Sql injection

SQL injection vulnerability in Stash 1.0.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the 1 username parameter to admin/library/authenticate.php and the 2 download parameter to downloadmp3.php. NOTE: some of these details are obtained from thir...

CVE-2008-4081

CVE-2008-4081 affects Stash 1.0.3: admin/login.php permits remote authentication bypass by setting a bsm cookie, enabling administrative access. The NVD lists a CVSS 2.0 base score of 7.5 (HIGH) with network access and low attack complexity. No explicit remediation details are provided in the con...

CVE-2008-4080

SQL injection vulnerability in Stash 1.0.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the 1 username parameter to admin/library/authenticate.php and the 2 download parameter to downloadmp3.php. NOTE: some of these details are obtained from thir...

CVE-2008-4080

CVE-2008-4080 documents a SQL injection vulnerability in Stash 1.0.3, triggered when magic_quotes_gpc is disabled. The affected inputs are the username parameter to admin/library/authenticate.php and the download parameter to downloadmp3.php, allowing remote attackers to execute arbitrary SQL com...

CVE-2008-4081

admin/login.php in Stash 1.0.3 allows remote attackers to bypass authentication and gain administrative access by setting a bsm cookie...

CVE-2008-4080: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Stash 1.0.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the 1 username parameter to admin/library/authenticate.php and the 2 download parameter to downloadmp3.php. NOTE: some of these details are obtained from thir...

CVE-2008-4081: Improper Authentication

admin/login.php in Stash 1.0.3 allows remote attackers to bypass authentication and gain administrative access by setting a bsm cookie...

Stash 1.0.3 Multiple SQL Injection Vulnerabilities

No description provided by source. Stash v1.0.3 Admin bypass / Remote File Disclosure AUTHOR : IRCRASH R3d.W0rm Sina Yazdanmehr Discovered by : IRCRASH R3d.W0rm Sina Yazdanmehr Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr Download :...

Stash 1.0.3 Insecure Cookie Handling Vulnerability

No description provided by source. ...:::::stash-1.0.3 Insecure Cookie Handling Vulnerability ::::.... ----------------------- Discoverd By : Ciph3r special tnx to : Iranian hacker & Kurdish Security TEAM E-Mail : [email protected] cms :...

Stash v1.0.3 Admin bypass / Remote File Disclosure

Stash v1.0.3 Admin bypass / Remote File Disclosure AUTHOR : IRCRASH R3d.W0rm Sina Yazdanmehr Discovered by : IRCRASH R3d.W0rm Sina Yazdanmehr Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr Download :...

Stash 1.0.3 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ================================================== Stash 1.0.3 Insecure Cookie Handling Vulnerability ================================================== ----------------------- Discoverd By : Ciph3r special tnx to : Iranian hacker & Kurdis...

stash-bypass.txt

Stash v1.0.3 Admin bypass / Remote File Disclosure AUTHOR : IRCRASH R3d.W0rm Sina Yazdanmehr Discovered by : IRCRASH R3d.W0rm Sina Yazdanmehr Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr Download :...

Stash 1.0.3 - Insecure Cookie Handling

Stash 1.0.3 - Insecure Cookie Handling ...:::::stash-1.0.3 Insecure Cookie Handling Vulnerability ::::.... ----------------------- Discoverd By : Ciph3r special tnx to : Iranian hacker & Kurdish Security TEAM E-Mail : [email protected] cms :...

Stash 1.0.3 - Multiple SQL Injections

Stash 1.0.3 - Multiple SQL Injections Stash v1.0.3 Admin bypass / Remote File Disclosure AUTHOR : IRCRASH R3d.W0rm Sina Yazdanmehr Discovered by : IRCRASH R3d.W0rm Sina Yazdanmehr Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr Download :...

Stash 1.0.3 Multiple SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ================================================== Stash 1.0.3 Multiple SQL Injection Vulnerabilities ================================================== AUTHOR : IRCRASH R3d.W0rm Sina Yazdanmehr Download :...

stash-cookie.txt

Stash v1.0.3 Insecure Cookie Handling Vulnerability Author : Stack Exploit : javascript:document.cookie = "bsm=1; path=/"; document.cookie = "msb=1; path=/";...

Stash 1.0.3 - Multiple SQL Injections

Stash v1.0.3 Admin bypass / Remote File Disclosure AUTHOR : IRCRASH R3d.W0rm Sina Yazdanmehr Discovered by : IRCRASH R3d.W0rm Sina Yazdanmehr Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr Download :...

Stash 1.0.3 - Insecure Cookie Handling

...:::::stash-1.0.3 Insecure Cookie Handling Vulnerability ::::.... ----------------------- Discoverd By : Ciph3r special tnx to : Iranian hacker & Kurdish Security TEAM E-Mail : [email protected] cms : http://sourceforge.net/project/showfiles.php?groupid=206129 -----------------------...

Information disclosure

Multiple memory leaks in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service memory consumption and crash via unknown vectors related to 1 unspecified vectors during the SSL handshake SPR MKIN67MQVW, 2 the stash file during the SSL handshake SPR MKIN693QUT,...

CVE-2006-0121

Multiple memory leaks in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service memory consumption and crash via unknown vectors related to 1 unspecified vectors during the SSL handshake SPR MKIN67MQVW, 2 the stash file during the SSL handshake SPR MKIN693QUT,...