XAMPP 1.6.8 - (CSRF) Change Administrative Password Exploit

No description provided by source. XAMPP change administrative password: -------------------------------------------------------------------------------- Written by Michael Brooks special thanks to str0ke Affects XAMPP 1.6.8. homepage: http://www.apachefriends.org/ XAMPP has 17+ million downloads...

XAMPP for Windows 1.6.8 'cds.php' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31564/info XAMPP for Windows is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

XAMPP 3.2.1 & phpMyAdmin 4.1.6 - Multiple Vulnerabilities

No description provided by source. Title: XAMPP 3.2.1 & phpMyAdmin 4.1.6 = multiple vulnerabilities Date: 6/04/2014 Author: hackerDesk Software Link: http://www.apachefriends.org/en/xampp-windows.html Version: 3.2.1 & 4.1.6 Tested on: Windows 7 CVE : kuDos tO: Mayank Kapoor@wHys0SerI0s Sujoy...

XAMPP for Windows 1.8.2 - Blind SQL Injection

No description provided by source...

Vanilla Forum 2.0.17.9 LFI Vulnerability

No description provided by source. ------------------------------------------------------------------------ Software................Vanilla Forum 2.0.17.9 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.vanillaforums.com/...

Time and Expense Management System Multiple Vulnerabilities

No description provided by source. ------------------------------------------------------------------------ Software................Time and Expense Management System Vulnerability...........Command Injection Threat Level............Very Critical 5/5...

Wordpress Plugin Custom Pages 0.5.0.1 - LFI Vulnerability

No description provided by source. ------------------------------------------------------------------------ Software................WordPress WP Custom Pages 0.5.0.1 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5...

egroupware 1.8.001.20110421 - Multiple Vulnerabilities

No description provided by source. ------------------------------------------------------------------------ Software................eGroupware 1.8.001.20110421 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.egroupware.org/...

BaconMap 1.0 - Local File Disclosure Vulnerability

No description provided by source. ------------------------------------------------------------------------ Software................BaconMap 1.0 Vulnerability...........Local File Inclusion Download................http://baconmap.nmsu.edu/ Release Date............10/10/2010 Tested...

XAMPP Phonebook.PHP Multiple Remote HTML Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/13127/info XAMPP is prone to multiple remote HTML-injection vulnerabilities because the software fails to properly sanitize user-supplied input before including it in dynamically generated web content. An attacker may...

Andy's PHP Knowledgebase Project 0.95.4 - SQL Injection

No description provided by source. ------------------------------------------------------------------------ Software................Andy's PHP Knowledgebase Project 0.95.4 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.aphpkb.org/...

Cythosia 2.x Botnet - SQL Injection Vulnerability

No description provided by source. Exploit Title: Cythosia Botnet SQL-Injection Vulnerability Date: 11.12.2013 Exploit Author: GalaxyAndroid Vendor Homepage: unkn0wn Application Screenshots http://www.xylibox.com/2012/08/cythosia-botnet-vnloader.html Version: 2.x Tested on: Windows 7 with Xampp...

dotProject 2.1.5 CSRF Vulnerability

No description provided by source. Source: http://packetstormsecurity.org/files/view/98245/dotProject2.1.5-xsrf.txt !------------------------------------------------------------------------ Software................dotProject 2.1.5 Vulnerability...........Cross-site Request Forgery...

phpMyAdmin 3.1.0 - (CSRF) SQL Injection Vulnerability

No description provided by source. Written by Michael Brooks Special Thanks to str0ke and rGod Intro: phpMyAdmin is by far the most popular PHP project. Between phpmyadmin and the xampp project there are more than 34+ million downloads from sourceforge.net . This exploit was released along side...

XAMPP 1.6.x 'showcode.php' Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/37999/info XAMPP is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker can exploit this vulnerability to obtain potentially sensitive information an...

phreebooks r30rc4 - Multiple Vulnerabilities

No description provided by source. ------------------------------------------------------------------------ Software................PhreeBooks R30RC4 Vulnerability...........Local File Inclusion Download................http://sourceforge.net/projects/phreebooks Release Date............2/22/2011...

XAMPP for Windows <= 1.6.0a mssql_connect() Remote BoF Exploit

No description provided by source. ?php printr' --------------------------------------------------------------------------- XAMPP for Windows = 1.6.0a adodb.php/mssqlconnect remote buffer overflow proof-of-concept exploit seh overwrite method / 2000 sp3 version mail: retrog at alice dot it site:...

webedition cms 6.1.0.2 - Multiple Vulnerabilities

No description provided by source. ------------------------------------------------------------------------ Software................Web Edition 6.1.0.2 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.webedition.org Vendor Contac...

Uebimiau Webmail 3.2.0-2.0 - Local File Inclusion Vulnerability

No description provided by source. Exploit Title: Uebimiau Webmail Local File Inclusion Date: 10-04-10 Author: Blake Software Link: http://sourceforge.net/projects/t-dahmail/files/latest/Uebimiau3.2.02.0Alpha.zip/download Version: 3.2.0-2.0 Tested on: Windows XP SP3 running xampp lite The stage...

Clipbucket 2.4 RC2 645 SQL Injection Vulnerability

No description provided by source. ------------------------------------------------------------------------ Software................Clipbucket 2.4 RC2 645 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.clip-bucket.com/ Discovery...