Lucene search
+L

122 matches found

seebug.org
seebug.org
added 2008/06/14 12:00 a.m.27 views

Clever Copy 3.0 (results.php) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Clever Copy results.php Remote SQL Injection Exploit Bug by: h0yt3r Dork: "powered by Clever Copy" This simple Exploit will give you Admin Username and md5Password Pls don't use this to crack sites :P Gr33tz go to: thund3r, ramon, b!zZ!t, Free-Hac...

7.1AI score
SaveExploits0
zdt
zdt
added 2008/06/12 12:00 a.m.25 views

Clever Copy 3.0 (results.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================== Clever Copy 3.0 results.php Remote SQL Injection Exploit ========================================================== !/usr/bin/perl Clever Copy results.php Remote SQL Injection...

7.1AI score
SaveExploits0
zdt
zdt
added 2008/04/28 12:00 a.m.60 views

Prozilla Hosting Index (directory.php cat_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================================= Prozilla Hosting Index directory.php catid SQL Injection Vulnerability ========================================================================= \ /\ \ / | \ \ | / ...

7.1AI score
SaveExploits0
Prion
Prion
added 2008/04/18 3:05 p.m.19 views

Design/Logic Flaw

The server in Blackboard Academic Suite 7.x stores MD5 password hashes that are provided directly by clients, which makes it easier for remote attackers to access accounts via a modified client that skips the javascript/md5.js hash calculation, and instead sends an arbitrary MD5 string...

6.8CVSS7.4AI score0.01264EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2008/04/18 3:00 p.m.39 views

CVE-2008-1883

The server in Blackboard Academic Suite 7.x stores MD5 password hashes that are provided directly by clients, which makes it easier for remote attackers to access accounts via a modified client that skips the javascript/md5.js hash calculation, and instead sends an arbitrary MD5 string...

6.9AI score0.01264EPSS
SaveExploits1References5
Prion
Prion
added 2008/03/26 10:44 a.m.23 views

Default credentials

ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40PE9 and 3.40AGD.2 through 3.40AHQ.3, do not use a salt when calculating an MD5 password hash, which makes it easier for attackers to crack passwords...

5CVSS7.3AI score0.0089EPSS
SaveExploits0References3Affected Software19
Packet Storm
Packet Storm
added 2007/12/10 12:00 a.m.46 views

cinject-sql.txt

--==+================================================================================+==-- --==+ Content Injector V1.53 SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: S.W.A.T...

7.4AI score
SaveExploits0
exploitpack
exploitpack
added 2007/12/09 12:00 a.m.40 views

Content Injector 1.53 - index.php SQL Injection

Content Injector 1.53 - index.php SQL Injection --==+================================================================================+==-- --==+ Content Injector V1.53 SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHO...

8.6AI score
SaveExploits0
zdt
zdt
added 2007/12/09 12:00 a.m.79 views

Content Injector 1.53 (index.php) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Content Injector 1.53 index.php Remote SQL Injection Vulnerability ====================================================================...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2007/12/09 12:00 a.m.62 views

Content Injector 1.53 - 'index.php' SQL Injection

--==+================================================================================+==-- --==+ Content Injector V1.53 SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: S.W.A.T...

7.5CVSS5.8AI score0.01037EPSS
SaveExploits1
Packet Storm
Packet Storm
added 2007/11/27 12:00 a.m.35 views

ci-sql.txt

--==+================================================================================+==-- --==+ Content Injector V1.52 SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: S.W.A.T...

7.4AI score
SaveExploits0
exploitpack
exploitpack
added 2007/11/22 12:00 a.m.14 views

Content Injector 1.52 - index.php?cat SQL Injection

Content Injector 1.52 - index.php?cat SQL Injection --==+================================================================================+==-- --==+ Content Injector V1.52 SQL Injection Vulnerbility +==-- --==+================================================================================+==--...

8.6AI score
SaveExploits0
Exploit DB
Exploit DB
added 2007/11/22 12:00 a.m.52 views

Content Injector 1.52 - 'index.php?cat' SQL Injection

--==+================================================================================+==-- --==+ Content Injector V1.52 SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: S.W.A.T...

7.5CVSS5.8AI score0.01197EPSS
SaveExploits1
Prion
Prion
added 2007/11/10 2:46 a.m.19 views

Improper access control

MyWebFTP, possibly 5.3.2, stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain an MD5 password hash via a direct request for pass/pass.txt...

5CVSS7.1AI score0.01218EPSS
SaveExploits0References4
NVD
NVD
added 2007/11/10 2:46 a.m.14 views

CVE-2007-5919

MyWebFTP, possibly 5.3.2, stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain an MD5 password hash via a direct request for pass/pass.txt...

5CVSS6.5AI score0.01218EPSS
SaveExploits0References4
CVE
CVE
added 2007/11/10 2:00 a.m.48 views

CVE-2007-5919

The CVE-2007-5919 entry concerns MyWebFTP (likely version 5.3.2) where sensitive data is stored under the web root with weak access controls, enabling remote retrieval of an MD5 password hash by directly requesting pass/pass.txt. This vulnerability is described across multiple sources (NVD, CVE l...

5CVSS6.5AI score0.01218EPSS
SaveExploits0References4Affected Software1
Prion
Prion
added 2007/09/18 7:17 p.m.21 views

Improper access control

CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin name and MD5 password hash via a direct request for base/usr/0.php...

5CVSS7AI score0.02581EPSS
SaveExploits2References5
NVD
NVD
added 2007/09/18 7:17 p.m.19 views

CVE-2007-4937

CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin name and MD5 password hash via a direct request for base/usr/0.php...

5CVSS6.5AI score0.02581EPSS
SaveExploits2References5
Cvelist
Cvelist
added 2007/09/18 7:00 p.m.36 views

CVE-2007-4937

CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin name and MD5 password hash via a direct request for base/usr/0.php...

6.5AI score0.02581EPSS
SaveExploits2References5
CVE
CVE
added 2007/09/18 7:00 p.m.54 views

CVE-2007-4937

CVE-2007-4937 affects CS Guestbook. The vulnerability arises from insufficient access control that allows remote attackers to retrieve sensitive data (admin name and MD5 password hash) by directly requesting base/usr/0.php. The description in connected sources confirms the issue but does not prov...

5CVSS6.5AI score0.02581EPSS
SaveExploits2References5Affected Software1
Rows per page
Query Builder