Lucene search
+L

2190 matches found

zdt
zdt
•added 2006/06/01 12:00 a.m.•48 views

aspWebLinks 2.0 Remote SQL Injection / Admin Pass Change Exploit

Exploit for unknown platform in category web applications ================================================================ aspWebLinks 2.0 Remote SQL Injection / Admin Pass Change Exploit ================================================================ AspWebLink 2.0 Remote Admin Pass Change...

7.1AI score
SaveExploits0
securityvulns
securityvulns
•added 2006/05/30 12:00 a.m.•32 views

Speedy ASP Forum(profileupdate.asp) User Pass Change Exploit

Title : Speedy ASP Forumprofileupdate.asp User Pass Change Exploit Dork : Copyright © ASPwebSoft Author : ajann greetz : Nukedx Code: Save to .htm titlePass Change/title script language="JavaScript" //Coded ajann function islemKontrol ifdocument.InputForm.name.value=="" ||...

7.2AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2006/05/29 12:00 a.m.•41 views

SpeedyASPForum.txt

Title : Speedy ASP Forumprofileupdate.asp User Pass Change Exploit Dork : Copyright © ASPwebSoft Author : ajann greetz : Nukedx Code: Save to .htm Pass Change //Coded ajann function islemKontrol ifdocument.InputForm.name.value=="" || document.InputForm.email.value=="" ||...

7.4AI score
SaveExploits0
seebug.org
seebug.org
•added 2006/05/29 12:00 a.m.•36 views

Speedy ASP Forum (profileupdate.asp) User Pass Change Exploit

No description provided by source. !DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"htmlheadMETA http-equiv="Content-Type" content="text/html; charset=utf-8"/headbody div bgcolor="000000" form name="InputForm" method="post" target="blank" onsubmit="return window.confirm"You are...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2006/05/29 12:00 a.m.•63 views

Speedy ASP Forum - 'profileupdate.asp' User Pass Change

Speedy Forum User Pass Change // ajannUser Name : Example: Surname Name User Mail : Example: [email protected] User Ýd : Example: Ýd:1 Admin User Country : Choose Country Turkey Example: Turkey User Pass /f...

10CVSS5.8AI score0.04059EPSS
SaveExploits2
securityvulns
securityvulns
•added 2006/05/09 12:00 a.m.•30 views

X-POLL admin By-Pass

google dork: inurl:x-poll and add to /admin/images/add.php , upload to shell, and mass deface is server www.ayyildiz.org...

1.5AI score
SaveExploits0
securityvulns
securityvulns
•added 2006/05/09 12:00 a.m.•35 views

Phil's Bookmark script admin By-pass

google dork : "Phil's Bookmark" and lasth path add to "admin.php?edit=item id" example: www.site.com/bookmarks/admin.php?edit=1 www.ayyildiz.org...

1.7AI score
SaveExploits0
Prion
Prion
•added 2006/05/05 12:46 p.m.•24 views

Buffer overflow

Buffer overflow in KarjaSoft Sami FTP Server 2.0.2 and earlier allows remote attackers to execute arbitrary code via a long 1 USER or 2 PASS command...

6.4CVSS8.2AI score0.58856EPSS
SaveExploits2References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/05/05 12:00 a.m.•4 views

CVE-2006-2212: Undefined Security Weakness

Buffer overflow in KarjaSoft Sami FTP Server 2.0.2 and earlier allows remote attackers to execute arbitrary code via a long 1 USER or 2 PASS command...

6.4CVSS6.5AI score0.58856EPSS
SaveExploits2References1
NVD
NVD
•added 2006/05/04 12:38 p.m.•30 views

CVE-2006-2173

Buffer overflow in FileZilla FTP Server 2.2.22 allows remote authenticated attackers to cause a denial of service and possibly execute arbitrary code via a long 1 PORT or 2 PASS followed by the MLSD command, or 2 the remote server interface, as demonstrated by the Infigo FTPStress Fuzzer...

6.4CVSS7.7AI score0.06499EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/05/04 12:00 a.m.•4 views

CVE-2006-2173: Undefined Security Weakness

Buffer overflow in FileZilla FTP Server 2.2.22 allows remote authenticated attackers to cause a denial of service and possibly execute arbitrary code via a long 1 PORT or 2 PASS followed by the MLSD command, or 2 the remote server interface, as demonstrated by the Infigo FTPStress Fuzzer...

6.4CVSS6.4AI score0.06499EPSS
SaveExploits1References1
Packet Storm
Packet Storm
•added 2006/04/29 12:00 a.m.•30 views

ibp-2.1.4-xpl.txt

This exploit has only been tested on 2.1.4. Others are most likely vulnerable but have not yet been tested. Simple SQL injection in funcmsg.php on line 448. tobyid is not properly sanitized. It's passed to the class via an instance of the messenger class, which takes it from the ipb sanitized inp...

7.4AI score
SaveExploits0
securityvulns
securityvulns
•added 2006/04/28 12:00 a.m.•49 views

SQL injection exploit IPB <= 2.1.4

This exploit has only been tested on 2.1.4. Others are most likely vulnerable but have not yet been tested. Simple SQL injection in funcmsg.php on line 448. tobyid is not properly sanitized. It's passed to the class via an instance of the messenger class, which takes it from the ipb sanitized inp...

0.2AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/04/02 12:00 a.m.•4 views

CVE-2006-1586: Undefined Security Weakness

SQL injection vulnerability in adminlogin.asp in ISP of Egypt SiteMan allows remote attackers to execute arbitrary SQL commands via the pass parameter...

7.5CVSS6.4AI score0.01233EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/03/19 12:00 a.m.•6 views

CVE-2006-1259: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Maian Support 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 email or 2 pass parameter to admin/index.php...

7.5CVSS6.4AI score0.02149EPSS
SaveExploits1References1
Prion
Prion
•added 2006/03/02 11:02 p.m.•28 views

Sql injection

SQL injection vulnerability in vuBB 0.2 allows remote attackers to execute arbitrary SQL commands via the pass parameter in a cookie...

7.5CVSS8.7AI score0.02513EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/03/02 12:00 a.m.•3 views

CVE-2006-0962: Undefined Security Weakness

SQL injection vulnerability in vuBB 0.2 allows remote attackers to execute arbitrary SQL commands via the pass parameter in a cookie...

7.5CVSS6.4AI score0.02513EPSS
SaveExploits1References1
Prion
Prion
•added 2006/01/22 8:03 p.m.•20 views

Command injection

Helmsman Research aka CoolUtils HomeFtp 1.1 allows remote attackers to cause an unspecified denial of service via a long USER command combined with a long PASS command and an NLST command...

5CVSS7.3AI score0.03134EPSS
SaveExploits2References5Affected Software1
CVE
CVE
•added 2006/01/22 8:00 p.m.•64 views

CVE-2006-0355

CVE-2006-0355 affects Helmsman Research (aka CoolUtils) HomeFtp 1.1. An attacker remotely can cause a denial of service by sending a long USER command followed by a long PASS command and an NLST command. The impact is listed as partial availability (unspecified DoS). The provided documents show a...

5CVSS6.8AI score0.03134EPSS
SaveExploits2References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/01/22 12:00 a.m.•4 views

CVE-2006-0356: Undefined Security Weakness

Ari Pikivirta Home Ftp Server 1.0.7 allows remote attackers to cause an unspecified denial of service via a long USER command combined with a long PASS command...

5CVSS5.9AI score0.01679EPSS
SaveExploits1References1
Rows per page
Query Builder