fowlcms 1.1 (ab/lfi/su) Multiple Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! --...

CVE-2014-0649

The RMI interface in Cisco Secure Access Control System ACS 5.x before 5.5 does not properly enforce authorization requirements, which allows remote authenticated users to obtain superadmin access via a request to this interface, aka Bug ID CSCud75180...

CVE-2010-4733

WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms have a default username and password, which makes it easier for remote attackers to obtain superadmin access via the web interface, a...

Default credentials

WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms have a default username and password, which makes it easier for remote attackers to obtain superadmin access via the web interface, a...

CVE-2010-4733

WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms have a default username and password, which makes it easier for remote attackers to obtain superadmin access via the web interface, a...

CVE-2010-4733

CVE-2010-4733 and related entries describe default-credential and remote-authenticated risks affecting Intellicom NetBiter NetSCADA WebSCADA components (WS100/WS200, EC150, MB100, SS100 on NB100/NB200). The root issue cited is default usernames/passwords allowing superadmin access via the web int...

IntelliCom NetBiter NB100 and NB200 platforms contain multiple vulnerabilities

Overview IntelliCom NetBiter products based on the NB100 and NB200 platforms contain multiple vulnerabilities. Description IntelliCom NetBiter products based on the NB100 and NB200 platforms contain multiple vulnerabilities. A user who has been authenticated at the superadmin level highest...

Intellicom NetBiter WebSCADA Vulnerabilities

OVERVIEW This advisory is a follow-up to ICS-ALERT-10-293-01 - Intellicom NetBiter WebSCADA Vulnerabilities, published on the ICS-CERT Web page on October 20, 2010. On October 1, 2010 independent researchers identified vulnerabilities in the Intellicom NetBiter Supervisory Control and Data...

FOWLCMS 1.1--Multiple Remote Vulnerabilities-->

------------------------------------------------------- MULTIPLE REMOTE VULNERABILITIES--FOWLCMS 1.1-- ------------------------------------------------------- ----------------- CMS INFORMATION: ----------------- --WEB: https://sourceforge.net/projects/fowlcms/ --DOWNLOAD:...

Fowl CMS 1.1 SQL Injection / LFI / Upload

------------------------------------------------------- MULTIPLE REMOTE VULNERABILITIES--FOWLCMS 1.1-- ------------------------------------------------------- ----------------- CMS INFORMATION: ----------------- --WEB: https://sourceforge.net/projects/fowlcms/ --DOWNLOAD:...

NetHoteles 2.0/3.0 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. NetHoteles v3.0 Auth Bypass Remote Sql Injecion -=Dns-Team Marocain Hackers=- Author: Dns-Team Contact: Q2atHoTmaildotFr Site: www.Scam4u.com + www.Dns-Team.com Greetz: M4n1x + Sa4d + HSMX + Stack + PR0H4CK3RZ + N@bilX ---+-- Star --+--- Expl0!T -1- For SuperAdm...

NetHoteles 2.0/3.0 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ NetHoteles 2.0/3.0 Auth Bypass SQL Injection Vulnerability ============================================================ NetHoteles v3.0 Auth Bypass Remote Sql Injecion -=Dns-Team...

NetHoteles SQL Injection

NetHoteles v3.0 Auth Bypass Remote Sql Injecion -=Dns-Team Marocain Hackers=- Author: Dns-Team Contact: Q2atHoTmaildotFr Site: www.Scam4u.com + www.Dns-Team.com Greetz: M4n1x + Sa4d + HSMX + Stack + PR0H4CK3RZ + N@bilX ---+-- Star --+--- Expl0!T -1- For SuperAdmin : http://site.ir/superadmin...

NetHoteles 2.0/3.0 - Authentication Bypass

NetHoteles v3.0 Auth Bypass Remote Sql Injecion -=Dns-Team Marocain Hackers=- Author: Dns-Team Contact: Q2atHoTmaildotFr Site: www.Scam4u.com + www.Dns-Team.com Greetz: M4n1x + Sa4d + HSMX + Stack + PR0H4CK3RZ + N@bilX ---+-- Star --+--- Expl0!T -1- For SuperAdmin : http://site.ir/superadmin...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in admin/admincenter.php in webSPELL 4.01.02 allows remote attackers to assign the superadmin privilege level to arbitrary accounts as administrators via an "update member" action...

CVE-2008-0575

Cross-site request forgery CSRF vulnerability in admin/admincenter.php in webSPELL 4.01.02 allows remote attackers to assign the superadmin privilege level to arbitrary accounts as administrators via an "update member" action...

Webspell 4.01.02 2 Vulnerabilites

Webspell 4.01.02 2 Vulnerabilites Founded by NBBN Vendor: http://cms.webspell.org 1 Cross-Site Scripting Vulnerability 2 Change User Permission XSRF Vulnerability 1 http://site.tld/path/index.php?site=whoisonline&sort="xss code 2 This creates a superadmin account, when an admin click a link, to a...

VigileCMS 1.8 - Stealth Remote Command Execution

VigileCMS 1.8 - Stealth Remote Command Execution !/usr/bin/python -- coding: iso-8859-15 -- ''' | || | | | | | ' / -||| ' / | '/ / / \ \ / ||||||| ./,|| ,,/\ || ------------------------------------------------------------------------------------------------ This is a Public Exploit...

VigileCMS 1.8 - Stealth Remote Command Execution

!/usr/bin/python -- coding: iso-8859-15 -- ''' | || | | | | | ' / -||| ' / | '/ / / \ \ / ||||||| ./,|| ,,/\ || ------------------------------------------------------------------------------------------------ This is a Public Exploit. 22/11/2007 dd-mm-yyyy...

[Full-disclosure] Teamspeak Server 2.0.20.1 Vulnerabilities

Hi everyone, several months ago I discovered some vulnerabilities in TeamSpeak Server WebAdmin interface. I sent the advisory and exploit to the developers about two months ago 11 03 2007, but the server is still vulnerable, today. Affected software: Teamspeak Server 2.0.20.1 Looks like the beta...