2195 matches found
PHP-Stats 0.1.9.1b - ip SQL Injection
PHP-Stats 0.1.9.1b - ip SQL Injection 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex =...
mAlbum v0.3 admin by default user/pass
mAlbum v0.3 admin by default user/pass By : sn0oPy Risk : high exploit : at http://www.target.ma/malbum/index.php when private images Login : login Password : pass after login, you can creat new admin account, delete it,... Dork : inurl:"malbum/" Default user/pass present here :...
VicFTPS < 5.0 (CWD) Remote Buffer Overflow Exploit PoC
No description provided by source. / VicFTPs Server CWD Remote Buffer Overflow Vulnerability DoS Proof of concept r0ut3r writ3r at gmail.com Thanks to: Marsu Marsupilamipowa at hotmail.fr for helping me out with this vulnerability. Greets Marsu, and Timq. Description: Sending a long argument to C...
CVE-2007-0926: Undefined Security Weakness
The dologin function in guestbook.php in KvGuestbook 1.0 Beta allows remote attackers to gain administrative privileges, probably via modified $mysql'pass' and $gbpass variables...
Unfixed XSS vulnerability at www.mix.fm
Security researcher DerickTham, has submitted on 02/12/2007 a cross-site-scripting XSS vulnerability affecting www.mix.fm, which at the time of submission ranked 99862 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/12/2007. It is currently...
Cross site scripting
Cross-site scripting XSS vulnerability in the IFrame module before 03.02.01 for DotNetNuke DNN allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "Pass through values."...
Extcalendar <= 2 (profile.php) Remote User Pass Change Exploit
No description provided by source. form name="userform" action="http://target/register.php" method="post" input name="step" type="hidden" value="regform" tr td class='tableh2' colspan='2'Account Information/td /tr tr td class='tableb' width='160'Username/td td class='tableb' /td /tr tr td...
CVE-2007-0660: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the IFrame module before 03.02.01 for DotNetNuke DNN allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "Pass through values."...
Extcalendar 2 - profile.php Remote User Pass Change
Extcalendar 2 - profile.php Remote User Pass Change Account Information Username Password Confirm Password E-mail Address Other Details First Name Last Name Home page td class='t...
ACGVannu <= 1.3 (index2.php) Remote User Pass Change Vulnerability
Title : ACGVannu = 1.3 index2.php Remote User Pass Change Vulnerability Author : ajann Contact : : S.Page : http://acgv.free.fr $$ : Free REMOTE PASS CHANGE http://target/path//index2.php ID VARIABLE Example: ID=USER ID 167...
ACGVannu <= 1.3 (index2.php) Remote User Pass Change Vulnerability
No description provided by source. Title : ACGVannu = 1.3 index2.php Remote User Pass Change Vulnerability Author : ajann Contact : : S.Page : http://acgv.free.fr $$ : Free REMOTE PASS CHANGE http://target/path//index2.php ID VARIABLE Example: ID=USER ID 167...
ACGVannu <= 1.3 (index2.php) Remote User Pass Change Vulnerability
Exploit for unknown platform in category web applications ================================================================== ACGVannu = 1.3 index2.php Remote User Pass Change Vulnerability ================================================================== Title : ACGVannu = 1.3 index2.php Remote...
ACGVannu 1.3 - index2.php Remote User Pass Change
ACGVannu 1.3 - index2.php Remote User Pass Change Title : ACGVannu = 1.3 index2.php Remote User Pass Change Vulnerability Author : ajann Contact : : S.Page : http://acgv.free.fr $$ : Free REMOTE PASS CHANGE http://target/path//index2.php ID VARIABLE Example: ID=USER ID 167...
ACGVannu <= 1.3 (index2.php) Remote User Pass Change Vulnerability
No description provided by source. Title : ACGVannu = 1.3 index2.php Remote User Pass Change Vulnerability Author : ajann Contact : : S.Page : http://acgv.free.fr $$ : Free REMOTE PASS CHANGE http://target/path//index2.php ID VARIABLE Example: ID=USER ID 167...
ACGVannu 1.3 - 'index2.php' Remote User Pass Change
Title : ACGVannu = 1.3 index2.php Remote User Pass Change Vulnerability Author : ajann Contact : : S.Page : http://acgv.free.fr $$ : Free REMOTE PASS CHANGE http://target/path//index2.php ID VARIABLE Example: ID=USER ID 167...
Easy File Sharing FTP Server PASS Command Overflow
The remote host appears to be using Easy File Sharing FTP Server, an FTP server for Windows. The version of Easy File Sharing FTP Server installed on the remote host contains a stack-based buffer overflow vulnerability that can be exploited by an unauthenticated attacker with a specially crafted...
sNews SNews.PHP验证绕过漏洞
sNews是一款基于PHP的WEB应用程序。 sNews不正确过滤用户提交的输入，远程攻击者可以利用漏洞绕过验证，获得管理员的访问。 问题是'SNews.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意数据作为参数，可导致重设管理员密码，获得对应用程序的控制。 sNews sNews 1.5.30 sNews sNews 1.5.29 目前没有解决方案提供： http://www.solucija.com/home/snews/ ?php printr'...
sNews <= 1.5.30 Remote Reset Admin Pass / Command Exec Exploit
Exploit for unknown platform in category web applications ============================================================== sNews = 1.5.30 Remote Reset Admin Pass / Command Exec Exploit ============================================================== ?php printr'...
CVE-2004-2675: Undefined Security Weakness
ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to cause a denial of service crash via a SITE PASS command with a long password parameter, which causes the database to be corrupted...
Enthrallweb eNews 1.0 Remote User Pass Change Exploit
Exploit for unknown platform in category web applications ===================================================== Enthrallweb eNews 1.0 Remote User Pass Change Exploit ===================================================== User Id: PASSWORD: FIRST: LAST:/fo...