CVE-2004-2705

PvPGN (Player vs. Player Gaming Network) is affected by CVE-2004-2705 up to version 1.6.3. The vulnerability allows remote attackers to obtain attributes of arbitrary accounts, including password hashes, by sending certain statsreq packets. The root cause is not explicitly detailed in the provide...

CVE-2004-2705

Unspecified vulnerability in Player vs. Player Gaming Network PvPGN before 1.6.4 allows remote attackers to obtain attributes of arbitrary accounts, including the password hash, via certain statsreq packets...

CVE-2004-2705

Unspecified vulnerability in Player vs. Player Gaming Network PvPGN before 1.6.4 allows remote attackers to obtain attributes of arbitrary accounts, including the password hash, via certain statsreq packets...

CVE-2007-5026

dBlog CMS, probably 2.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request for dblog.mdb...

Improper access control

dBlog CMS, probably 2.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request for dblog.mdb...

CVE-2007-5026

dBlog CMS, probably 2.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request for dblog.mdb...

Flip <= 3.0 Remote Password Hash Disclosure Exploit

Exploit for unknown platform in category web applications =================================================== Flip = 0; $data = substr$data, $index1+4; $index1 = 0; printf "%-20s %-32s\n", "username", "md5 hash"; while$index1 = index$data, "\n" = 0 my $hash = substr$data, 0, 32; my $index2 =...

Improper access control

CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin name and MD5 password hash via a direct request for base/usr/0.php...

CVE-2007-4937

CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin name and MD5 password hash via a direct request for base/usr/0.php...

CVE-2007-4937

CVE-2007-4937 affects CS Guestbook. The vulnerability arises from insufficient access control that allows remote attackers to retrieve sensitive data (admin name and MD5 password hash) by directly requesting base/usr/0.php. The description in connected sources confirms the issue but does not prov...

CVE-2007-4937

CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin name and MD5 password hash via a direct request for base/usr/0.php...

vBulletin V3.6.8 XSS Password Md5 Hash

Discovred By : Hasadya Raed ---------------- Contact : [email protected] ---------------- Script: vBulletin V3.6.8ulletin V3.6.8 ---------------- Dork: vBulletin V3.6.8ulletin V3.6.8 ---------------- Exploit : http://www.Victim.com/vBulletin V3.6.8ulletin...

Improper access control

PHPBlogger stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request for data/pref.db. NOTE: this can be easily leveraged for administrative access because composing...

CVE-2007-4157

PHPBlogger stores sensitive information under the web root with insufficient access control, allowing remote retrieval of data/pref.db. The retrieved database contains the admin password hash, which can be used to craft authentication cookies and gain administrative access without the cleartext p...

CVE-2007-4157

PHPBlogger stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request for data/pref.db. NOTE: this can be easily leveraged for administrative access because composing...

PHP-Blogger pref.db Database Information Disclosure

The remote host is running PHP-Blogger, a photo blog script written in PHP. The version of PHP-Blogger installed on the remote host stores configuration information in the file 'data/pref.db' and fails to restrict access to this file. By issuing a direct request for the file, an attacker can gain...

pnphpbb2view-sql.txt

/ i PNphpBB2 "viewforum.php" SQL Injection Blind Password Hash Fishing Exploit i Vulnerable versions: PNphpBB2 You need at least 2 posts in the forum. - Thanks to waraxe for exploit structure... I have saved much time : Tested - Postnuke 0.764 with PNphpBB2 1.2i and MySQL 5.0.42 Maybe with other...

PNphpBB2 &lt;= 1.2i viewforum.php Remote SQL Injection Exploit

No description provided by source. / i PNphpBB2 "viewforum.php" SQL Injection Blind Password Hash Fishing Exploit i Vulnerable versions: PNphpBB2 = 1.2i current last version i Bug discovered by: Coloss i Exploit by: Coloss i Date: 03.07.2007 Notes - You need at least 2 posts in the forum. - Thank...

PNPHPBB2 1.2i - viewforum.php SQL Injection

PNPHPBB2 1.2i - viewforum.php SQL Injection / i PNphpBB2 "viewforum.php" SQL Injection Blind Password Hash Fishing Exploit i Vulnerable versions: PNphpBB2 You need at least 2 posts in the forum. - Thanks to waraxe for exploit structure... I have saved much time : Tested - Postnuke 0.764 with...

PNphpBB2 <= 1.2i viewforum.php Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =========================================================== PNphpBB2 You need at least 2 posts in the forum. - Thanks to waraxe for exploit structure... I have saved much time : Tested - Postnuke 0.764 with PNphpBB2 1.2i and MySQL 5.0.42...