191 matches found
Libsys图书管理系统 V5.5 变量覆盖漏洞
登陆页面 sessionstart ; if isset $REQUEST'username' $strUser = trim $REQUEST'username' ; $strInput = trim $REQUEST'passwd' ; $strMsg = "用户名或者密码错误"; switch $strUser case "opacadmin" : $strPassWd = $strPassWdFile; $strMsg = verifypwd $strInput, $strPassWd ; if $strMsg == true $SESSION'ADMINUSER' =...
id.nan-net.jp vulnerability
Vulnerable URL: http://id.nan-net.jp/system/login/link.cgi?jump=http://xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 2 VIP website status:| No Check...
TurboMail /mailmain 弱密码漏洞
No description provided by source. !/usr/bin/env python coding: utf-8 import re import random import threading from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register class MyThreadthreading.Thread: def initself,func,args,name='':...
QQ input method pure version 1. 1 The presence of IME vulnerability-vulnerability warning-the black bar safety net
In the login system before, or Telnet before you can open the input method selected help, you can open the IE browser, by saving the page you can open the computer file list. The main is now popular PC end windows 8 system...
FlatFile Login System - Remote Password Disclosure Vulnerability
No description provided by source...
VigileCMS <= 1.8 Stealth Remote Command Execution Exploit
No description provided by source. !/usr/bin/python -- coding: iso-8859-15 -- ''' | || | | | | | ' / -||| ' / | '/ / / \ \ / ||||||| ./,|| ,,/\ || ------------------------------------------------------------------------------------------------ This is a Public Exploit. 22/11/2007...
Simple Text-File Login script 1.0.6 - (DD/RFI) Multiple Vulnerabilities
No description provided by source. START 0x01 Informations: Script : Simple Text-File Login script 1.0.6 Download : http://www.hotscripts.com/jump.php?listingid=36777&jumptype=1 Vulnerability : Remote File Inclusion / Sensitive Data Disclosure Author : Osirys Contact : osirysatlivedotit Notes :...
New Twitter Login Verification System Avoids SMS Codes
Twitter is rolling out an updated login verification system for iPhone and Android that uses a novel cryptographic scheme that is designed to be resilient against attack and ensures that the private key never leaves the user’s device. The system doesn’t rely on SMS to send codes to users for logi...
Micro Login System v 1.0 Read password
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 蒸...
Unfixed XSS vulnerability at www.transfermarkt.ch
Security researcher Viper.aT, has submitted on 30/06/2010 a cross-site-scripting XSS vulnerability affecting www.transfermarkt.ch, which at the time of submission ranked 239935 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2011. It is...
Logoshows BBS 2.0 (DD/ICH) Multiple Remote Vulnerabilities
No description provided by source. Logoshows BBS 2.0 DD ZoRLu yildirimordulari.com - z0rlu.blogspot.com - turkguvenligi.info ref: http://www.milw0rm.com/exploits/9389 vuln: http://www.logoshows.com/bbs/database/globepersonnel.mdb Logoshows BBS 2.0 ICH yildirimordulari.com - z0rlu.blogspot.com -...
Simple Text-File Login script 1.0.6 (DD/RFI) Multiple Vulnerabilities
No description provided by source. START 0x01 Informations: Script : Simple Text-File Login script 1.0.6 Download : http://www.hotscripts.com/jump.php?listingid=36777&jumptype=1 Vulnerability : Remote File Inclusion / Sensitive Data Disclosure Author : Osirys Contact : osirysatlivedotit Notes :...
Simple Text-File Login script 1.0.6 (DD/RFI) Multiple Vulnerabilities
Exploit for unknown platform in category web applications ===================================================================== Simple Text-File Login script 1.0.6 DD/RFI Multiple Vulnerabilities ===================================================================== START 0x01 Informations: Script...
sdms-sql.txt
SDMS Simple Document Management System v1.1.4 SQL Injection Author: Yuri Program: SDMS Simple Document Management System Version: v1.1.4 and probably all older versions as well Website: http://sdms.cafuego.net/ How it works The login system is very insecure, this is the code we are going to abuse...
Simple Document Management System 1.1.4 SQL Injection Auth Bypass
No description provided by source. SDMS Simple Document Management System v1.1.4 SQL Injection Author: Yuri Program: SDMS Simple Document Management System Version: v1.1.4 and probably all older versions as well Website: http://sdms.cafuego.net/ How it works The login system is very insecure, thi...
Simple Document Management System 1.1.4 - Authentication Bypass
Simple Document Management System 1.1.4 - Authentication Bypass SDMS Simple Document Management System v1.1.4 SQL Injection Author: Yuri Program: SDMS Simple Document Management System Version: v1.1.4 and probably all older versions as well Website: http://sdms.cafuego.net/ How it works The login...
silentum-xss.txt
+===============================================================+ + Silentum LoginSys v1.0.0 XSS Cross-Site Scripting + +===============================================================+ Authors: Maximiliano Soler. Web: www.maximilianosoler.com.ar Product: Silentum LoginSys v1.0.0 Description:...
pubwin Internet cafe Charging System fast crack-vulnerability warning-the black bar safety net
First step: cut away pubwin.exe can be achieved,press the“win” key, select “Search—files or folders” Search “pubwin.exe” the program cut to other places“pubwin.exe”the program itself did not ban the“search”of this one If the“ win” key can't use,you can use input vulnerability to find out...
Shadowed Portal <= 5.7d3 (POST) Remote File Inclusion Vulnerability
No description provided by source. / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / &n...
VigileCMS <= 1.8 Stealth Remote Command Execution Exploit
Opencosmo Security http://www.opencosmo.com http://www.opencosmo.com/news.php?readmore=15 VigileCMS = 1.8 Stealth Remote Command Execution Exploit Crediti: The:Paradox Applicazione: VigileCMS Versione: 1.8 Impatto: Remote Command Execution Rischio: 3/5 Exploit: !/usr/bin/python -- coding:...