Scripteen Free Image Hosting Script 2.3 SQL Injection

=================== Scripteen Free Image Hosting Script v2.3 SQL Injection vulnerable =================== The vulnerable: header.php line 53-62 $userid=$SESSION'userid'; $usergid=$SESSION'usergid'; if !$userid || empty$userid || $userid=="" $userid = $COOKIE'cookid'; if !$usergid || empty$usergid...

Password Hash Grabber

Added: 05/27/2009 Background This tool grabs the windows SAM file or password hashes of the target. The SAM file / password hashes can be viewed in the exploit tools previous results section. Results may be used with third party programs to obtain passwords in plain text. Limitations Password Has...

CVE-2009-1460

razorCMS before 0.4 uses weak permissions for 1 admin/core/adminconfig.php, which allows local users to obtain the administrator's password hash and FTP user credentials; and 2 the root directory, 3 datastore/, and 4 admin/core/, which allows local users to have an unspecified impact...

Oracle存在多个安全漏洞

CNCAN ID：CNCAN-2009041604 多个Oracle产品存在漏洞，可导致SQL注入，泄漏敏感信息或使攻击者破坏系统： -Oracle Process Manager和Notification opmn守护程序存在格式串错误，提交特殊构建的POST请求给port 6000/TCP可导致任意代码执行。 -传递给"DBMSAQIN"的输入在使用前缺少过滤，可导致注入任意SQL代码。 -Oracle数据库包含的Application Express组件存在错误，非特权用户可以获得"LOWS030000.WWVFLOWUSER"中的APEX密码HASH。 目前还存在多个未知漏洞。...

w3bcms Gaestebuch 3.0.0 - Blind SQL Injection

w3bcms Gaestebuch 3.0.0 - Blind SQL Injection !/usr/bin/perl use LWP::UserAgent; use HTTP::Request::Common qwPOST; use Getopt::Long; '/ -.- ------------------oOO------OOo----------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security...

CVE-2009-1283

glFusion before 1.1.3 performs authentication with a user-provided password hash instead of a password, which allows remote attackers to gain privileges by obtaining the hash and using it in the glfpassword cookie, aka "User Masquerading." NOTE: this can be leveraged with a separate SQL injection...

Sql injection

glFusion before 1.1.3 performs authentication with a user-provided password hash instead of a password, which allows remote attackers to gain privileges by obtaining the hash and using it in the glfpassword cookie, aka "User Masquerading." NOTE: this can be leveraged with a separate SQL injection...

CVE-2009-1283

glFusion before 1.1.3 performs authentication with a user-provided password hash instead of a password, which allows remote attackers to gain privileges by obtaining the hash and using it in the glfpassword cookie, aka "User Masquerading." NOTE: this can be leveraged with a separate SQL injection...

CVE-2009-1283

CVE-2009-1283 affects glFusion before 1.1.3. Authentication can be bypassed by using a user-provided password hash in the glf_password cookie, enabling remote privilege gain (User Masquerading). Reports also describe a separate SQL injection in lib-session.php that can steal hashes via the sessio...

CVE-2008-6537

CVE-2008-6537 affects LightNEasy (LightNEasy No database version 1.2) and stems from LightNEasy.php: the setup action “do” clears the parameter from $_GET but later reads via $_REQUEST, allowing remote attackers to obtain the administrator password hash. The vulnerability’s impact is partial conf...

PHPFootball 'filter.php' Password Hash Information Disclosure Vulnerability

PHPFootball is prone to an information-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain sensitive information that may lead to further attacks. PHPFootball 1.6 is vulnerable; other versions may also be affecte...

pPIM 1.0 Multiple Remote Vulnerabilities

No description provided by source. - -= pPIM Multiple Vulnerabilities =- Version Tested: pPIM 1.0 Vendor notified Full details can also be found at http://www.lampsecurity.org/node/18 Author: Justin C. Klein Keane [email protected] Description pPIM...

pPIM 1.0 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ======================================== pPIM 1.0 Multiple Remote Vulnerabilities ======================================== - -= pPIM Multiple Vulnerabilities =- Version Tested: pPIM 1.0 Vendor notified Author: Justin C. Klein Keane...

pPIM 1.0 - Multiple Vulnerabilities

pPIM 1.0 - Multiple Vulnerabilities - -= pPIM Multiple Vulnerabilities =- Version Tested: pPIM 1.0 Vendor notified Full details can also be found at http://www.lampsecurity.org/node/18 Author: Justin C. Klein Keane Description pPIM http://www.phlatline.org/index.php?page=prod-ppim is a Personal...

eVision CMS 2.0 - SQL Injection

eVision CMS 2.0 - SQL Injection --+++============================================================+++-- --+++====== eVision CMS 78 79 80 81 82 '.settext$row$GET'field'.' 83 84 '; + It prints admin's password hashed: + /iframe.php?field=pass&module=users&id=1 milw0rm.com 2009-01-30...

Improper access control

Ryneezy phoSheezy 0.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the file containing the administrator's password hash via a direct request for config/password...

CVE-2009-0250

Ryneezy phoSheezy 0.2 is affected by CVE-2009-0250: the application stores sensitive information under the web root with insufficient access control, allowing remote attackers to download the file containing the administrator's password hash via a direct request for config/password. The connected...

RiotPix <= 0.61 (forumid) Blind SQL Injection Exploit

No description provided by source. ?php / $Id: riotpix-0.61.txt,v 0.1 2009/01/06 03:47:30 cOndemned Exp $ RiotPix = 0.61 forumid Blind SQL Injection Exploit Bug found && Exploited by cOndemned Download : http://www.riotpix.com/download/riotpix061.zip Description : It's just simple Blind SQL...

RiotPix <= 0.61 (forumid) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ===================================================== RiotPix \n\n", $argv0; exit; list$sploit, $target, $username, $topicid = $argv; $charsArr = array48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 97, 98, 99, 100, 101, 102; $pos = 1; echo "...

RiotPix 0.61 - forumid Blind SQL Injection

RiotPix 0.61 - forumid Blind SQL Injection \n\n", $argv0; exit; list$sploit, $target, $username, $topicid = $argv; $charsArr = array48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 97, 98, 99, 100, 101, 102; $pos = 1; echo " Password Hash : "; while$pos != 33 for$i = 0; $i = count$charsArr; $i++ $query =...