362 matches found
GeekLog 1.7.0 (fckeditor) Arbitrary File Upload Vulnerability
No description provided by source. db 88 88 ,ad8888ba, d88b 88 88 d8' 8b d8'8b 88 88 d8' d8' 8b 88aaaaaaaa88 88 d8YaaaaY8b 8888 88 88888 d88b 88 88 Y8, 88 d8' 8b 88 88 Y8a. .a88 d8' 8b 88 88 Y88888P Exploit Title: Geeklog Date: 18-10-2010 Author: Kubanezi AHG Software Link: http://www.geeklog.net...
Geeklog 1.3.5 HTML Attribute Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5270/info A cross site scripting vulnerability has been reported for Geeklog. Reportedly, Geeklog does not properly sanitize user supplied input before being included when posting comments or writing stories. Geeklog make...
GeekLog <= 1.5.0 - Remote Arbitrary File Upload Exploit
No description provided by source. !/usr/bin/perl use warnings; use strict; use LWP::UserAgent; use HTTP::Request::Common; print INTRO; +++++++++++++++++++++++++++++++++++++++++++++++++++++ + GeekLog = 1.5.0 Remote Arbitrary File Upload + + + + Discovered && Coded By: t0pP8uZz + + + + 0day?!?Most...
Geeklog <= 1.5.2 - savepreferences()/*blocks[] SQL Injection Exploit
No description provided by source. ?php / Geeklog = 1.5.2 savepreferences/blocks remote sql injection exploit by Nine:Situations:Group::bookoo our site: http://retrogod.altervista.org/ software site: http://www.geeklog.net/ PHP and MySQL version independent vulnerability, see usersettings.php nea...
Geeklog 1.3.8 Forgot Password SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8849/info An SQL injection vulnerability has been reported in the Geeklog forgot password feature introduced in Geeklog 1.3.8. Due to insufficient sanitization of user-supplied input, it is possible for remote attacks to...
GeekLog <= 1.4.0sr3 f(u)ckeditor - Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Geeklog = 1.4.0sr3 'fuckeditor' remote commands execution\n; echo by rgod [email protected]\n; echo site: http://retrogod.altervista.org\n; //works regardless of any php.ini settings, //fckeditor very old 'mcpuk'...
Geeklog <= 1.6.0sr1 Remote Arbitrary File Upload Vulnerability
No description provided by source. ============================================================================== Geeklog = v1.6.0sr1 - Remote Arbitrary File Upload Software Site: http://www.geeklog.net Dork: By Geeklog Created this page in +seconds +powered inurl:publichtml...
Geeklog 1.3.7 Homepage User Field HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6604/info Geeklog is prone to HTML injection attacks. The user account 'Homepage' field is not sufficiently sanitized of HTML and script code. As a result, a malicious user may inject malicious HTML and script code into...
Geeklog 1.3.5 Calendar Event Form Script Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4974/info Geeklog does not sufficiently sanitize script code from form fields, making it prone to script injection attacks. Attacker-supplied script code may potentially end up in webpages generated by Geeklog and will...
GeekLog 1.x - (error.log) Remote Commands Execution Exploit (gpc = Off)
No description provided by source. !/usr/bin/perl -w use IO::Socket; print \r\n; print | Geeklog 1. remote commands execution |\r\n; print | By rgod rgodATautisticiDOTorg |\r\n; print | site: http://retrogod.altervista.org |\r\n; print | |\r\n; print \r\n; print | - this works against...
Geeklog 1.3.x Authentication SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7742/info Geeklog is reported to be prone to SQL injection attacks during authentication. This is due to insufficient sanitization of cookie values, which could permit an attacker to inject SQL code. This issue could be...
Geeklog <= 1.5.2 SEC_authenticate() SQL Injection Exploit
No description provided by source. ?php / Geeklog =1.5.2 SECauthenticate/PHPAUTHUSER sql injection exploit by Nine:Situations:Group::bookoo our site: http://retrogod.altervista.org/ software site: http://www.geeklog.net/ credit goes to rgod, bug found more than a year ago working against PHP = 5....
Geeklog <= 1.5.2 'usersettings.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34553/info Geeklog is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
Geeklog 1.3.x XSS
No description provided by source. source: http://www.securityfocus.com/bid/8718/info Geeklog is prone to multiple vulnerabilities, including cross-site scripting and SQL injection issues. Exploitation of these issues could permit unauthorized access to user accounts and sensitive information. So...
GeekLog 1.3.x HTML Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/8792/info Geeklog has been reported prone to multiple HTML Injection vulnerabilities. The issues have been reported to present themselves due to a lack of sufficient sanitization performed on data that is parsed from foru...
GeekLog <= 1.4.0sr3 (_CONF[path]) Remote File Include Vulnerabilities
No description provided by source. --------------------------------------------------------------------------- GeekLog = 1.4.0 CONFpath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Google d0rk: powered by geeklog Discovered By...
GeekLog 1.3.8 (filemgmt) - SQL Injection Vulnerability
No description provided by source. GeekLog v1.3.8 filemgmt SQL Injection Vulnerability Author : Gamoscu Homepage : http://www.1923turk.com Blog :http://gamoscu.wordpress.com/ Script : http://www.geeklog.net/filemgmt/viewcat.php?cid=8 Download:http://www.geeklog.net/filemgmt/viewcat.php?cid=8...
Geeklog 1.3.7 Profiles.PHP Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/6601/info The Geeklog 'profiles.php' script is prone to multiple cross-site scripting vulnerabilities. This issue is due to insufficient sanitization of input submitted in URI parameters. As a result, an attacker may crea...
Geeklog 1.3.x SQL injection
No description provided by source. source: http://www.securityfocus.com/bid/8718/info Geeklog is prone to multiple vulnerabilities, including cross-site scripting and SQL injection issues. Exploitation of these issues could permit unauthorized access to user accounts and sensitive information. So...
geeklog 2.1.0b1 Local File Include Vulnerability
Exploit for php platform in category web applications ----------exploit Debut Local File Include Vulnerability ----------Author Info Name : JIKO ----------Script Info Site : https://www.geeklog.net/ Download : https://www.geeklog.net/filemgmt/uploaddir/geeklog-2.1.0b1.tar.gz Name : geeklog-2.1.0b...