CVE-2006-1085

admin.php in PHP-Stats 0.1.9.1 and earlier allows remote attackers to bypass authentication, gain administrator privileges, and execute arbitrary PHP code by modifying the optionadminpass parameter and setting the passcookie to the MD5 hash of the specified password...

phpBB 2.0.19 - Style Changer/Demo Mod SQL Injection

!/usr/bin/perl | | | \ | | |/ phpBB Style Changer/Demo Mod--GET HASH EXPLOIT Created By SkOd SED security Team http://www.sed-team.be [email protected] ISRAEL google: "Powered by phpBB" inurl:"index.php?s" OR inurl:"index.php?style" use IO::Socket; if @ARGV 3 print q phpBB Style Changer\Viewer MO...

CVE-2006-0440

Text Rider 2.4 allows attackers to bypass authentication and upload files without providing a valid password by obtaining the MD5 hash of the password possibly via another vulnerability that reads it from a data file, then including the hash in a cookie...

Authentication flaw

Text Rider 2.4 allows attackers to bypass authentication and upload files without providing a valid password by obtaining the MD5 hash of the password possibly via another vulnerability that reads it from a data file, then including the hash in a cookie...

CVE-2006-0440

Text Rider 2.4 is affected by an authentication-bypass vulnerability: an attacker can obtain the MD5 hash of the password (potentially from another vulnerability that reads it from a data file) and include the hash in a cookie to bypass login and upload files without a valid password. The descrip...

CVE-2006-0440

Text Rider 2.4 allows attackers to bypass authentication and upload files without providing a valid password by obtaining the MD5 hash of the password possibly via another vulnerability that reads it from a data file, then including the hash in a cookie...

Session fixation

claroinitlocal.inc.php in Claroline 1.7.2 uses guessable session cookies MD5 hash of connection time, which allows remote attackers to hijack sessions and possibly gain administrative privileges...

ADP Forum 2.0,ADP Forum 2.0.1,ADP Forum 2.0.2,ADP Forum 2.0.3 versiyon user md5 hash bug

ADP Forum 2.0,ADP Forum 2.0.1,ADP Forum 2.0.2,ADP Forum 2.0.3 versiyon user md5 hash bug ---------------------------------------------------- site:http://www.linux.it/fedro/ demo:http://www.e-stamp.ru/forum203/ --------------------------------------------------...

adpHashdisclose.txt

ADP Forum 2.0,ADP Forum 2.0.1,ADP Forum 2.0.2,ADP Forum 2.0.3 versiyon user md5 hash bug ---------------------------------------------------- site:http://www.linux.it/fedro/ demo:http://www.e-stamp.ru/forum203/ --------------------------------------------------...

CVE-2003-1245

index2.php in Mambo 4.0.12 allows remote attackers to gain administrator access via a URL request where sessionid is set to the MD5 hash of a session cookie...

PHPWebThings 1.4 - 'forum' SQL Injection

!/bin/bin/perl ----------------------------------------------------- - SQL injection in phpwebthing v 1.4.4 - Founder by Qptan & Exploting by AhLam - www.leZe.Com Only For Geek Hacker's - coded by AhLaM A.1.M|at|hotmail.com - http://www.lezr.com/vb/showthread.php?t=6557...

Wizz Forum 1.20 - TopicID SQL Injection

Wizz Forum 1.20 - TopicID SQL Injection !/bin/env perl //----------------------------------------------------------- // Wizz Forum SQL Injection Exploit .. By HACKERS PAL // Greets For Devil-00 - Abducter - Almaster // http://WwW.SoQoR.NeT...

Wizz Forum 1.20 - 'TopicID' SQL Injection

!/bin/env perl //----------------------------------------------------------- // Wizz Forum SQL Injection Exploit .. By HACKERS PAL // Greets For Devil-00 - Abducter - Almaster // http://WwW.SoQoR.NeT //----------------------------------------------------------- use LWP::Simple; print "\n"; print...

ibProArcade 2.x - module vBulletinIPB SQL Injection

ibProArcade 2.x - module vBulletinIPB SQL Injection Rankings for name will state the md5 hash for the user /str0ke ibProArcade 2.x IPB: index.php?act=Arcade&module=report&user=-1 union select password from ibfmembers where id=anyuser vBulettin forums: index.php?act=ibProArcade&module=report&user=...

Woltlab 1.12.x - Info-DB Info_db.php Multiple SQL Injections

Woltlab 1.12.x - Info-DB Infodb.php Multiple SQL Injections source: https://www.securityfocus.com/bid/15214/info Info-DB is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit...

Utopia News Pro 1.1.3 SQL Injection / cross site scripting

2.56 07/10/2005 Utopia News Pro 1.1.3 SQL Injection / cross site scripting software: site: http://www.utopiasoftware.net axss: http://target/path/header.php?sitetitle=/titlescriptalertdocument.cookie/script!-- http://target/path/footer.php?version=scriptalertdocument.cookie/script...

My Little Forum 1.5 - 'SearchString' SQL Injection

?php mlfexpl.php My Little Forum 1.5 possibly prior versions SQL Injection / MD5 password hash disclosure poc exploit with proxy support by rgod site: http://rgod.altervista.org make these changes in php.ini if you have troubles to launch this script: allowcalltimepassreference = on registergloba...

CVE-2004-2443

Jaws 0.3 allows remote attackers to bypass authentication and via an HTTP request to admin.php with the logged cookie set to the MD5 hash of a null password, which is compared against the logged session variable by the loggedon function in application.php...

mybloggie.pl.txt

!/usr/bin/perl -w SQL Injection Exploit for myBloggie 2.1.1 - 2.1.2 This exploit show the username of the administrator of the blog and his password crypted in MD5 Coded by Alberto Trivero and Discovered with CorryL Related advisories: Italian...

dt_Multiple_vuln.txt

------------------------------------------------------------------------ Directtopics Multiple Vulnerabilities By : Morinex e-mail : [email protected] date : 08-04-2k5 shoutz : w00pie.nl Target : Directtopics Vulnerable Versions: DT 2 beta , DT2 final, 2.1, and 2.2 URL : www.directtopics.nl ...