Improper access control

Katy Whitton BlogIt! stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for database/Blog.mdb. NOTE: some of these details are obtained from third party...

CVE-2009-0328

ROBS-PROJECTS Digital Sales IPN aka DS-IPN.NET or DS-IPN Paypal Shop stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for Database/Sales.mdb...

CVE-2009-0336

BlogIt! is affected. The vulnerability stems from storing the database file (Blog.mdb) under the web root with insufficient access controls, enabling remote attackers to download the credentials database via a direct request. This is a server-side exposure of sensitive user data. The description ...

CVE-2009-0328

CVE-2009-0328 affects ROBS-PROJECTS Digital Sales IPN (also DS-IPN.NET/DS-IPN Paypal Shop). The issue is insufficient access control that allows remote attackers to directly download the database file (Database/Sales.mdb) from the web root, exposing user credentials. This has been captured in mul...

Joomla BazaarBuilder Shopping Cart SQL Injection

!/usr/bin/perl -w Joomla component: BazaarBuilder Shopping Cart Software v.5.0 sql injection + Author : XaDoS + Contact me: www.securitycode.it // xados at hotmail dot it + Greetz : Plucky - Str0ke - GsC - boom3rang - My girl ;- + ModuleName: BazaarBuilder Ecommerce Shopping Cart Software v. 5.0 ...

Joomla Component simple_review 1.x SQL Injection Vulnerability

No description provided by source. Joomla comsimplereview Sql injection Author : EcHoLL www.warezturk.org www.tahribat.com Greetz : Blacklabel Hippi Godlike Nitrous ! ModuleName: comsimplereview ! ScriptName: Joomla ! GoogleDork: inurl:"comsimplereview"...

PowerNews 2.5.4 SQL Injection

...:::::powernews 2.5.4 SQL Injection Vulnerability::::.... Virangar Security Team www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Ali007,Zahra & all virangar members & all hackerz greetz:to my best friend in the world...

I-Rater Basic (messages.php) Remote SQL Injection Vulnerability

No description provided by source. I-Rater Basicmessages.php SQL-injection. Author : boom3rang Kosova Hackers Group www.khg-crew.ws Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1. ! Script Name: I-Rater Basic ! Home Page: http://www.i-rater.com ! GoogleDork: N/A Exampl...

About the security content of Security Update 2008-008 / Mac OS X v10.5.6

About the security content of Security Update 2008-008 / Mac OS X v10.5.6 Last Modified: December 15, 2008 Article: HT3338 Summary This document describes the security content of Security Update 2008-008 / Mac OS X v10.5.6, which can be downloaded and installed via Software Update preferences, or...

Check New 4.52 (findoffice.php search) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w ===================================================================== Check New 4.52 findoffice.php search Remote SQL Injection Exploit =====================================================================...

bcoos 1.0.13 - 'viewcat.php' SQL Injection

!/usr/bin/perl -w ============================================ bcoos 1.0.13 Remote SQL Injection Exploit ============================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------|...

e107-sql.txt

e107 Plugin alternateprofiles newuser.php?id Remote SQL-injetion Vulnerability Author boom3rang -------------------------------- Site www.khg-crew.ws -------------------------------- Greetz KHG & H!tm@N & chs & redc00de & proxy-ki11er & Hurley -------------------------------- ! Script Name: E107 ...

Joomla! Component ds-syndicate - feed_id SQL Injection

Joomla! Component ds-syndicate - feedid SQL Injection Joomla comds-syndicate Sql-injetion vulnerability Author : boom3rang HomePage: www.khg-crew.ws Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er. Kosova Hackers Group ! ComponentName: ds-syndicate ! ScriptName: Joomla ! GoogleDork:...

Stash 1.0.3 (SQL) User Credentials Disclosure Exploit

No description provided by source. !/usr/bin/perl -w User credentials disclosure exploit - stash103exp.pl Gnix [email protected] http://gnix.netsons.org This exploit use an SQL Injection in the file admin/login.php to bypass the login, and then an SQL Injection in the admin/news.php to extract a...

aradcenter-sql.txt

|| | | Arad Center news.php id Remote SQL Injection Vulnerability | | |-------------------- Hussin X -------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | script : http://www.iranmc.com/shop.php | | DorK : "Designed & Developed by N.E....

Stash 1.0.3 - SQL Injection User Credentials Disclosure

!/usr/bin/perl -w User credentials disclosure exploit - stash103exp.pl Gnix http://gnix.netsons.org This exploit use an SQL Injection in the file admin/login.php to bypass the login, and then an SQL Injection in the admin/news.php to extract all the users info. Note: password are crypted with md5...

Stash 1.0.3 - SQL Injection User Credentials Disclosure

Stash 1.0.3 - SQL Injection User Credentials Disclosure !/usr/bin/perl -w User credentials disclosure exploit - stash103exp.pl Gnix http://gnix.netsons.org This exploit use an SQL Injection in the file admin/login.php to bypass the login, and then an SQL Injection in the admin/news.php to extract...

Stash 1.0.3 (SQL) User Credentials Disclosure Exploit

Exploit for unknown platform in category web applications ===================================================== Stash 1.0.3 SQL User Credentials Disclosure Exploit ===================================================== !/usr/bin/perl -w User credentials disclosure exploit - stash103exp.pl This...

phpfusionmanuals-sql.txt

PHP-Fusion Mod manuals manual Remote SQL Injection Vulnerability ++++++++++++++++++++++++++++ Author : boom3rang webpage : www.khg-crew.ws greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er - -=Kosova Hackers Group=- ++++++++++++++++++++++++++++ + Dork: infusions/manuals/manuals.php?manual= +...

FAQ Management Script - 'catid' SQL Injection

|| | | FAQ Management catid Remote SQL Injection Vulnerability | | |-------------------- Hussin X -------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...