104 matches found
Maxwebportal <= 1.36 password.asp Change Password Exploit (2 - php)
Exploit for unknown platform in category web applications =================================================================== Maxwebportal ------------------------------------------ / Config address - example: http://www.site.com/password.asp $url = "http://www.mohamad.com/password.asp"; $mh =...
Maxwebportal <= 1.36 password.asp Change Password Exploit (1 - html)
Exploit for unknown platform in category web applications ==================================================================== Maxwebportal -----------------Code Start-----Version 1.35 and older-------------- pass1: pass2: Id: Member Key: -----------------End------------------- Version 1.36, 2.0,...
MaxWebPortal memKey Parameter SQL Injection
The remote host is running a version of MaxWebPortal that fails to properly sanitize input passed through the 'memKey' parameter to the 'password.asp' script. An attacker can exploit this flaw to modify database queries resulting in the disclosure of sensitive information, modification of data fo...
Maxwebportal 1.36 - Password.asp Change Password (1) (HTML)
Maxwebportal 1.36 - Password.asp Change Password 1 HTML -----------------Code Start-----Version 1.35 and older-------------- pass1: pass2: Id: Member Key: -----------------End------------------- Version 1.36, 2.0, 20050418 Next: -----------------Code Start-----Version 1.36, 2.0, 20050418...
Maxwebportal <= 1.36 password.asp Change Password Exploit (1 - html)
No description provided by source. !-- Hi, I'm Soroush Dalili from Grayhatz Security Group GSG . I found dangerous sql injection in Maxwebportal version 1.35,1.36,2.0, 20050418 Next Remote user can inject his/her code in "memKey" var. and change other users password in password.asp Exploit codes ...
Maxwebportal <= 1.36 password.asp Change Password Exploit (3 - perl)
Exploit for unknown platform in category web applications ==================================================================== Maxwebportal Gr33tz To == mhp0rtal , Oilkarchack , Str0ke & AlphaST.Com And Iranian Hacking & Security Teams : IHS , Shabgard , Emperor ,Crouz & Simorgh-ev use IO::Socket...
Maxwebportal 1.36 - 'Password.asp' Change Password (1) (HTML)
-----------------Code Start-----Version 1.35 and older-------------- pass1: pass2: Id: Member Key: -----------------End------------------- Version 1.36, 2.0, 20050418 Next: -----------------Code Start-----Version 1.36, 2.0, 20050418 Next-------------- pass1: pass2: Id: Member Key:...
Maxwebportal 1.36 - 'Password.asp' Change Password (3)
!/usr/bin/perl T r a p - S e t U n d e r g r o u n d H a c k i n g T e a m EXPLOIT FOR - MAX Portal All Versions Exploit By : A l p h a P r o g r a m m e r Sirus-v ; E-Mail : [email protected] This Xpl Change Admin's Pass in This Portal !! Discovered by: s d Gr33tz To == mhp0rtal ,...
Maxwebportal 1.36 - Password.asp Change Password (2) (PHP)
Maxwebportal 1.36 - Password.asp Change Password 2 PHP ------------------------------------------ / Config address - example: http://www.site.com/password.asp $url = "http://www.mohamad.com/password.asp"; $mh = "s1"; if webmaxportal version is : Version 1.35 and older please input $mh= "s1" if...
Maxwebportal <= 1.36 password.asp Change Password Exploit (2 - php)
No description provided by source. ?php / ------Trap-Set Underground Hacking Team-----------------mhp0rtal---------------------- Greetz to : Alphaprogrammer , Oilkarchack , Str0ke And Iranian Hacking & Security Teams : Alphast , IHS Team , Shabgard Security Team , Emperor Hacking TEam , CrouZ...
Maxwebportal 1.36 - 'Password.asp' Change Password (2)
------------------------------------------ / Config address - example: http://www.site.com/password.asp $url = "http://www.mohamad.com/password.asp"; $mh = "s1"; if webmaxportal version is : Version 1.35 and older please input $mh= "s1" if webmaxportal version is : Version 1.36 , 2.0 please input...
MaxWebPortal password.asp memKey Parameter SQL Injection
Binary data 2937.prm...
CVE-2003-1211
CVE-2003-1211 is an XSS vulnerability in MaxWebPortal 1.30 (and possibly earlier) affecting search.asp via the Search parameter. The issue allows remote attackers to inject arbitrary script/HTML. The provided documents do not specify a patch or workaround. No exploitation details are given in the...
CVE-2003-1212
MaxWebPortal 1.30 allows remote attackers to perform unauthorized actions by modifying hidden form fields, such as the 1 news, 2 lock, or 3 allmem fields in the 'start new topic' HTML page...
CVE-2003-1213
The default installation of MaxWebPortal 1.30 stores the portal database under the web document root with insecure access control, which allows remote attackers to obtain sensitive information via a direct request to database/db2000.mdb...
CVE-2003-1213
MaxWebPortal 1.30 stores its portal database under the web document root with insecure access control, allowing remote retrieval of database/db2000.mdb via a direct request. This causes partial confidentiality impact (CVSS: AV:N/AC:L/Au:N/C:P/I:P/A:P). The CVE entry provides no exploitation detai...
CVE-2003-1212
MaxWebPortal 1.30 is affected. The vulnerability allows remote attackers to perform unauthorized actions by tampering with hidden form fields (examples: news, lock, allmem) on the 'start new topic' HTML page. Root cause is modification of hidden fields, enabling unauthorized actions. The availabl...
CVE-2005-1561
CVE-2005-1561 affects MaxWebPortal
CVE-2005-1562
Multiple SQL injection vulnerabilities in MaxWebPortal 1.3.5 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 fpassword parameter to incfunctions.asp, 2 txtAddress, 3 message, or 4 subject parameter to postinfo.asp, 5 andor parameter to search.asp, 6 verkey parameter...
CVE-2005-1562
CVE-2005-1562 affects MaxWebPortal 1.3.5 and earlier. The vulnerability is due to multiple SQL injection flaws in ASP components, allowing remote attackers to execute arbitrary SQL commands via specific parameters: fpassword (inc_functions.asp), txtAddress, message, or subject (post_info.asp), an...