EUVD-2007-2592

Malware in sbrugna...

EUVD-2007-2593

Malware in sbrugna...

EUVD-2008-0265

Malware in sbrugna...

EUVD-2007-2814

Malware in sbrugna...

TutorialCMS <= 1.00 (search.php search) SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w TutorialCMS = 1.00 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code search.php: $search = $REQUEST'search'; $sql = SELECT FROM tutorials WHERE title LIKE...

TutorialCMS <= 1.01 Authentication Bypass Vulnerability

No description provided by source. TutorialCMS = 1.01 Authentication Bypass Discovered by: Silentz Payload: Authentication Bypass Website: http://www.w4ck1ng.com Vulnerability: Variables $loggedIn & $activated are not predefined. Vulnerable Files: login.php headerLinks.php submit1.php myFav.php...

CVE-2008-0254

SQL injection vulnerability in activate.php in TutorialCMS aka Photoshop Tutorials 1.02, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the userName parameter...

Sql injection

SQL injection vulnerability in activate.php in TutorialCMS aka Photoshop Tutorials 1.02, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the userName parameter...

CVE-2008-0254

CVE-2008-0254 is a SQL injection vulnerability in TutorialCMS (Photoshop Tutorials) 1.02, affecting activate.php. When magic_quotes_gpc is disabled, remote attackers can inject SQL via the userName parameter. Documented impact is partial confidentiality/integrity/availability with CVSS 2.0 base s...

CVE-2008-0254: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in activate.php in TutorialCMS aka Photoshop Tutorials 1.02, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the userName parameter...

TutorialCMS 1.02 (userName) Remote SQL Injection Vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = 'SSV-7841' vul ID version = '1' author = 'hh' vulDate = '2008-01-12' createDate =...

TutorialCMS 1.02 - 'Username' SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- TutorialCMS 1.02 Remote SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- bug found by ka0x contact: ka0x01atgmail.com D.O.M TEAM 2008 we are: ka0x, an0de, xarnuz from spain download...

TutorialCMS 1.02 - Username SQL Injection

TutorialCMS 1.02 - Username SQL Injection -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- TutorialCMS 1.02 Remote SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- bug found by ka0x contact: ka0x01atgmail.com D.O.M TEAM 2008 we are: ka0x, an0de, xarnuz from...

TutorialCMS 1.02 (userName) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== TutorialCMS 1.02 userName Remote SQL Injection Vulnerability ============================================================== -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=...

TutorialCMS &lt;= 1.01 Authentication Bypass Vulnerability

No description provided by source. TutorialCMS = 1.01 Authentication Bypass Discovered by: Silentz Payload: Authentication Bypass Website: http://www.w4ck1ng.com Vulnerability: Variables $loggedIn & $activated are not predefined. Vulnerable Files: login.php headerLinks.php submit1.php myFav.php...

CVE-2007-2822

TutorialCMS 1.01 and earlier, when registerglobals is enabled, allows remote attackers to bypass authentication via the 1 loggedIn and 2 activated parameters to a login.php, b headerLinks.php, c submit1.php, d myFav.php, and e userCP.php...

Authentication flaw

TutorialCMS 1.01 and earlier, when registerglobals is enabled, allows remote attackers to bypass authentication via the 1 loggedIn and 2 activated parameters to a login.php, b headerLinks.php, c submit1.php, d myFav.php, and e userCP.php...

CVE-2007-2822

TutorialCMS

CVE-2007-2822

TutorialCMS 1.01 and earlier, when registerglobals is enabled, allows remote attackers to bypass authentication via the 1 loggedIn and 2 activated parameters to a login.php, b headerLinks.php, c submit1.php, d myFav.php, and e userCP.php...

CVE-2007-2822: Undefined Security Weakness

TutorialCMS 1.01 and earlier, when registerglobals is enabled, allows remote attackers to bypass authentication via the 1 loggedIn and 2 activated parameters to a login.php, b headerLinks.php, c submit1.php, d myFav.php, and e userCP.php...