CVE-2014-2341

Session fixation vulnerability in CubeCart before 5.2.9 allows remote attackers to hijack web sessions via the PHPSESSID parameter...

Session fixation

Session fixation vulnerability in CubeCart before 5.2.9 allows remote attackers to hijack web sessions via the PHPSESSID parameter...

CVE-2014-2341

CubeCart prior to version 5.2.9 is vulnerable to a session-fixation flaw where an attacker can hijack a user session via the PHPSESSID parameter. The vulnerability stems from inadequate session protection (the only guard referenced is the User-Agent header in 5.2.8); PoCs show manipulating the PH...

CVE-2014-2341

Session fixation vulnerability in CubeCart before 5.2.9 allows remote attackers to hijack web sessions via the PHPSESSID parameter...

Localize: Information Disclosure (Directory Structure)

The /var/www/ directory structure is exposed if you add "" to the PHPSESSID in the cookie. Request: GET / HTTP/1.1 Host: www.localize.io Accept: / Accept-Language: en User-Agent: Mozilla/5.0 compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0 Connection: close Referer:...

CubeCart 5.2.8 - Session Fixation

Exploit Title: CubeCart 5.2.8 Session Fixation Exploit Author: James Sibley absane Blog: http://www.pentester.co Download link: http://www.cubecart.com/download/5.2.8/zip Discovery date: March 14th, 2014 Vendor notified: March 15th, 2014 Vendor fixed: April 10th, 2014 Vendor ack:...

CubeCart 5.2.8 - Session Fixation

Exploit for php platform in category web applications Exploit Title: CubeCart 5.2.8 Session Fixation Exploit Author: James Sibley absane Blog: http://www.pentester.co Download link: http://www.cubecart.com/download/5.2.8/zip Discovery date: March 14th, 2014 Vendor notified: March 15th, 2014 Vendo...

CubeCart 5.2.8 - Session Fixation

CubeCart 5.2.8 - Session Fixation Exploit Title: CubeCart 5.2.8 Session Fixation Exploit Author: James Sibley absane Blog: http://www.pentester.co Download link: http://www.cubecart.com/download/5.2.8/zip Discovery date: March 14th, 2014 Vendor notified: March 15th, 2014 Vendor fixed: April 10th,...

UAG-CMS Session Fixation

Exploit Title: UAG-CMS Session Fixation Script Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://julienetnel.github.io/inu/ Tested on: Windows Category: webapps Google Dork: intext:"UAG CMS" + Exploit : http:///UAG-CMS/admin/identification.php Discovered by: Scripting...

ChatNess 2.5 Session Fixation

Exploit Title: ChatNess 2.5 Session Fixation Script Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://www.chatness.us Version : 2.5 Tested on: Windows Category: webapps Google Dork: intext:"Powered by Chatness" + Exploit : http:///chatness/chatness/chat.php Discovered by: Scripting...

ZPanel 10.0.0.2 htpasswd Module Username Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "ZPanel 10.0.0.2...

Design/Logic Flaw

PluXml before 5.1.6 allows remote attackers to obtain the installation path via the PHPSESSID...

CVE-2012-4674

PluXml before 5.1.6 is vulnerable: remote attackers can obtain the installation path via the PHPSESSID. Root cause is improper handling of PHPSESSID leading to path disclosure. Affected software: PluXml (versions prior to 5.1.6). Impact stated: potential information disclosure of installation pat...

CVE-2012-4674

Removed by vendor...

CVE-2012-4257

Yaqas Yet Another Question & Answer System 1.0 Alpha 1 allows remote attackers to obtain sensitive information via an invalid character in the PHPSESSID, which reveals the installation path in an error message...

Design/Logic Flaw

Yaqas Yet Another Question & Answer System 1.0 Alpha 1 allows remote attackers to obtain sensitive information via an invalid character in the PHPSESSID, which reveals the installation path in an error message...

CVE-2012-4257

Yaqas Yet Another Question & Answer System 1.0 Alpha 1 allows remote attackers to obtain sensitive information via an invalid character in the PHPSESSID, which reveals the installation path in an error message...

freepost 0.1 r1 - Multiple Vulnerabilities

Exploit FreePost 0.1 R1 SQL Injection Date: June 6nd 2012 Author: ThE g0bL!N Version: 0.1 R1 Vendor Url: http://www.phpbrasil.com/script/dYRoLbwWuzR/freepost-01-r1 Tested on: Xp Service Pack 2 Greets To : Lider Pirata , Yassine Tablouche , Ilyes , Bilal , Habib, Djamal , Boukhors .. etc Exploit:...

freepost 0.1 r1 - Multiple Vulnerabilities

freepost 0.1 r1 - Multiple Vulnerabilities Exploit FreePost 0.1 R1 SQL Injection Date: June 6nd 2012 Author: ThE g0bL!N Version: 0.1 R1 Vendor Url: http://www.phpbrasil.com/script/dYRoLbwWuzR/freepost-01-r1 Tested on: Xp Service Pack 2 Greets To : Lider Pirata , Yassine Tablouche , Ilyes , Bilal ...

Strato Newsletter Manager Directory Traversal

STRATO Newsletter Manager is vulnerable against Directory Traversal Vendor: www.strato-cgi.de Google Dork: inurl:"newsletter.php.cgi" Exploit: http://server/cgi-bin/newsletter.php.cgi?PHPSESSID=af92ed633ae0d06d1e24d22520f709f7&action=nlshow&nl=../../../../../../../../../../../../../../etc/passwd...