122 matches found
Clever Copy 3.0 (results.php) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Clever Copy results.php Remote SQL Injection Exploit Bug by: h0yt3r Dork: "powered by Clever Copy" This simple Exploit will give you Admin Username and md5Password Pls don't use this to crack sites :P Gr33tz go to: thund3r, ramon, b!zZ!t, Free-Hac...
Clever Copy 3.0 (results.php) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ========================================================== Clever Copy 3.0 results.php Remote SQL Injection Exploit ========================================================== !/usr/bin/perl Clever Copy results.php Remote SQL Injection...
Prozilla Hosting Index (directory.php cat_id) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================================= Prozilla Hosting Index directory.php catid SQL Injection Vulnerability ========================================================================= \ /\ \ / | \ \ | / ...
Design/Logic Flaw
The server in Blackboard Academic Suite 7.x stores MD5 password hashes that are provided directly by clients, which makes it easier for remote attackers to access accounts via a modified client that skips the javascript/md5.js hash calculation, and instead sends an arbitrary MD5 string...
CVE-2008-1883
The server in Blackboard Academic Suite 7.x stores MD5 password hashes that are provided directly by clients, which makes it easier for remote attackers to access accounts via a modified client that skips the javascript/md5.js hash calculation, and instead sends an arbitrary MD5 string...
Default credentials
ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40PE9 and 3.40AGD.2 through 3.40AHQ.3, do not use a salt when calculating an MD5 password hash, which makes it easier for attackers to crack passwords...
cinject-sql.txt
--==+================================================================================+==-- --==+ Content Injector V1.53 SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: S.W.A.T...
Content Injector 1.53 - index.php SQL Injection
Content Injector 1.53 - index.php SQL Injection --==+================================================================================+==-- --==+ Content Injector V1.53 SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHO...
Content Injector 1.53 (index.php) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ==================================================================== Content Injector 1.53 index.php Remote SQL Injection Vulnerability ====================================================================...
Content Injector 1.53 - 'index.php' SQL Injection
--==+================================================================================+==-- --==+ Content Injector V1.53 SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: S.W.A.T...
ci-sql.txt
--==+================================================================================+==-- --==+ Content Injector V1.52 SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: S.W.A.T...
Content Injector 1.52 - index.php?cat SQL Injection
Content Injector 1.52 - index.php?cat SQL Injection --==+================================================================================+==-- --==+ Content Injector V1.52 SQL Injection Vulnerbility +==-- --==+================================================================================+==--...
Content Injector 1.52 - 'index.php?cat' SQL Injection
--==+================================================================================+==-- --==+ Content Injector V1.52 SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: S.W.A.T...
Improper access control
MyWebFTP, possibly 5.3.2, stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain an MD5 password hash via a direct request for pass/pass.txt...
CVE-2007-5919
MyWebFTP, possibly 5.3.2, stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain an MD5 password hash via a direct request for pass/pass.txt...
CVE-2007-5919
The CVE-2007-5919 entry concerns MyWebFTP (likely version 5.3.2) where sensitive data is stored under the web root with weak access controls, enabling remote retrieval of an MD5 password hash by directly requesting pass/pass.txt. This vulnerability is described across multiple sources (NVD, CVE l...
Improper access control
CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin name and MD5 password hash via a direct request for base/usr/0.php...
CVE-2007-4937
CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin name and MD5 password hash via a direct request for base/usr/0.php...
CVE-2007-4937
CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin name and MD5 password hash via a direct request for base/usr/0.php...
CVE-2007-4937
CVE-2007-4937 affects CS Guestbook. The vulnerability arises from insufficient access control that allows remote attackers to retrieve sensitive data (admin name and MD5 password hash) by directly requesting base/usr/0.php. The description in connected sources confirms the issue but does not prov...