4125 matches found
CVE-2008-3789
Samba 3.2.0 uses weak permissions 0666 for the 1 groupmapping.tdb and 2 groupmapping.ldb files, which allows local users to modify the membership of Unix groups...
PHP AGTC-Membership System <= 1.1a Arbitrary Add-Admin Exploit
No description provided by source. !/usr/bin/perl Note: adduser.php is accessable to a guest/any-user, but if you access through a browser you cant add admin, theres a hidden POST buried in the script, which contains the userlevel. Note: alot of sites run this script and they remove the "powered...
phpagtc-admin.txt
!/usr/bin/perl Note: adduser.php is accessable to a guest/any-user, but if you access through a browser you cant add admin, theres a hidden POST buried in the script, which contains the userlevel. Note: alot of sites run this script and they remove the "powered by" dork. Also you can get access t...
PHP-AGTC Membership System 1.1a - Arbitrary Add Admin
!/usr/bin/perl Note: adduser.php is accessable to a guest/any-user, but if you access through a browser you cant add admin, theres a hidden POST buried in the script, which contains the userlevel. Note: alot of sites run this script and they remove the "powered by" dork. Also you can get access t...
PHP-AGTC Membership System 1.1a - Arbitrary Add Admin
PHP-AGTC Membership System 1.1a - Arbitrary Add Admin !/usr/bin/perl Note: adduser.php is accessable to a guest/any-user, but if you access through a browser you cant add admin, theres a hidden POST buried in the script, which contains the userlevel. Note: alot of sites run this script and they...
PHP AGTC-Membership System <= 1.1a Arbitrary Add-Admin Exploit
Exploit for unknown platform in category web applications ============================================================== PHP AGTC-Membership System ; print "\nAdmin Usernamecreate's your admin username: "; chompmy $usr=; print "\nAdmin Passwordcreate's your admin password: "; chompmy $pwd=; my...
CVE-2008-1592
MQSeries 5.1 in IBM WebSphere MQ 5.1–5.3.1 on HP NonStop and Tandem NSK allows local users to bypass access restrictions for administrative tasks via runmqsc, without requiring mqm group membership (Pathway panels). Impact is partial confidentiality, integrity, and availability. No explicit remed...
Hundred at buy e-Commerce system several vulnerability analysis-vulnerability warning-the black bar safety net
Author: ninty The company allows to go online to find some ready-made code. After doing the Site any good direct copy of. This find could spit blood. I will only find injection and cross-site vulnerabilities. Which bit of the cow anyone tell me what the more Common Vulnerabilities? A, injection 1...
DomPHP 0.81 - 'cat' SQL Injection
--==+================================================================================+==-- --==+ DomPHP v0.81 Remote Sql Injection +==-- --==+================================================================================+==-- Author: MhZ91 Title: DomPHP v0.81 Remote Sql Injection Download:...
Authentication flaw
adduser.php in PHP-AGTC Membership AGTC-Membership System 1.1a does not require authentication, which allows remote attackers to create accounts via a modified form, as demonstrated by an account with admin userlevel 4 privileges...
CVE-2007-5752
adduser.php in PHP-AGTC Membership AGTC-Membership System 1.1a does not require authentication, which allows remote attackers to create accounts via a modified form, as demonstrated by an account with admin userlevel 4 privileges...
CVE-2007-5752
adduser.php in PHP-AGTC Membership AGTC-Membership System 1.1a does not require authentication, which allows remote attackers to create accounts via a modified form, as demonstrated by an account with admin userlevel 4 privileges...
CVE-2007-5752
CVE-2007-5752 affects the PHP-AGTC Membership System (AGTC-Membership) 1.1a. The vulnerability is in adduser.php, which does not require authentication, allowing remote attackers to create accounts via a modified form, demonstrated by an account with admin (userlevel 4) privileges. Documented imp...
PHP-AGTC membership system 1.1a Remote Add Admin Exploit
No description provided by source. !-- - Product : AGTC-Membership system - Version : 1.1a - Website : http://www.agtc.co.uk - Author : 0x90 - Homepage: WwW.0x90.CoM.Ar - Contact : Gunsat0x90dotcomdotar - Problem : Admin Added Access. -- form name="form1" method="post"...
CVE-2007-5752: Improper Authentication
adduser.php in PHP-AGTC Membership AGTC-Membership System 1.1a does not require authentication, which allows remote attackers to create accounts via a modified form, as demonstrated by an account with admin userlevel 4 privileges...
PHP-AGTC Membership System 1.1a - Remote Add Admin
AGTC-Membership system v1.1a adduser Remote Add Admin Exploit User Name: Password: Email Address: milw0rm.com 2007-10-30...
PHP-AGTC membership system 1.1a Remote Add Admin Exploit
Exploit for unknown platform in category web applications ======================================================== PHP-AGTC membership system 1.1a Remote Add Admin Exploit ======================================================== AGTC-Membership system v1.1a adduser Remote Add Admin Exploit User...
PHP-AGTC Membership System 1.1a - Remote Add Admin
PHP-AGTC Membership System 1.1a - Remote Add Admin AGTC-Membership system v1.1a adduser Remote Add Admin Exploit User Name: Password: Email Address: milw0rm.com 2007-10-30...
agtc-addadmin.txt
AGTC-Membership system v1.1a adduser Remote Add Admin Exploit User Name: Password: Email Address:...
AGTC-Membership system v1.1a (adduser) Remote Add Admin Exploit
!-- - Product : AGTC-Membership system - Version : 1.1a - Website : http://www.agtc.co.uk - Author : 0x90 - HomePage : WwW.0x90.CoM.Ar - Contact : Gunsat0x90dotcomdotar - Problem : Admin Added Access. -- form name="form1" method="post" action="http://target/adduser.php" h3...