2377 matches found
CVE-2007-5026
dBlog CMS, probably 2.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request for dblog.mdb...
CVE-2007-5026
dBlog CMS, probably 2.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request for dblog.mdb...
CVE-2007-5026: Undefined Security Weakness
dBlog CMS, probably 2.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request for dblog.mdb...
Flip <= 3.0 Remote Password Hash Disclosure Exploit
Exploit for unknown platform in category web applications =================================================== Flip = 0; $data = substr$data, $index1+4; $index1 = 0; printf "%-20s %-32s\n", "username", "md5 hash"; while$index1 = index$data, "\n" = 0 my $hash = substr$data, 0, 32; my $index2 =...
Improper access control
CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin name and MD5 password hash via a direct request for base/usr/0.php...
CVE-2007-4937
CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin name and MD5 password hash via a direct request for base/usr/0.php...
CVE-2007-4937
CVE-2007-4937 affects CS Guestbook. The vulnerability arises from insufficient access control that allows remote attackers to retrieve sensitive data (admin name and MD5 password hash) by directly requesting base/usr/0.php. The description in connected sources confirms the issue but does not prov...
CVE-2007-4937
CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin name and MD5 password hash via a direct request for base/usr/0.php...
vBulletin V3.6.8 XSS Password Md5 Hash
Discovred By : Hasadya Raed ---------------- Contact : [email protected] ---------------- Script: vBulletin V3.6.8ulletin V3.6.8 ---------------- Dork: vBulletin V3.6.8ulletin V3.6.8 ---------------- Exploit : http://www.Victim.com/vBulletin V3.6.8ulletin...
Improper access control
PHPBlogger stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request for data/pref.db. NOTE: this can be easily leveraged for administrative access because composing...
CVE-2007-4157
PHPBlogger stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request for data/pref.db. NOTE: this can be easily leveraged for administrative access because composing...
CVE-2007-4157
PHPBlogger stores sensitive information under the web root with insufficient access control, allowing remote retrieval of data/pref.db. The retrieved database contains the admin password hash, which can be used to craft authentication cookies and gain administrative access without the cleartext p...
CVE-2007-4157: Undefined Security Weakness
PHPBlogger stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request for data/pref.db. NOTE: this can be easily leveraged for administrative access because composing...
PHP-Blogger pref.db Database Information Disclosure
The remote host is running PHP-Blogger, a photo blog script written in PHP. The version of PHP-Blogger installed on the remote host stores configuration information in the file 'data/pref.db' and fails to restrict access to this file. By issuing a direct request for the file, an attacker can gain...
pnphpbb2view-sql.txt
/ i PNphpBB2 "viewforum.php" SQL Injection Blind Password Hash Fishing Exploit i Vulnerable versions: PNphpBB2 You need at least 2 posts in the forum. - Thanks to waraxe for exploit structure... I have saved much time : Tested - Postnuke 0.764 with PNphpBB2 1.2i and MySQL 5.0.42 Maybe with other...
PNphpBB2 <= 1.2i viewforum.php Remote SQL Injection Exploit
No description provided by source. / i PNphpBB2 "viewforum.php" SQL Injection Blind Password Hash Fishing Exploit i Vulnerable versions: PNphpBB2 = 1.2i current last version i Bug discovered by: Coloss i Exploit by: Coloss i Date: 03.07.2007 Notes - You need at least 2 posts in the forum. - Thank...
PNPHPBB2 1.2i - viewforum.php SQL Injection
PNPHPBB2 1.2i - viewforum.php SQL Injection / i PNphpBB2 "viewforum.php" SQL Injection Blind Password Hash Fishing Exploit i Vulnerable versions: PNphpBB2 You need at least 2 posts in the forum. - Thanks to waraxe for exploit structure... I have saved much time : Tested - Postnuke 0.764 with...
PNphpBB2 <= 1.2i viewforum.php Remote SQL Injection Exploit
Exploit for unknown platform in category web applications =========================================================== PNphpBB2 You need at least 2 posts in the forum. - Thanks to waraxe for exploit structure... I have saved much time : Tested - Postnuke 0.764 with PNphpBB2 1.2i and MySQL 5.0.42...
PNPHPBB2 < 1.2i - 'viewforum.php' SQL Injection
/ i PNphpBB2 "viewforum.php" SQL Injection Blind Password Hash Fishing Exploit i Vulnerable versions: PNphpBB2 You need at least 2 posts in the forum. - Thanks to waraxe for exploit structure... I have saved much time : Tested - Postnuke 0.764 with PNphpBB2 1.2i and MySQL 5.0.42 Maybe with other...