Kwik Pay Payroll 4.10.3 Proof Of Concept

Exploit Title: Kwik Pay Payroll .mdb Crash PoC Date: April 1, 2010 Version: 4.10.3 Tested on: Windows XP SP3 Cost: 100.00 AU Author: chap0 Email: chap0x90atgmaildotcom Site: http://www.setfreesecurity.com Usage: Run Script, Open the program File - Import Payroll Data Select From Data Source...

Kwik Pay Payroll 4.10.3 - .mdb Crash (PoC)

Kwik Pay Payroll 4.10.3 - .mdb Crash PoC Exploit Title: Kwik Pay Payroll .mdb Crash PoC Date: April 1, 2010 Version: 4.10.3 Tested on: Windows XP SP3 Cost: 100.00 AU Author: anonymous Site: http://www.setfreesecurity.com Usage: Run Script, Open the program File - Import Payroll Data Select From...

CVE-2010-0984: Undefined Security Weakness

Acidcat CMS 3.5.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direct request for databases/acidcat3.mdb...

Solaris Update for mpt_sas with mdb/kmdb support 142676-02

Check for the Version of mptsas with mdb/kmdb support OpenVAS Vulnerability Test Solaris Update for mptsas with mdb/kmdb support 142676-02 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Solaris Update for mpt_sas with mdb/kmdb support 142676-02

Check for the Version of mptsas with mdb/kmdb support OpenVAS Vulnerability Test Solaris Update for mptsas with mdb/kmdb support 142676-02 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

DA Mailing List System 2 - Multiple Vulnerabilities

DA Mailing List System 2 - Multiple Vulnerabilities DA Mailing List System V2 Remote Admin Login Exploit Author : Phenom Dork: DA Mailing List System V2 Powered by DigitalArakan.Net Version : 2 Exploit : 1- http://server/path/admincp.asp 2- login with "admin" as user name and 'or' as password...

DA Mailing List System 2 - Multiple Vulnerabilities

DA Mailing List System V2 Remote Admin Login Exploit Author : Phenom Dork: DA Mailing List System V2 Powered by DigitalArakan.Net Version : 2 Exploit : 1- http://server/path/admincp.asp 2- login with "admin" as user name and 'or' as password...

VP-ASP Shopping Cart 7.0 - Database Disclosure

VP-ASP Shopping Cart 7.0 - Database Disclosure ======================================================================================== | Title : VP-ASP Shopping Cart 7.0 DB Download Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi ...

Acidcat CMS v3.5 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ========================================= Acidcat CMS v3.5 Multiple Vulnerabilities ========================================= » Script: Mini-NUKE v2.3 Freehost » Language: ASP » Download:...

Web Calendar - Remote Database Disclosure

Web Calendar - Remote Database Disclosure --------------------------------------- WEB Calendarcalendar35.mdb Remote Database Disclosure Vulnerability --------------------------------------- + Author : RENO + Email : [email protected] + Site : www.vxx9.cc + Team : SauDi ViRuS TeaM + Dork : search fo...

dblog (dblog.mdb) Remote Database Disclosure Vulnerability

No description provided by source. --------------------------------------- dblog dblog.mdb Remote Database Disclosure Vulnerability --------------------------------------- + Author : AnTi SeCuRe + Email : [email protected] + Site : www.vxx9.cc + Team : SauDi ViRuS TeaM + Script : dblog +...

dblog - 'dblog.mdb' Remote Database Disclosure

--------------------------------------- dblog dblog.mdb Remote Database Disclosure Vulnerability --------------------------------------- + Author : AnTi SeCuRe + Email : [email protected] + Site : www.vxx9.cc + Team : SauDi ViRuS TeaM + Script : dblog + download :...

DMXReady Registration Manager 1.1 Database Disclosure Vulnerability

No description provided by source. Title : DMXReady Registration Manager 1.1 Remote Database Disclosure Vulnerability Author : S4S-T3rr0r!sT Contact : [email protected] / [email protected] S.Page : DMXReady CMS Plugin Applications Web Site Design Extensions Dreamweaver ASP Template Database Driven Site ...

Uguestbook 1.0 Database Disclosure

!/usr/bin/perl Uguestbook 1.0 mdb-database/guestbook.mdb use LWP::Simple; use LWP::UserAgent; print "\tUguestbook 1.0 Arbitrary Database Disclosure Exploit\n"; print "\t\n"; print "\t Found And Exploited By : Cyber-Zone ABDELKHALEK \n"; print "\t E-mail : Paradisdesfousathotmail.fr \n"; print "\t...

Ublog access version Arbitrary Database Disclosure Exploit

No description provided by source. !/usr/bin/perl Ublog access version mdb-database/blog.mdb dork : http://www.google.co.ma/search?q=index.asp%3Farchivio%3DOK&hl=fr&start=20&sa=N demos : http://radiologyhunters.com/blog/mdb-database/blog.mdb http://foges.net/mdb-database/blog.mdb...

Ublog access version Arbitrary Database Disclosure Exploit

Exploit for unknown platform in category web applications ========================================================== Ublog access version Arbitrary Database Disclosure Exploit ========================================================== !/usr/bin/perl Ublog access version mdb-database/blog.mdb dork...

Uguestbook 1.0b (guestbook.mdb) Arbitrary Database Disclosure Exploit

Exploit for unknown platform in category web applications ===================================================================== Uguestbook 1.0b guestbook.mdb Arbitrary Database Disclosure Exploit ===================================================================== !/usr/bin/perl Uguestbook 1.0...

Ublog access version - Arbitrary Database Disclosure

!/usr/bin/perl Ublog access version mdb-database/blog.mdb dork : http://www.google.co.ma/search?q=index.asp%3Farchivio%3DOK&hl=fr&start=20&sa=N demos : http://radiologyhunters.com/blog/mdb-database/blog.mdb http://foges.net/mdb-database/blog.mdb http://www.geoaurea.it/mdb-database/blog.mdb use...

CVE-2008-6580: Undefined Security Weakness

The RedReservations script for ColdFusion stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database via a direct request to 1 makered.mdb and 2 makered97.mdb...

aspWebCalendar Free Edition bug

I'm not sure how to classify this bug / vulnerability, but for aspWebCalendar Free edition, you can openly download the mdb file and read its contents username,pasword. Example http://www.example.com/calendar/calendar.mdb I guess the fix would be to place the mdb file outside of wwwroot...