42 matches found
Subdreamer 3.0.1 - CMS upload
Subdreamer 3.0.1 - CMS upload ======================================================================================== | Title : Subdreamer.v3.0.1 cms upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.h4kz.com | Web Site : | Dork : Website powered by Subdreame...
Subdreamer 3.0.1 - CMS upload
======================================================================================== | Title : Subdreamer.v3.0.1 cms upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.h4kz.com | Web Site : | Dork : Website powered by Subdreamer CMS & Sequel Theme Designed ...
Subdreamer 2.4.3 and 3.0.1 XSS Vulnerability
Exploit for unknown platform in category web applications ============================================ Subdreamer 2.4.3 and 3.0.1 XSS Vulnerability ============================================ Topic : Subdreamer 2.4.3 and latest version 3.0.1 bug type : Cross Site Scripting XSS Credit : ITSecTeam...
SQL Injection vulnerabilities in Subdreamer CMS
Background information: This report applies to Subdreamer newest stable release, 2.5.3.2 hotfix5. Subdreamer is a content management system, which is written in PHP and uses MySQL as its database backend. Subdreamer's home page is http://www.subdreamer.com Subdreamer can be integrated with...
Subdreamer CMS (Pro 2.2.3 and Light 2.2.0.1) security bug ;)
Hello world ; A serious exploit has recently been discovered which will allow hackers to gain admin access to the latest versions of Subdreamer CMS Pro 2.2.3 and Light 2.2.0.1. It is crucial to patch your systems immediately. Affected files: admin/adminfunctions.php includes/functions.php...
CVE-2005-3423
Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 allow remote attackers to execute arbitrary SQL commands via 1 the loginusername parameter or 2 cookies to a subdreamer.php, b ipb2.php, c phpbb2.php, d vbulletin2.php, and e vbulletin3.php...
CVE-2005-3423
Subdreamer 2.2.1 is affected by multiple SQL injection vulnerabilities described in CVE-2005-3423. The flaws allow remote attackers to inject SQL via (1) the loginusername parameter or (2) cookies to files including subdreamer.php, ipb2.php, phpbb2.php, vbulletin2.php, and vbulletin3.php. The aff...
CVE-2005-3423
Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 allow remote attackers to execute arbitrary SQL commands via 1 the loginusername parameter or 2 cookies to a subdreamer.php, b ipb2.php, c phpbb2.php, d vbulletin2.php, and e vbulletin3.php...
CVE-2005-3423: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 allow remote attackers to execute arbitrary SQL commands via 1 the loginusername parameter or 2 cookies to a subdreamer.php, b ipb2.php, c phpbb2.php, d vbulletin2.php, and e vbulletin3.php...
[SA17378] Subdreamer Login SQL Injection Vulnerabilities
TITLE: Subdreamer Login SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA17378 VERIFY ADVISORY: http://secunia.com/advisories/17378/ CRITICAL: Highly critical IMPACT: Manipulation of data, System access, Security Bypass WHERE: From remote SOFTWARE: Subdreamer 2.x...
Subdreamer 2.2.1 SQL Injection / Command Execution Exploit
Exploit for unknown platform in category web applications ========================================================== Subdreamer 2.2.1 SQL Injection / Command Execution Exploit ========================================================== !/usr/bin/perl Subdreamer 2.2.1 command exec exploit...
Subdreamer 2.2.1 - SQL Injection / Command Execution
!/usr/bin/perl Subdreamer 2.2.1 command exec exploit @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ supported targets: without forum integration with phpBB2 integration with ipb2 integration with vbulletin2 integration...
Subdreamer 2.2.1 SQL Injection / Command Execution Exploit
No description provided by source. !/usr/bin/perl Subdreamer 2.2.1 command exec exploit @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ supported targets: without forum integration with phpBB2 integration with ipb2 integration with vbulletin2 integration...
Subdreamer 2.2.1 - SQL Injection Command Execution
Subdreamer 2.2.1 - SQL Injection Command Execution !/usr/bin/perl Subdreamer 2.2.1 command exec exploit @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ supported targets: without forum integration with phpBB2 integration with ipb2 integration with vbulletin2...
CVE-2005-0805
SQL injection vulnerability in index.php in Subdreamer Light, when magicquotesgpc is enabled, allows remote attackers to execute arbitrary SQL commands via certain parameters that are used as global variables, as demonstrated using the imageid parameter, which is not properly handled by...
subdreamerSQL.txt
//==========================================// \ GHC - Subdreamer - ADVISORY // Product: Subdreamer \ Version: Subdreamer Light // URL: www.subdreamer.com \ VULNERABILITY CLASS: SQL injection //==========================================// Product Description "Powered by PHP and MySQL, Subdreamer...
CVE-2005-0805
SQL injection vulnerability in index.php in Subdreamer Light, when magicquotesgpc is enabled, allows remote attackers to execute arbitrary SQL commands via certain parameters that are used as global variables, as demonstrated using the imageid parameter, which is not properly handled by...
CVE-2005-0805
The CVE-2005-0805 entry describes a SQL injection in Subdreamer Light’s index.php when magic_quotes_gpc is enabled. The vulnerability allows remote attackers to run arbitrary SQL via parameters treated as global variables, demonstrated via the imageid parameter that imagegallery.php fails to sani...
CVE-2005-0805: Undefined Security Weakness
SQL injection vulnerability in index.php in Subdreamer Light, when magicquotesgpc is enabled, allows remote attackers to execute arbitrary SQL commands via certain parameters that are used as global variables, as demonstrated using the imageid parameter, which is not properly handled by...
possible SQL injection in Subdreamer
//==========================================// GHC - Subdreamer - ADVISORY // Product: Subdreamer Version: Subdreamer Light // URL: www.subdreamer.com VULNERABILITY CLASS: SQL injection //==========================================// Product Description "Powered by PHP and MySQL, Subdreamer provid...