2982 matches found
PHP-Nuke Platinium 7.6.b.5 - Remote Code Execution
Date: 02/07/08 Note I modified a bit phpsploit for this exploit, because PHP Nuke plays with REQUESTURI var ... Requirements registerglobals=On phpreter phpreter is really easy to use: You can change mode using "mode=", with = sql, php or cmd If you want to understand how it work ... read the cod...
CVE-2008-2349
Zomplog 3.8.2 and earlier allows remote attackers to gain administrative access by creating an admin account via a direct request to install/newuser.php with the admin parameter set to 1...
MyPicGallery 1.0 Arbitrary Add-Admin Exploit
Exploit for unknown platform in category web applications ============================================ MyPicGallery 1.0 Arbitrary Add-Admin Exploit ============================================ !/usr/bin/perl use strict; use LWP::UserAgent; print "-+-- MyPicGallery 1.0 Arbitrary Add-Admin Exploit...
AlkalinePHP 0.77.35 - 'adduser.php' Arbitrary Add Admin
--==+================================================================================+==-- --==+ AlkalinePHP = 0.77.35 adduser.php Arbitrary Add-Admin +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 17 MAY 200...
AlkalinePHP <= 0.77.35 (adduser.php) Arbitrary Add-Admin Vuln
Exploit for unknown platform in category web applications ============================================================= AlkalinePHP = 0.77.35 adduser.php Arbitrary Add-Admin Vuln =============================================================...
TorrentFlux 2.3 - admin.php Cross-Site Request Forgery (Add Admin)
TorrentFlux 2.3 - admin.php Cross-Site Request Forgery Add Admin source: https://www.securityfocus.com/bid/28846/info TorrentFlux is prone to a cross-site request-forgery vulnerability and a remote PHP code-execution vulnerability. Exploiting these issues may allow a remote attacker to create...
KnowledgeQuest 2.5 Arbitrary Add Admin Exploit
No description provided by source. !/usr/bin/perl use strict; use LWP::UserAgent; print "-+------------------------------------------+-\n"; print "-+- KnowledgeQuest 2.5 Arbitrary Add Admin -+-\n"; print "-+------------------------------------------+-\n"; print "-+- Discovered && Coded By t0pP8uz...
KnowledgeQuest 2.5 - Arbitrary Add Admin
KnowledgeQuest 2.5 - Arbitrary Add Admin !/usr/bin/perl use strict; use LWP::UserAgent; print "-+------------------------------------------+-\n"; print "-+- KnowledgeQuest 2.5 Arbitrary Add Admin -+-\n"; print "-+------------------------------------------+-\n"; print "-+- Discovered && Coded By...
KnowledgeQuest 2.5 - Arbitrary Add Admin
!/usr/bin/perl use strict; use LWP::UserAgent; print "-+------------------------------------------+-\n"; print "-+- KnowledgeQuest 2.5 Arbitrary Add Admin -+-\n"; print "-+------------------------------------------+-\n"; print "-+- Discovered && Coded By t0pP8uzz -+-\n"; print "-+- This Exploit...
Nuked-Klan <= 1.7.6 Multiple Vulnerabilities Exploit
?php / Name: Nuked-Klan = 1.7.6 Multiple Vulnerabilities Exploit Credits: Charles "real" F. charlesfolathotmail.fr URL: http://realn.free.fr/releases/46556 Date: 04-01-08 - Remote Code Execution - Remote File Upload - Admin Hash Extraction Remote Code Exec vulnerability used in this exploit was...
Design/Logic Flaw
ZyXEL Prestige routers have a minimum password length for the admin account that is too small, which makes it easier for remote attackers to guess passwords via brute force methods...
CVE-2008-1529
The CVE-2008-1529 entry concerns ZyXEL Prestige routers where the admin account enforces too-short password minimums, enabling easier brute-force guessing from remote attackers. Affected component: the admin login/password mechanism on ZyXEL Prestige devices. Root cause: insufficient minimum pass...
Default credentials
Plone CMS 3.0.5, and probably other 3.x versions, places a base64 encoded form of the username and password in the ac cookie for the admin account, which makes it easier for remote attackers to obtain administrative privileges by sniffing the network...
Default credentials
The Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware has "admin" as its default password for the "admin" account, which makes it easier for remote attackers to obtain access...
CVE-2007-6709
The Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware has "admin" as its default password for the "admin" account, which makes it easier for remote attackers to obtain access...
wpdmsguest-multi.txt
Wordpress Plugin dmsguestbook 1.7.0 Multiple Remote Vulnerabilities by NBBN 2nd, February 2008 1 File Disclosure Open the following url you can see the config data of wordpress, with the mysql-server username and password. In this file you usually have write permission, so an attacker can place h...
Wordpress Plugin dmsguestbook 1.7.0 Multiple Remote Vulnerabilities
No description provided by source. Wordpress Plugin dmsguestbook 1.7.0 Multiple Remote Vulnerabilities by NBBN 2nd, February 2008 1 File Disclosure Open the following url you can see the config data of wordpress, with the mysql-server username and password. In this file you usually have write...
BookmarkX script 2007 - topicid SQL Injection
BookmarkX script 2007 - topicid SQL Injection BookmarkX scriptPowered by GengoliaWebStudioSQL Injection AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : "2007 BookmarkX script" DORKS 2 : Powered by GengoliaWebStudio DORK 3 : allinurl :"index.php?menu=showtopic" EXPLOIT :...
WordPress Plugin dmsguestbook 1.7.0 - Multiple Vulnerabilities
WordPress Plugin dmsguestbook 1.7.0 - Multiple Vulnerabilities Wordpress Plugin dmsguestbook 1.7.0 Multiple Remote Vulnerabilities by NBBN 2nd, February 2008 1 File Disclosure Open the following url you can see the config data of wordpress, with the mysql-server username and password. In this fil...
Debian: Security Advisory (DSA-884-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...