Auth Bypass) SQL Injection Vulnerability

No description provided by source. -------------------------AllaH AkbaR------------------------------- PHP Dir Submit Auth Bypass Remote Sql Injection --------------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected]...

PHP Dir Submit SQL Injection

-------------------------AllaH AkbaR------------------------------- PHP Dir Submit Auth Bypass Remote Sql Injection --------------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected] Site:http://www.snakespc.com/sc/index.ph...

PHP Dir Submit - Authentication Bypass

PHP Dir Submit - Authentication Bypass -------------------------AllaH AkbaR------------------------------- PHP Dir Submit Auth Bypass Remote Sql Injection --------------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected]...

PHP Dir Submit (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== PHP Dir Submit Auth Bypass SQL Injection Vulnerability ========================================================...

PHP Dir Submit - Authentication Bypass

-------------------------AllaH AkbaR------------------------------- PHP Dir Submit Auth Bypass Remote Sql Injection --------------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected] Site:http://www.snakespc.com/sc/index.ph...

projectCMS 1.1b - Multiple Vulnerabilities

projectCMS 1.1b - Multiple Vulnerabilities || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

eLitius 1.0 Remote Command Execution Exploit

Exploit for unknown platform in category web applications ============================================ eLitius 1.0 Remote Command Execution Exploit ============================================ ============================================================================== eLitius v1.0 Remote Comma...

projectCMS 1.1b - Multiple Vulnerabilities

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | MULTPLE REMO...

ProjectCMS 1.1b Multiple Remote Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ----------------------------------...

PT-2009-2014 · Simple Machines · Simple Machines Forum

Name of the Vulnerable Software and Affected Versions: Simple Machines Forum SMF version 1.1.4 Description: The issue allows remote attackers to potentially execute arbitrary PHP code. This is achieved via a URL in the settingsdefault theme dir parameter to "Sources/Subs-Graphics.php" and...

Fedora Update for mediawiki FEDORA-2007-2189

Check for the Version of mediawiki OpenVAS Vulnerability Test Fedora Update for mediawiki FEDORA-2007-2189 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

CVE-2008-5994

Cross-site scripting XSS vulnerability in index.php in Check Point Connectra NGX R62 HFA01 allows remote attackers to inject arbitrary web script or HTML via the dir parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

System: plain text passwords stored in debug log

Red Hat Certificate System 7.2 stores passwords in cleartext in the UserDirEnrollment log, the RA wizard installer log, and unspecified other debug log files, and uses weak permissions for these files, which allows local users to discover passwords by reading the files...

OpenBSD/x86 - Load Kernel Module (/tmp/o.o) Shellcode (66 bytes)

OpenBSD/x86 - Load Kernel Module /tmp/o.o Shellcode 66 bytes. Shellcode exploit for OpenBSDx86 platform / The modload shellcode loads /tmp/o.o module very usefull if you have rootkit as kernel module in the /tmp dir and you can easily change the path directly in the code Size 66 bytes OS OpenBSD...

OpenBSD/x86 - setuid(0) + Load Kernel Module (/tmp/o.o) Shellcode (74 bytes)

OpenBSD/x86 - setuid0 + Load Kernel Module /tmp/o.o Shellcode 74 bytes. Shellcode exploit for OpenBSDx86 platform / The modload shellcode setuid0 loads /tmp/o.o module very usefull if you have rootkit as kernel module in the /tmp dir Size 74 bytes OS OpenBSD /rootteam/dev0id rootteam.void.ru...

PHP Weather 2.2.2 LFI / XSS

Lfi/xss script: phpweather-2.2.2 download from:http://downloads.sourceforge.net/phpweather/phpweather-2.2.2.zip?modtime=1087430400&bigmirror=0 vul: /test.php line 48: requirePHPWEATHERBASEDIR . "/output/pwtext$language.php"; xpl: www.site.com/path/test.php?metar=&language=Lfi%00...

Remote file inclusion

PHP remote file inclusion vulnerability in layout/default/params.php in Boonex Orca 2.0 and 2.0.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the gConfdirlayouts parameter...