MusicBox <= v3.3 (install.php) Change Password Vulnerability

Exploit for php platform in category web applications ============================================================ MusicBox = v3.3 install.php Change Password Vulnerability ============================================================ Author : Mr.ThieF Software Link : www.musicboxv2.com Version :...

WHMCS v4.2.1 (install.php) file Vulnerabilities

Exploit for php platform in category web applications =============================================== WHMCS v4.2.1 install.php file Vulnerabilities =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0...

Wordpress (install.php) Any Version

Exploit for php platform in category web applications =================================== Wordpress install.php Any Version =================================== + : Author : ThE DarK + : e-Mail : email protected + : Sites : Arab-Hack.net , Sa-Hacker.Com , Gaza-Hack.net , error-y.com + : Software...

Authentication flaw

Unspecified vulnerability in OpenX 2.8.1 and 2.8.2 allows remote attackers to bypass authentication and obtain access to an Administrator account via unknown vectors, possibly related to www/admin/install.php, www/admin/install-plugins.php, and other www/admin/ files...

CVE-2009-4830: Improper Authentication

Unspecified vulnerability in OpenX 2.8.1 and 2.8.2 allows remote attackers to bypass authentication and obtain access to an Administrator account via unknown vectors, possibly related to www/admin/install.php, www/admin/install-plugins.php, and other www/admin/ files...

CVE-2010-0380

The CVE-2010-0380 entry concerns JCE-Tech PHP Calendars (install.php) where a direct request can bypass access restrictions and allow modification of application settings. The vulnerability hinges on administrators not following recommendations in the product installation documentation. The provi...

CVE-2010-0380

install.php in JCE-Tech PHP Calendars, downloaded 20100121, allows remote attackers to bypass intended access restrictions and modify application settings via a direct request. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's installation...

CVE-2010-0380: Undefined Security Weakness

install.php in JCE-Tech PHP Calendars, downloaded 20100121, allows remote attackers to bypass intended access restrictions and modify application settings via a direct request. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's installation...

PHPCalendars - Multiple Vulnerabilities

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== » Note : Forever RevengeHack.Com-Ar-Ge.Org Acildi...

PHPCalendars - Multiple Vulnerabilities

PHPCalendars - Multiple Vulnerabilities ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== » Note :...

X7CHAT 1.3.6b - Arbitrary Add Admin

X7CHAT 1.3.6b - Arbitrary Add Admin + Author : d4rk-h4ck3r + Email : [email protected] + Site : www.vbspiders.com/vb + Team : Tunisian Security TeaM + Dork : powered by x7 chat 1.3.6b Exploit-DB Notes Vendor has already addressed this issue and even provided a solution in Docs/INSTALL.txt: "After finishi...

PhotoDiary 1.3 Local File Inclusion

PhotoDiary 1.3 lng Local File Inclusion Vulnerability Discovered by cOndemned download: http://code.google.com/p/photodiary/ source of /admin/install.php lines 9 - 15: if isset$GET'lng' $LNG = $GET'lng'; 1 else $LNG = "ITA"; include "../common/language".$LNG.".php"; 2 proof of concept:...

Traidnt Gallery add Admin Exploit

No description provided by source. || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /...

Traidnt Gallery - Arbitrary Add Admin

Traidnt Gallery - Arbitrary Add Admin || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ team wlhaan hacker | | // | | |...

Traidnt Gallery - Arbitrary Add Admin

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ team wlhaan hacker | | // | | |...

CVE-2009-3508: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in MUJE CMS 1.0.4.34 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 class parameter to admin.php and the 2 url parameter to install/install.php; and allow remote authenticated administrators to read...

CVE-2009-3041: Undefined Security Weakness

SPIP 1.9 before 1.9.2i and 2.0.x through 2.0.8 does not use proper access control for 1 ecrire/exec/install.php and 2 ecrire/index.php, which allows remote attackers to conduct unauthorized activities related to installation and backups, as exploited in the wild in August 2009...

webLeague 2.2.0 (install.php) Remote Change Password Exploit

Exploit for unknown platform in category web applications ============================================================ webLeague 2.2.0 install.php Remote Change Password Exploit ============================================================ WebLeague 2.2.0 install.phpRemote Change Password By:...

webLeague 2.2.0 - install.php Remote Change Password

webLeague 2.2.0 - install.php Remote Change Password TiGeR-Dz WebLeague 2.2.0 install.phpRemote Change Password By: TiGeR-Dz POC :http://www.victim.com/path/install.php Put Name and password : Dork:"powered by: WebLeague" TiGeR-Dz milw0rm.com 2009-07-16...

webLeague 2.2.0 - 'install.php' Remote Change Password

TiGeR-Dz WebLeague 2.2.0 install.phpRemote Change Password By: TiGeR-Dz POC :http://www.victim.com/path/install.php Put Name and password : Dork:"powered by: WebLeague" TiGeR-Dz milw0rm.com 2009-07-16...