2375 matches found
ilchClan <= 1.0.5B SQL Injection Vulnerability Exploit
No description provided by source. ----------------------------Information------------------------------------------------ +Name :ilchClan = 1.0.5B SQL Injection Vulnerability Exploit +Autor : Easy Laster +ICQ : 11-051-551 +email : [email protected] +Date : 15.04.2010 +Script : ilchClan = 1.0.5B...
PHP Advanced Transfer Manager 1.30 Remote Unauthorized Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15237/info PHP Advanced Transfer Manager can allow remote attackers to gain unauthorized access. Access to sensitive files containing authentication credentials is not restricted, therefore an attacker can simply issue a...
PSWD.JS Insecure Password Hash Weakness
No description provided by source. source: http://www.securityfocus.com/bid/19333/info Applications running pswd.js are prone to an insecure password-hash weakness. This issue is due to a design flaw that results in password hashes being created in an insecure manner. This issue allows attackers ...
Invision Power Board <= 2.1.5 (from_contact) SQL Injection Exploit
No description provided by source. !/usr/bin/perl IPB =2.1.4 exploit possibly 2.1.5 too Brought to you by the Ykstortion security team. The bug is in the pm system so you must have a registered user. The exploit will extract a password hash from the forum's data base of the target user. You need ...
SGI IRIX 6.5.22 GR_OSView Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13057/info grosview is reported prone to an information disclosure vulnerability. This issue can help a local attacker to obtain sensitive information such as exposing an administrator's password hash and carrying out oth...
Gene6 BPFTP FTP Server 2.0 User Credentials Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2534/info G6 FTP Server now known as BPFTP Server is an internet FTP server by Gene6 If a logged in FTP user connects to an external share and submits a malformed 'size' or 'mdtm' command, the user could force the FTP...
PBLang Bulletin Board System 4.x SendPM.PHP Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12690/info PBLang is reported prone to a directory traversal vulnerability. It is reported that the issue exists due to a lack of sufficient sanitization performed on user-supplied input. A remote attacker may exploit thi...
Ingenium Learning Management System 5.1/6.1 Reversible Password Hash Weakness
No description provided by source. source: http://www.securityfocus.com/bid/5970/info Ingenium Learning Management System uses a weak algorithm to hash user and administrative credentials. Passwords may be trivially obtained by reversing the password hash. An attacker must be able to gain...
ppim 1.0 - Multiple Vulnerabilities
No description provided by source. - -= pPIM Multiple Vulnerabilities =- Version Tested: pPIM 1.0 Vendor notified Full details can also be found at http://www.lampsecurity.org/node/18 Author: Justin C. Klein Keane [email protected] Description pPIM...
OpenBB 1.0.x post.php Multiple Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/10214/info It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input. The SQL issues may...
RiotPix <= 0.61 (forumid) Blind SQL Injection Exploit
No description provided by source. ?php / $Id: riotpix-0.61.txt,v 0.1 2009/01/06 03:47:30 cOndemned Exp $ RiotPix = 0.61 forumid Blind SQL Injection Exploit Bug found && Exploited by cOndemned Download : http://www.riotpix.com/download/riotpix061.zip Description : It's just simple Blind SQL...
nodez <= 4.6.1.1 mercury Multiple Vulnerabilities
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Nodez 4.6.1.1 Mercury possibly prior versions multiple vulnerabilities\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; / software: site: nodez.greentinted.com/ description:...
CVE-2013-2563
Mambo CMS 4.6.5 uses world-readable permissions on configuration.php, which allows local users to obtain the admin password hash by reading the file...
Design/Logic Flaw
Mambo CMS 4.6.5 uses world-readable permissions on configuration.php, which allows local users to obtain the admin password hash by reading the file...
CVE-2013-2563
Mambo CMS 4.6.5 uses world-readable permissions on configuration.php, which allows local users to obtain the admin password hash by reading the file...
CVE-2013-2563: Undefined Security Weakness
Mambo CMS 4.6.5 uses world-readable permissions on configuration.php, which allows local users to obtain the admin password hash by reading the file...
PT-2014-2592
Name of the Vulnerable Software and Affected Versions Mambo CMS version 4.6.5 Description The issue allows local users to obtain the admin password hash by reading the configuration.php file due to world-readable permissions. Recommendations For Mambo CMS version 4.6.5, change the permissions of...
CVE-2014-3945: Improper Authentication
The Authentication component in TYPO3 before 6.2, when salting for password hashing is disabled, does not require knowledge of the cleartext password if the password hash is known, which allows remote attackers to bypass authentication and gain access to the backend by leveraging knowledge of a...
