EUVD-2008-1728

Malware in sbrugna...

EUVD-2008-1727

Malware in sbrugna...

KnowledgeQuest 2.6 - Administration Multiple Authentication Bypass Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/29012/info KnowledgeQuest is prone to multiple authentication-bypass vulnerabilities. Attackers can leverage these issues to compromise the application, which could aid in other attacks. KnowledgeQuest 2.6 is vulnerable;...

KnowledgeQuest 2.6 - Administration Multiple Authentication Bypass Vulnerabilities

KnowledgeQuest 2.6 - Administration Multiple Authentication Bypass Vulnerabilities source: https://www.securityfocus.com/bid/29012/info KnowledgeQuest is prone to multiple authentication-bypass vulnerabilities. Attackers can leverage these issues to compromise the application, which could aid in...

KnowledgeQuest 2.6 - Administration Multiple Authentication Bypass Vulnerabilities

source: https://www.securityfocus.com/bid/29012/info KnowledgeQuest is prone to multiple authentication-bypass vulnerabilities. Attackers can leverage these issues to compromise the application, which could aid in other attacks. KnowledgeQuest 2.6 is vulnerable; other versions may also be affecte...

Authentication flaw

KnowledgeQuest 2.5 and 2.6 does not require authentication for access to admincheck.php, which allows remote attackers to create arbitrary admin accounts...

CVE-2008-1727

KnowledgeQuest 2.5 and 2.6 does not require authentication for access to admincheck.php, which allows remote attackers to create arbitrary admin accounts...

Sql injection

Multiple SQL injection vulnerabilities in KnowledgeQuest 2.6, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 kqid parameter to a articletext.php and b articletextonly.php and the 2 username parameter to c logincheck.php...

CVE-2008-1726

Multiple SQL injection vulnerabilities in KnowledgeQuest 2.6, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 kqid parameter to a articletext.php and b articletextonly.php and the 2 username parameter to c logincheck.php...

CVE-2008-1726

CVE-2008-1726 concerns KnowledgeQuest 2.6 and its SQL injection vulnerabilities. When magic_quotes_gpc is disabled, remote attackers can inject SQL via: (1) kqid parameter in articletext.php and articletextonly.php, and (2) username parameter in logincheck.php. The impact is arbitrary SQL executi...

CVE-2008-1727

KnowledgeQuest 2.5 and 2.6 does not require authentication for access to admincheck.php, which allows remote attackers to create arbitrary admin accounts...

CVE-2008-1726

Multiple SQL injection vulnerabilities in KnowledgeQuest 2.6, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 kqid parameter to a articletext.php and b articletextonly.php and the 2 username parameter to c logincheck.php...

CVE-2008-1727

Technical details about CVE-2008-1727 are not publicly available in the provided connected documents. The information available is limited to the known description in the initial document; monitor for updates.

CVE-2008-1726: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in KnowledgeQuest 2.6, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 kqid parameter to a articletext.php and b articletextonly.php and the 2 username parameter to c logincheck.php...

CVE-2008-1727: Improper Authentication

KnowledgeQuest 2.5 and 2.6 does not require authentication for access to admincheck.php, which allows remote attackers to create arbitrary admin accounts...

KnowledgeQuest 2.6 SQL Injection Vulnerabilities

No description provided by source. ...:::::KnowledgeQuest 2.6 SQL Injection Vulnerabilities ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all...

kq-sql.txt

...:::::KnowledgeQuest 2.6 SQL Injection Vulnerabilities ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my best friend in...

kq-admin.txt

!/usr/bin/perl use strict; use LWP::UserAgent; print "-+------------------------------------------+-\n"; print "-+- KnowledgeQuest 2.5 Arbitrary Add Admin -+-\n"; print "-+------------------------------------------+-\n"; print "-+- Discovered && Coded By t0pP8uzz -+-\n"; print "-+- This Exploit...

KnowledgeQuest 2.5 Arbitrary Add Admin Exploit

No description provided by source. !/usr/bin/perl use strict; use LWP::UserAgent; print "-+------------------------------------------+-\n"; print "-+- KnowledgeQuest 2.5 Arbitrary Add Admin -+-\n"; print "-+------------------------------------------+-\n"; print "-+- Discovered && Coded By t0pP8uz...

KnowledgeQuest 2.5 - Arbitrary Add Admin

KnowledgeQuest 2.5 - Arbitrary Add Admin !/usr/bin/perl use strict; use LWP::UserAgent; print "-+------------------------------------------+-\n"; print "-+- KnowledgeQuest 2.5 Arbitrary Add Admin -+-\n"; print "-+------------------------------------------+-\n"; print "-+- Discovered && Coded By...