Lucene search
+L

4125 matches found

exploitpack
exploitpack
•added 2008/11/27 12:00 a.m.•24 views

Ocean12 Membership Manager Pro - Authentication Bypass

Ocean12 Membership Manager Pro - Authentication Bypass ! ! ! OOOO O OOOOOOOOO ! ! O O O O O ! ! O O O ! ! O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! ! O OOO OOO O O O O OO O O O O OO O O O ! ! O OO OO O O OOOOOO O O O O O O OOOOOO ! ! O O OOOO O O O O O O O O O O O ! !...

0.7AI score
SaveExploits0
NVD
NVD
•added 2008/11/18 11:30 a.m.•27 views

CVE-2008-5128

Ocean12 Membership Manager Pro stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to o12member.mdb...

5CVSS6.2AI score0.01324EPSS
SaveExploits1References4
Prion
Prion
•added 2008/11/18 11:30 a.m.•22 views

Improper access control

Ocean12 Membership Manager Pro stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to o12member.mdb...

5CVSS6.7AI score0.01324EPSS
SaveExploits1References4
CVE
CVE
•added 2008/11/18 11:00 a.m.•55 views

CVE-2008-5128

CVE-2008-5128 relates to Ocean12 Membership Manager Pro, where sensitive information is stored under the web root with insufficient access control. The vulnerability allows a remote attacker to obtain the contents of o12member.mdb via a direct request, indicating a disclosure risk due to improper...

5CVSS6.2AI score0.01324EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2008/11/18 11:00 a.m.•38 views

CVE-2008-5128

Ocean12 Membership Manager Pro stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to o12member.mdb...

6.2AI score0.01324EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/11/18 12:00 a.m.•6 views

CVE-2008-5128: Undefined Security Weakness

Ocean12 Membership Manager Pro stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to o12member.mdb...

5CVSS5.9AI score0.01324EPSS
SaveExploits1References2
NVD
NVD
•added 2008/11/13 11:30 a.m.•25 views

CVE-2008-5054

Multiple SQL injection vulnerabilities in Develop It Easy Membership System 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 email and 2 password parameters to customerlogin.php and the 3 username and 4 userpass parameters to admin/index.php. NOTE: some of these details are...

7.5CVSS8.6AI score0.00973EPSS
SaveExploits2References4
Prion
Prion
•added 2008/11/13 11:30 a.m.•29 views

Sql injection

Multiple SQL injection vulnerabilities in Develop It Easy Membership System 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 email and 2 password parameters to customerlogin.php and the 3 username and 4 userpass parameters to admin/index.php. NOTE: some of these details are...

7.5CVSS9.4AI score0.00973EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
•added 2008/11/13 11:00 a.m.•40 views

CVE-2008-5054

Multiple SQL injection vulnerabilities in Develop It Easy Membership System 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 email and 2 password parameters to customerlogin.php and the 3 username and 4 userpass parameters to admin/index.php. NOTE: some of these details are...

8.6AI score0.00973EPSS
SaveExploits2References4
CVE
CVE
•added 2008/11/13 11:00 a.m.•68 views

CVE-2008-5054

CVE-2008-5054 : Affects Develop It Easy Membership System 1.3. The vulnerability is a set of SQL injection flaws that allow remote attackers to execute arbitrary SQL commands by supplying crafted inputs to specific parameters: (1) email and (2) password in customer_login.php and (3) user_name and...

7.5CVSS8.7AI score0.00973EPSS
SaveExploits2References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/11/13 12:00 a.m.•8 views

CVE-2008-5054: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Develop It Easy Membership System 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 email and 2 password parameters to customerlogin.php and the 3 username and 4 userpass parameters to admin/index.php. NOTE: some of these details are...

7.5CVSS6.4AI score0.00973EPSS
SaveExploits2References2
Packet Storm
Packet Storm
•added 2008/11/07 12:00 a.m.•25 views

developms-sql.txt

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

7.4AI score
SaveExploits0
exploitpack
exploitpack
•added 2008/11/06 12:00 a.m.•18 views

DevelopItEasy Membership System 1.3 - Authentication Bypass

DevelopItEasy Membership System 1.3 - Authentication Bypass || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | //...

1AI score
SaveExploits0
seebug.org
seebug.org
•added 2008/11/06 12:00 a.m.•25 views

DevelopItEasy Membership System 1.3 (Auth Bypass) SQL Injection

No description provided by source. || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2008/11/06 12:00 a.m.•35 views

DevelopItEasy Membership System 1.3 - Authentication Bypass

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

7.5CVSS5.8AI score0.00973EPSS
SaveExploits2
Exploit DB
Exploit DB
•added 2008/09/27 12:00 a.m.•34 views

Membership Script - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/31441/info Membership Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

5.8AI score
SaveExploits0
exploitpack
exploitpack
•added 2008/09/27 12:00 a.m.•18 views

Membership Script - Multiple Cross-Site Scripting Vulnerabilities

Membership Script - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/31441/info Membership Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to...

SaveExploits0
Packet Storm
Packet Storm
•added 2008/09/15 12:00 a.m.•34 views

awebsiteforall-sql.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com d3hydr8 - rsauron - baltazar - sinner01 - r45c4l - beenu and all darkc0de members Author: P47r1ck Home : www.darkc0de.com Email :...

7.4AI score
SaveExploits0
NVD
NVD
•added 2008/08/27 8:41 p.m.•23 views

CVE-2008-3789

Samba 3.2.0 uses weak permissions 0666 for the 1 groupmapping.tdb and 2 groupmapping.ldb files, which allows local users to modify the membership of Unix groups...

2.1CVSS6.1AI score0.00528EPSS
SaveExploits1References8
Cvelist
Cvelist
•added 2008/08/27 8:00 p.m.•40 views

CVE-2008-3789

Samba 3.2.0 uses weak permissions 0666 for the 1 groupmapping.tdb and 2 groupmapping.ldb files, which allows local users to modify the membership of Unix groups...

5.9AI score0.00528EPSS
SaveExploits1References8
Rows per page
Query Builder