15 matches found
EUVD-2007-1548
Malware in sbrugna...
EUVD-2007-1547
Malware in sbrugna...
Guestbara <= 1.2 Change Admin Login and Password Exploit
No description provided by source. html titleGuestbara = 1.2 Change admin login & password exploit by Kacper/title table border=0 cellspacing=0 cellpadding=0 align='center' form method='post' action='http://127.0.0.1/guestbookpath/admin/configuration.php?action=saveconfig&zapis=ok'tr trtd...
Code injection
Direct static code injection vulnerability in admin/configuration.php in Guestbara 1.2 and earlier allows remote authenticated users to inject arbitrary PHP code into config.php via the 1 adminmail, 2 emotpatch, 3 login, 4 pass, and unspecified other parameters. NOTE: the provenance of this...
Code injection
admin/configuration.php in Guestbara 1.2 and earlier allows remote attackers to modify the e-mail, name, and password of the admin account by setting the zapis parameter to "ok" and providing modified adminmail, login, and pass parameters...
CVE-2007-1553
admin/configuration.php in Guestbara 1.2 and earlier allows remote attackers to modify the e-mail, name, and password of the admin account by setting the zapis parameter to "ok" and providing modified adminmail, login, and pass parameters...
CVE-2007-1554
Direct static code injection vulnerability in admin/configuration.php in Guestbara 1.2 and earlier allows remote authenticated users to inject arbitrary PHP code into config.php via the 1 adminmail, 2 emotpatch, 3 login, 4 pass, and unspecified other parameters. NOTE: the provenance of this...
CVE-2007-1554
CVE-2007-1554 affects Guestbara (version 1.2 and earlier) with a direct static code injection vulnerability in admin/configuration.php. The issue allows remote authenticated users to inject arbitrary PHP code into config.php by manipulating parameters (admin_mail, emotpatch, login, pass, and othe...
CVE-2007-1553
The CVE-2007-1553 issue affects Guestbara 1.2 and earlier, where admin/configuration.php accepts a crafted zapis="ok" request along with modified admin_mail, login, and pass parameters to remotely modify the admin account’s email, name, and password. This indicates an input-validation/parameter-h...
CVE-2007-1553: Undefined Security Weakness
admin/configuration.php in Guestbara 1.2 and earlier allows remote attackers to modify the e-mail, name, and password of the admin account by setting the zapis parameter to "ok" and providing modified adminmail, login, and pass parameters...
CVE-2007-1554: Undefined Security Weakness
Direct static code injection vulnerability in admin/configuration.php in Guestbara 1.2 and earlier allows remote authenticated users to inject arbitrary PHP code into config.php via the 1 adminmail, 2 emotpatch, 3 login, 4 pass, and unspecified other parameters. NOTE: the provenance of this...
Guestbara <= 1.2 Change Admin Login and Password Exploit
No description provided by source. html titleGuestbara = 1.2 Change admin login & password exploit by Kacper/title table border=0 cellspacing=0 cellpadding=0 align='center' form method='post' action='http://127.0.0.1/guestbookpath/admin/configuration.php?action=saveconfig&zapis=ok'tr trtd...
Guestbara 1.2 - Change Admin Login and Password
Guestbara = 1.2 Change admin login & password exploit by Kacper Admin Email Admin Name Admin Pass by Kacper for DEVIL TEAM script download: http://www.hotscripts.pl/produkt-3051.html Greetz @ll DEVIL TEAM milw0rm.com 2007-03-18...
Guestbara 1.2 - Change Admin Login and Password
Guestbara 1.2 - Change Admin Login and Password Guestbara = 1.2 Change admin login & password exploit by Kacper Admin Email Admin Name Admin Pass by Kacper for DEVIL TEAM script download: http://www.hotscripts.pl/produkt-3051.html Greetz @ll DEVIL TEAM milw0rm.com 2007-03-18...
Guestbara <= 1.2 Change Admin Login and Password Exploit
Exploit for unknown platform in category web applications ======================================================== Guestbara Guestbara Admin Email Admin Name Admin Pass by Kacper for DEVIL TEAM script download: http://www.hotscripts.pl/produkt-3051.html Greetz @ll DEVIL TEAM 0day.today 2018-04-11...