68 matches found
SimpleNews 1.0.0 FINAL - print.php?news_id SQL Injection
SimpleNews 1.0.0 FINAL - print.php?newsid SQL Injection !/usr/bin/perl -w SimpleNews = 1.0.0 FINAL SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code print.php: $newsid = $GET'newsid'; $query = "SELECT FROM...
SimpleNews 1.0.0 FINAL - 'print.php?news_id' SQL Injection
!/usr/bin/perl -w SimpleNews = 1.0.0 FINAL SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code print.php: $newsid = $GET'newsid'; $query = "SELECT FROM simplenewsarticles WHERE newsid = '$newsid'"; PoC:...
SimpleNews <= 1.0.0 FINAL (print.php news_id) SQL Injection Exploit
Exploit for unknown platform in category web applications =================================================================== SimpleNews = 1.0.0 FINAL print.php newsid SQL Injection Exploit =================================================================== !/usr/bin/perl -w SimpleNews = 1.0.0...
Authentication flaw
admin.php in Himpfen Consulting Company PHP SimpleNEWS 1.0.0 allows remote attackers to bypass authentication by setting the admin parameter in a cookie...
CVE-2006-1276
admin.php in Himpfen Consulting Company PHP SimpleNEWS 1.0.0 allows remote attackers to bypass authentication by setting the admin parameter in a cookie...
CVE-2006-1276
The CVE-2006-1276 entry affects Himpfen Consulting Company PHP SimpleNEWS 1.0.0, where an attacker can bypass authentication by setting the admin parameter in a cookie. The connected sources corroborate the same description across NVD and CVE listings, confirming the vulnerable component and root...
CVE-2006-1276
admin.php in Himpfen Consulting Company PHP SimpleNEWS 1.0.0 allows remote attackers to bypass authentication by setting the admin parameter in a cookie...
CVE-2006-1276: Undefined Security Weakness
admin.php in Himpfen Consulting Company PHP SimpleNEWS 1.0.0 allows remote attackers to bypass authentication by setting the admin parameter in a cookie...