Siteman users.php Remote Buffer Overflow

Binary data 2619.prm...

CVE-2005-0305

CRLF injection vulnerability in users.php in Siteman 1.1.10 and earlier allows remote attackers to add arbitrary users and gain privileges via the line parameter in a docreate operation...

CVE-2005-0305

CVE-2005-0305 affects Siteman 1.1.10 and earlier. A CRLF injection vulnerability in users.php, triggered via the line parameter in a docreate operation, allows remote attackers with valid credentials to create arbitrary user accounts and gain privileges (administrative access). The root cause is ...

CVE-2005-0305: Undefined Security Weakness

CRLF injection vulnerability in users.php in Siteman 1.1.10 and earlier allows remote attackers to add arbitrary users and gain privileges via the line parameter in a docreate operation...

siteman.noam.txt

!/usr/bin/perl -w Exploit by Noam Rathaus - Beyond Security Ltd. Exploit for the SiteMan vulnerability discovered by: "amironline452" use Digest::MD5 qwmd5 md5hex md5base64; use IO::Socket; use strict; ./siteman.pl / vulnerable.host my $Path = shift; my $Host = shift; my $Username = shift; my...

Siteman <= 1.1.10 Remote Administrative Account Addition Exploit

No description provided by source. !/usr/bin/perl -w Exploit by Noam Rathaus - Beyond Security Ltd. Exploit for the SiteMan vulnerability discovered by: "amironline452" [email protected] use Digest::MD5 qwmd5 md5hex md5base64; use IO::Socket; use strict; ./siteman.pl / vulnerable.hos...

Siteman <= 1.1.10 Remote Administrative Account Addition Exploit

Exploit for unknown platform in category web applications ================================================================ Siteman use Digest::MD5 qwmd5 md5hex md5base64; use IO::Socket; use strict; ./siteman.pl / vulnerable.host my $Path = shift; my $Host = shift; my $Username = shift; my...

siteman.pl.txt

Siteman User Database Line Insertion Vulnerability Vulnerable Systems: Siteman version 1.1.10 and prior Discovered By amironline452 [email protected] By Alpha Hackers Digital Security Team www.alphahackers.com www.amironline452.tk Exploit: !/usr/bin/perl -w Exploit by shoaliesefid7 -...

siteman.txt

God Admin Injection Vulnerability in Siteman 1.0.x, Discovered by PersianHacker.NET Security Team by amironline452 amironline452 hotmail com http://www.PersianHacker.NET http://www.amironline452.tk Siteman is a Content Management System CMS that is so easy to install and use, that a person who ha...

Siteman 1.1.10 - Remote Administrative Account Addition

Siteman 1.1.10 - Remote Administrative Account Addition !/usr/bin/perl -w Exploit by Noam Rathaus - Beyond Security Ltd. Exploit for the SiteMan vulnerability discovered by: "amironline452" use Digest::MD5 qwmd5 md5hex md5base64; use IO::Socket; use strict; ./siteman.pl / vulnerable.host my $Path...

Siteman 1.1.10 - Remote Administrative Account Addition

!/usr/bin/perl -w Exploit by Noam Rathaus - Beyond Security Ltd. Exploit for the SiteMan vulnerability discovered by: "amironline452" use Digest::MD5 qwmd5 md5hex md5base64; use IO::Socket; use strict; ./siteman.pl / vulnerable.host my $Path = shift; my $Host = shift; my $Username = shift; my...

Siteman User Database Line Insertion Vulnerability

Siteman User Database Line Insertion Vulnerability Vulnerable Systems: Siteman version 1.1.10 and prior Discovered By amironline452 [email protected] By Alpha Hackers Digital Security Team www.alphahackers.com www.amironline452.tk Exploit: !/usr/bin/perl -w Exploit by shoaliesefid7 -...

God Admin Injection Vulnerability in Siteman 1.0.x

God Admin Injection Vulnerability in Siteman 1.0.x, Discovered by PersianHacker.NET Security Team by amironline452 amironline452 hotmail com http://www.PersianHacker.NET http://www.amironline452.tk Siteman is a Content Management System CMS that is so easy to install and use, that a person who ha...

Siteman 1.1 - User Database Privilege Escalation (1)

Siteman 1.1 - User Database Privilege Escalation 1 source: https://www.securityfocus.com/bid/12304/info Siteman is reported prone to a vulnerability that may allow users to gain elevated privileges. This issue results from insufficient sanitization of user-supplied data. Apparently, an attacker c...

Siteman < 1.1.11 Multiple Vulnerabilities

The remote host is running Siteman, a web-based content management system written in PHP. The version of this software hosted on the remote web server fails to sanitize input to the 'line' parameter of the 'users.php' script when 'do=create', which allows an attacker with valid credentials to...

Siteman 1.1 - User Database Privilege Escalation (1)

source: https://www.securityfocus.com/bid/12304/info Siteman is reported prone to a vulnerability that may allow users to gain elevated privileges. This issue results from insufficient sanitization of user-supplied data. Apparently, an attacker can supply additional lines to the stream used to...

Siteman 1.1 - User Database Privilege Escalation (2)

source: https://www.securityfocus.com/bid/12304/info Siteman is reported prone to a vulnerability that may allow users to gain elevated privileges. This issue results from insufficient sanitization of user-supplied data. Apparently, an attacker can supply additional lines to the stream used to...

Siteman 1.1 - User Database Privilege Escalation (2)

Siteman 1.1 - User Database Privilege Escalation 2 source: https://www.securityfocus.com/bid/12304/info Siteman is reported prone to a vulnerability that may allow users to gain elevated privileges. This issue results from insufficient sanitization of user-supplied data. Apparently, an attacker c...

Siteman < 1.1.11 Page User Database Privilege Escalation

Binary data 2545.prm...

siteman119.txt

New XSS Vulnerability in Siteman v1.1.9, Discovered by PersianHacker.NET Security Team by Pi3cH pi3ch yahoo com http://www.PersianHacker.NET Siteman is a Content Management System CMS that is so easy to install and use, that a person who has no knowledge about creating homepages can get a...