2722 matches found
ayco-sql.txt
Author : By CrackersChild Contact: [email protected] Greetz : milw0rm.com & tryag.cc & All My Friends Note : Siz Pekeke Denen itler ; Siz ne turk ne de kurt olabilirsiniz. Siz Dupe Duz OROSPU cocuklarisiniz ! Script : Ayco Okul Portali tr Sql injection Vulnerability...
Linksys WRT350N unauthorized access
Outdated SAMBA version is used, default admin:admin account is present and default guest account...
Full PHP Emlak Script - landsee.php SQL Injection
Full PHP Emlak Script - landsee.php SQL Injection source: https://www.securityfocus.com/bid/30962/info Full PHP Emlak Script is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input. Attackers may exploit this issue to compromise the application, access...
MiaCMS 4.6.5 - Multiple SQL Injections
MiaCMS 4.6.5 - Multiple SQL Injections MiaCMS SourceCtrl+F3 ... onclick="window.open'http://digg.com/submit?phase=3&url='+encodeURIComponentlocation.href+'&bodytext=This+site+uses+MiaCMS+-+the+free%2C+open+source+content+management+system+admin%3A21232f297a57a5a743894a0e4a801fc3&...
PHP-Nuke Platinium 7.6.b.5 - Remote Code Execution
Date: 02/07/08 Note I modified a bit phpsploit for this exploit, because PHP Nuke plays with REQUESTURI var ... Requirements registerglobals=On phpreter phpreter is really easy to use: You can change mode using "mode=", with = sql, php or cmd If you want to understand how it work ... read the cod...
CVE-2008-2349
Zomplog 3.8.2 and earlier allows remote attackers to gain administrative access by creating an admin account via a direct request to install/newuser.php with the admin parameter set to 1...
AlkalinePHP <= 0.77.35 (adduser.php) Arbitrary Add-Admin Vuln
Exploit for unknown platform in category web applications ============================================================= AlkalinePHP = 0.77.35 adduser.php Arbitrary Add-Admin Vuln =============================================================...
MyPicGallery 1.0 Arbitrary Add-Admin Exploit
Exploit for unknown platform in category web applications ============================================ MyPicGallery 1.0 Arbitrary Add-Admin Exploit ============================================ !/usr/bin/perl use strict; use LWP::UserAgent; print "-+-- MyPicGallery 1.0 Arbitrary Add-Admin Exploit...
AlkalinePHP 0.77.35 - 'adduser.php' Arbitrary Add Admin
--==+================================================================================+==-- --==+ AlkalinePHP = 0.77.35 adduser.php Arbitrary Add-Admin +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 17 MAY 200...
TorrentFlux 2.3 - admin.php Cross-Site Request Forgery (Add Admin)
TorrentFlux 2.3 - admin.php Cross-Site Request Forgery Add Admin source: https://www.securityfocus.com/bid/28846/info TorrentFlux is prone to a cross-site request-forgery vulnerability and a remote PHP code-execution vulnerability. Exploiting these issues may allow a remote attacker to create...
KnowledgeQuest 2.5 Arbitrary Add Admin Exploit
No description provided by source. !/usr/bin/perl use strict; use LWP::UserAgent; print "-+------------------------------------------+-\n"; print "-+- KnowledgeQuest 2.5 Arbitrary Add Admin -+-\n"; print "-+------------------------------------------+-\n"; print "-+- Discovered && Coded By t0pP8uz...
KnowledgeQuest 2.5 - Arbitrary Add Admin
KnowledgeQuest 2.5 - Arbitrary Add Admin !/usr/bin/perl use strict; use LWP::UserAgent; print "-+------------------------------------------+-\n"; print "-+- KnowledgeQuest 2.5 Arbitrary Add Admin -+-\n"; print "-+------------------------------------------+-\n"; print "-+- Discovered && Coded By...
KnowledgeQuest 2.5 - Arbitrary Add Admin
!/usr/bin/perl use strict; use LWP::UserAgent; print "-+------------------------------------------+-\n"; print "-+- KnowledgeQuest 2.5 Arbitrary Add Admin -+-\n"; print "-+------------------------------------------+-\n"; print "-+- Discovered && Coded By t0pP8uzz -+-\n"; print "-+- This Exploit...
Nuked-Klan <= 1.7.6 Multiple Vulnerabilities Exploit
?php / Name: Nuked-Klan = 1.7.6 Multiple Vulnerabilities Exploit Credits: Charles "real" F. charlesfolathotmail.fr URL: http://realn.free.fr/releases/46556 Date: 04-01-08 - Remote Code Execution - Remote File Upload - Admin Hash Extraction Remote Code Exec vulnerability used in this exploit was...
Design/Logic Flaw
ZyXEL Prestige routers have a minimum password length for the admin account that is too small, which makes it easier for remote attackers to guess passwords via brute force methods...
CVE-2008-1529
The CVE-2008-1529 entry concerns ZyXEL Prestige routers where the admin account enforces too-short password minimums, enabling easier brute-force guessing from remote attackers. Affected component: the admin login/password mechanism on ZyXEL Prestige devices. Root cause: insufficient minimum pass...
Default credentials
Plone CMS 3.0.5, and probably other 3.x versions, places a base64 encoded form of the username and password in the ac cookie for the admin account, which makes it easier for remote attackers to obtain administrative privileges by sniffing the network...
Default credentials
The Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware has "admin" as its default password for the "admin" account, which makes it easier for remote attackers to obtain access...
CVE-2007-6709
The Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware has "admin" as its default password for the "admin" account, which makes it easier for remote attackers to obtain access...
wpdmsguest-multi.txt
Wordpress Plugin dmsguestbook 1.7.0 Multiple Remote Vulnerabilities by NBBN 2nd, February 2008 1 File Disclosure Open the following url you can see the config data of wordpress, with the mysql-server username and password. In this file you usually have write permission, so an attacker can place h...