1871 matches found
Woltlab Burning Board 2.3.1 - 'register.php' SQL Injection
!/usr/bin/perl use strict; use IO::Socket::INET; $| = print " Woltlab Burning Board $addr, PeerPort = $port, Proto = 'tcp', Timeout = 8 or die'- Could not connect to server'; if&test$i, 96 buchstabe formy $c=97;$c103;$c++ if&test$i, $c, 1 print pack'c', $c; last; else zahl print "0-4\n"; formy...
CVE-2005-1516
DList dlist.exe in DMail 3.1a allows remote attackers to bypass authentication, read log files, and shutdown the system via a sendlog command with an incorrect password hash, which is not properly handled by the cmdsendlog function...
CVE-2005-1516
The CVE-2005-1516 issue affects NetWin DMail 3.1a’s DList component. The vulnerability enables a remote attacker to bypass authentication, read log files, and shut down the system by sending a log request (sendlog) with an incorrect password hash, which is not properly handled by the internal _cm...
Multiple Sql injection and XSS in Asp Nuke 0.80 (Working exploits included)
Severity: High Title: Multiple Sql injection and XSS in Asp Nuke 0.80 Working exploits included Date: 22/04/2005 Vendor: Asp Nuke Vendor Website: http://www.aspnuke.com/ Summary: There are, multiple sql injection and xss in asp nuke 0.80. Proof of Concept Exploits:...
Serendipity 0.8beta4 exit.php SQL Injection Exploit
Exploit for unknown platform in category web applications =================================================== Serendipity 0.8beta4 exit.php SQL Injection Exploit =================================================== !/usr/bin/perl Serendipity 0.8beta4 exit.php SQL Injection exploit c ADZ Security...
SGI IRIX 6.5.22 - GR_OSView Information Disclosure
source: https://www.securityfocus.com/bid/13057/info grosview is reported prone to an information disclosure vulnerability. This issue can help a local attacker to obtain sensitive information such as exposing an administrator's password hash and carrying out other attacks. This issue has been...
phpMyFamily 1.4.0 - SQL Injection
phpMyFamily 1.4.0 - SQL Injection !/usr/bin/perl -w phpMyFamily Exploit injection ============================== $banner = "phpMyFamily Exploit injection \n\n============================== \n\nINFGPG-Hacking&Security Research"; Greats: AresU 1st IndoSec Team,ADZ Security Team has discovered bugs...
HRG008.txt
HRG - Hackerlounge Research Group Release: HRG008 Monday 03/01/05 Software PBLang 4.63 sendpm.php reply file read The author can't be held responsible for any damage done by a reader. You have your own resonsibility Please use this document like it's meant to. Vulnerable: PBLang 4.63 and earlier?...
PostNuke < 0.760 RC3 Multiple Vulnerabilities
Binary data 2662.prm...
[ Postnuke all versions + pnphpbb <=1.2 sql injection - jocanor ]
Postnuke all versions + pnphpbb =1.2 sql injection - jocanor Author: Jocanor Date: 01-03-2k5 1. -----------introduction--------. Postnuke is an open source CMS content management system, originally based in php-nuke. www.postnuke.com pnphpbb is a module for postnuke based in popular forum system...
PBLang Bulletin Board System 4.x - 'SendPM.php' Directory Traversal
source: https://www.securityfocus.com/bid/12690/info PBLang is reported prone to a directory traversal vulnerability. It is reported that the issue exists due to a lack of sufficient sanitization performed on user-supplied input. A remote attacker may exploit this condition to reveal the contents...
CVE-2004-1219
paFileDB 3.1, when using sessions authentication and while the administrator logs on, allows remote attackers to read the administrator's password hash and conduct brute force password guessing attacks by listing the contents of the sessions directory and reading the associated file for the...
CVE-2004-2705
Unspecified vulnerability in Player vs. Player Gaming Network PvPGN before 1.6.4 allows remote attackers to obtain attributes of arbitrary accounts, including the password hash, via certain statsreq packets...
CVE-2004-1219
PaFileDB
paFileDB sessions Directory Admin Hashed Password Disclosure
According to its version number, the remote installation of paFileDB is vulnerable to an attack that would allow the attacker to view the password hash of user accounts, including an administrator account, by making a direct request to the application's 'sessions' directory. This could allow an...
UBBCentral UBB.Threads 6.2.x < 6.3x - One Char Brute Force
!/usr/bin/perl use LWP::UserAgent; UBB.Threads 6.2. - 6.3. exploit with one char brute technique by 1dt.w0lf // r57 $path = $ARGV0; $username = $ARGV1; $snum = 1; $n=0; $|++; if @ARGV 2 print "Please wait...\r\n"; print ""; while1 &found0,122; 0 if $char=="0" print "\r\n\r\n";...
Phorum 5.0.x - FOLLOW.php SQL Injection
Phorum 5.0.x - FOLLOW.php SQL Injection source: https://www.securityfocus.com/bid/11660/info Reportedly Phorum is affected by a remote SQL injection vulnerability. This issue is due to a failure of the application to properly sanitized user supplied URI input. This issue allows remote attackers t...
Remository - SQL Injection
source: https://www.securityfocus.com/bid/11219/info It is reported that the ReMOSitory module for Mambo is prone to an SQL injection vulnerability. This issue is due to a failure of the module to properly validate user supplied URI input. Because of this, a malicious user may influence database...
GetSolutions GetInternet - Multiple SQL Injections
GetSolutions GetInternet - Multiple SQL Injections source: https://www.securityfocus.com/bid/11150/info getInternet is vulnerable to multiple remote SQL injection vulnerabilities in the 'welcome.asp', 'checklogin.asp', and 'lostpassword.asp' scripts. These issues are due to a failure of the...