Re: Project Pier Web Vulnerabilities

Mitre has assigned the following CVE's for these issues in Project Pier: XSS: CVE-2013-3635 Session cookies lack HttpOnly flag: CVE-2013-3636 Session cookies lack Secure flag: CVE-2013-3637 On Tue, May 21, 2013 at 9:26 PM, the infinitenigma [email protected] wrote: Summary...

Curl Ruby Gem Remote command execution

Curl Ruby Gem Remote command execution 3/12/2013 https://github.com/tg0/curl Specially crafted URLs can result in remote code execution: In ./lib/curl.rb the following lines: 131 cmd = "curl cookiesstore browsertype @setupparams ref "url" " 132 if @debug 133 puts cmd.red 134 end 135 result =...

Interlogy Profile Manager Basic Insecure Cookie Handling

interlogy Profile Manager Basic for ByPass Insecure Cookie Handling Vulnerability ---------------------------------------------------------- Discovered By: zer03s Date: 03/05/2012 Home: zer03s.blog.com ----------------------------------------------------------- desc: normal login for cookie...

miniPortail v2.2 Multiple Vulnerabilities

Exploit for php platform in category web applications +---------------------------------info-----------------------------------+ | Exploit Title : miniPortail v2.2 Multiple Vulnerabilities | | version : all version | | Author : Or4nG.M4n | | Dork : "miniPortail v2.2" | | Software Link :...

Paddelberg Topsite Script Insecure Cookie

Exploit Title: Paddelberg's topsite-script admin auth bypass. Google Dork: intext:"powered by php scripte webmaster resource" Date: 8. 1. 2012 Author: Christian Inci Software Link: http://www.paddelberg.de/gratis-toplisten-script/gratis-download/ Version: = 1.23 22. 9. 2007 Tested on: 1.23 Vendor...

PHPDirector 0.30 Insecure Cookie Handling

============================================================ PHPDirector 0.30 Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail : submitat1337day.com 1 0 0 1 1 0 I'm KnocKout member from Inj3ct0r Team 1 1 0...

RuubikCMS < v1.0.3 Insecure Cookie Handling

Exploit for php platform in category web applications ----------------------------------------------------------------------- RuubikCMS v1.0.3 Insecure Cookie Handling ----------------------------------------------------------------------- Author : Chip D3 Bi0s Email : chipdebiosalt+64gmail.com...

Babil CMS Insecure Cookie Handling

=================================================== Babilcms Exploit database separated by exploit 3 3 type local, remote, DoS, etc. 3 7 7 1 + Site : 1337db.com 1 3 + Support e-mail : submitat1337db.com 3 3 3 7 7 1 I'm KnocKout 1337 Member from 1337 DataBase 1 3 3 3 3...

Wiki Web Help &lt;= 0.3.3 Insecure Cookie Handling

No description provided by source. =============================================== WikiWebHelp v0.3.3 = Insecure Cookie Handling =============================================== My + Author : FuRty Contact : [email protected] Software info Web App. : WikiWebHelp Version : 0.3.3 Software:...

WikiWebHelp 0.3.3 - Insecure Cookie Handling

=============================================== WikiWebHelp v0.3.3 = Insecure Cookie Handling =============================================== My + Author : FuRty Contact : [email protected] Software info Web App. : WikiWebHelp Version : 0.3.3 Software: http://sourceforge.net/projects/wwh/ Vendor :...

PHP Hosting Directory 2.0 Insecure Cookie

----------------------------------------------------------------------- o X .@% @@@ @ @ @@ %X X@ @ @X% @X% X@ X@ o@ o X o @ % % X @ X X X@ X X % @o @%o @o% X @ % X.@@ o @o@ @ @XX X@ @ X @% X% %@@ X -----------------------------------------------------------------------...

xWeblog 2.2 Insecure Cookie Handling

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit Database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

xWeblog v2.2 Insecure Cookie Handling Vulnerability

Exploit for php platform in category web applications =================================================== xWeblog v2.2 Insecure Cookie Handling Vulnerability =================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

EasyEstateManager - Insecure Cookie Handling

Exploit for php platform in category web applications ============================================ EasyEstateManager - Insecure Cookie Handling ============================================ My + Author : KnocKout + Greatz : DaiMon Contact : email protected Software info Script : EasyEstateManager...

Living Local V1.2 (pHbypass) Insecure Cookie Handling

Exploit for php platform in category web applications ===================================================== Living Local V1.2 pHbypass Insecure Cookie Handling ===================================================== Author : KnocKout Thankz.: DaiMon, Cyber-Warriorz. Contact: email protected Script...

Open Cart 0.6.5 Insecure Cookie

==================================================== Open Cart V0.6.5 + fix by Pass ICH Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ ...

Traidnt UP Version 1.0 Insecure Cookie Handling Vulnerability

Exploit for php platform in category web applications ============================================================= Traidnt UP Version 1.0 Insecure Cookie Handling Vulnerability =============================================================...

AV Arcade 3 Insecure Cookie / SQL Injection

:----------------------------------------------------------------------------: : Software : AV Arcade v3 PHP : : Site : www.avscripts.net : : Date : 28/07/2010 : : Author : saudi0hacker : : Type : Auth Bypass / Cookie : : Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com :...

Ballettin Forum SQL Injection

==================================================================== Exploit Title: Ballettin Forum Multiple SQL Injection Vulnerability Date: 25/07/2010 Author: 3v0 aka evolution Software Link: http://www.ballettin.com Tested on: Windows Xp Pack 3...

Ballettin Forum SQL Injection Vulnerability

Exploit for php platform in category web applications =========================================== Ballettin Forum SQL Injection Vulnerability =========================================== ==================================================================== Exploit Title: Ballettin Forum Multiple SQ...