CVE-2008-4604

CVE-2008-4604 affects Easy CafeEngine 1.1. Affected component: index.php. Vulnerability: SQL injection in the itemid parameter in index.php, enabling remote execution of arbitrary SQL commands. Root cause: improper sanitization of input leading to SQL injection. Impact as stated by sources: parti...

CVE-2008-4604

SQL injection vulnerability in index.php in Easy CafeEngine 1.1 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

ped-disclose.txt

::::::::::::::::::::R3AL.RU:::::::::::::::::::: PHP Easy Downloader = 1.5 Remote File Download Author: LMaster Greetz: Pogozheva Irina Borisovna and r3al.ru Download: http://www.hasemithut.de/downloads/index.php Exploit: http://www.target.com/phpeasydownloader/index.php?file=index.php...

PHP Easy Downloader 1.5 (file) File Disclosure Vulnerability

No description provided by source. ::::::::::::::::::::R3AL.RU:::::::::::::::::::: PHP Easy Downloader = 1.5 Remote File Download Author: LMaster Greetz: Pogozheva Irina Borisovna and r3al.ru Download: http://www.hasemithut.de/downloads/index.php Exploit:...

CVE-2008-4604: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Easy CafeEngine 1.1 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

cafeengine-sql.txt

| | | | | / / / / / // / / / / // || || |/ // // \ | | | | ^ / / / // / // / / / // // || | | v // / / O / | | | | / \ / / / / / / / / /// // /| || | | \ / / / | | | |/ / / / / / / / / / / / / / // /| || | | |\ \ / / /\ \ | | | / /\ / // // // // // ///||||| \/// \ | | | / / | | | / | | | /...

CafeEngine - Multiple SQL Injections

CafeEngine - Multiple SQL Injections | | | | | / / / / / // / / / / // || || |/ // // \ | | | | ^ / / / // / // / / / // // || | | v // / / O / | | | | / \ / / / / / / / / /// // /| || | | \ / / / | | | |/ / / / / / / / / / / / / / // /| || | | |\ \ / / /\ \ | | | / /\ / // // // // // ///|||||...

PHP Easy Downloader 1.5 - file File Disclosure

PHP Easy Downloader 1.5 - file File Disclosure ::::::::::::::::::::R3AL.RU:::::::::::::::::::: PHP Easy Downloader = 1.5 Remote File Download Author: LMaster Greetz: Pogozheva Irina Borisovna and r3al.ru Download: http://www.hasemithut.de/downloads/index.php Exploit:...

PHP Easy Downloader 1.5 - 'file' File Disclosure

::::::::::::::::::::R3AL.RU:::::::::::::::::::: PHP Easy Downloader = 1.5 Remote File Download Author: LMaster Greetz: Pogozheva Irina Borisovna and r3al.ru Download: http://www.hasemithut.de/downloads/index.php Exploit: http://www.target.com/phpeasydownloader/index.php?file=index.php milw0rm.com...

CafeEngine Multiple Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ======================================================== CafeEngine Multiple Remote SQL Injection Vulnerabilities ======================================================== | | | | | / / / / / // / / / / // || || |/ // // \ | | | | ^ / / / /...

PHP Easy Downloader 1.5 (file) File Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================ PHP Easy Downloader 1.5 file File Disclosure Vulnerability ============================================================ ::::::::::::::::::::R3AL.RU:::::::::::::::::::: PHP Easy...

xmeasy560-dos.txt

print "--------------------------------------------------------------" print " XM Easy Personal FTP Server 5.6.0 Remote Denial of Service" print " url: http://www.dxm2008.com/" print " author: shinnai" print " mail: shinnaiatautisticidotorg" print " site: http://www.shinnai.net" print...

XM Easy Personal FTP Server 5.6.0 - Remote Denial of Service

XM Easy Personal FTP Server 5.6.0 - Remote Denial of Service print "--------------------------------------------------------------" print " XM Easy Personal FTP Server 5.6.0 Remote Denial of Service" print " url: http://www.dxm2008.com/" print " author: shinnai" print " mail:...

XM Easy Personal FTP Server 5.6.0 Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ================================================================== XM Easy Personal FTP Server 5.6.0 Remote Denial of Service Exploit ================================================================== print...

ScriptsEz Easy Image Downloader Local File Download Vulnerability

Exploit for unknown platform in category web applications ================================================================= ScriptsEz Easy Image Downloader Local File Download Vulnerability ================================================================= ScriptsEz Easy Image Downloader Local Fil...

Scriptsez Easy Image Downloader - Local File Download

ScriptsEz Easy Image Downloader Local File Download Vulnerability url: http://www.scriptsez.net/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk. Author will be not...

CVE-2008-4167

useradmin.php in Easy Photo Gallery aka Ezphotogallery 2.1 does not require administrative authentication, which allows remote attackers to 1 add or 2 remove an Administrator account...

CVE-2008-4167

CVE-2008-4167 affects Easy Photo Gallery (Ezphotogallery) 2.1. The issue: useradmin.php does not require administrative authentication, allowing remote attackers to (1) add or (2) remove an Administrator account. The root cause, per the description, is a lack of authentication for admin account m...

CVE-2008-4167

useradmin.php in Easy Photo Gallery aka Ezphotogallery 2.1 does not require administrative authentication, which allows remote attackers to 1 add or 2 remove an Administrator account...

CVE-2008-4167: Improper Authentication

useradmin.php in Easy Photo Gallery aka Ezphotogallery 2.1 does not require administrative authentication, which allows remote attackers to 1 add or 2 remove an Administrator account...