runcms highlight.php hole

This is a stupid BUG report. They found the bug without checking the script or they know but dont said about it to promote their group. The truth is the script is allow only user that have the right to access the "systems" module to use it, this mean only admin and some moderators/users that have...

NOVL-2005010098073 GroupWise Password Caching

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 For Immediate Disclosure ============================== Summary ============================== Security Alert: NOVL-2005-10098073 Title: GroupWise Password Caching Date: 16-August-2005 Revision: Original Product Name: GroupWise 5.x, 6.x OS/Platforms:...

[PHPADSNEW-SA-2005-001] phpAdsNew and phpPgAds 2.0.6 fix multiple vulnerabilities

======================================================================== phpAdsNew / phpPgAds security advisory PHPADSNEW-SA-2005-001 ------------------------------------------------------------------------ Advisory ID: PHPADSNEW-SA-2005-001 Date: 2005-Aug-17 Security risk: highly critical...

CVE-2002-2054

TeeKai Forum 1.2 allows remote attackers to authenticate as the administrator and and gain privileged web forum access by setting the validlevel cookie to admin...

CVE-2002-2064

PhpWebGallery 1.0 is affected by CVE-2002-2064. isadmin.php allows remote attackers to gain administrative access by setting the photo_login cookie to the value “pseudo,” effectively bypassing authentication. Root cause is improper cookie-based authorization in isadmin.php. The vulnerability can ...

e107617.txt

Software: http://www.e107.org Author: Heintz Advisory origin: http://www.waraxe.us Software bugtracker: http://e107.org/e107plugins/bugtracker2/bugtracker2.php?0.bug.558 e107 v 0.617 search.php line 142 if$POST'searchquery' echo ""; unset$text; extract$POST; here extract registeres and overwrites...

ocean12SQL.txt

Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Desc: SQL injection : Ocean12 Mailing list manager PRO 1.06 Vendor: www.ocean12scripts.com Risk: High An sql injection allows anyone to login as admin using this sql query in the login panel: Adminid: Admin' UNI...

VERITAS Backup Exec remote registry access validation vulnerability

Overview VERITAS Backup Exec contains a remote registry access validation vulnerability. Description VERITAS Backup Exec is a data backup and recovery solution with support for over the network backup.An access validation vulnerability in Backup Exec for Windows allows remote attackers to access...

NEXTWEB (i)Site - 'login.asp' SQL Injection

source: https://www.securityfocus.com/bid/13834/info NEXTWEB iSite is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

CVE-2004-1970

CVE-2004-1970 describes a vulnerability in Samsung SmartEther SS6215S switches (and possibly other Samsung switches) where an attacker can gain administrative access by submitting an admin username followed by a password of maximum allowed length, then pressing Enter after the resulting error mes...

CVE-2004-1970

Samsung SmartEther SS6215S switch, and possibly other Samsung switches, allows remote attackers and local users to gain administrative access by providing the admin username followed by a password that is the maximum allowed length, then pressing the enter key after the resulting error message...

CVE-2001-1472

The CVE-2001-1472 entry describes a SQL injection in phpBB 1.4.0/1.4.1 through prefs.php via the viewemail parameter. This allows remote authenticated users to execute arbitrary SQL commands and gain administrative access. Affected: phpBB 1.4.0 and 1.4.1; vulnerability originates from the handlin...

Mafia Blog

Mafia Blog Version: .4 BETA Vendor: http://chrisnowak.org/projects/mafia/ Author: Chris Nowak Let's go... There's no check on admin folder so, anyone could get admin access just accessing admin folder. As admin we can edit comments, upload images, Edit info about pictures and edit info about the...

phpMyFamily <= 1.4.0 SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================== phpMyFamily newProto="tcp",PeerAddr="$ARGV0",PeerPort="80" or die "$ARGV0Connection Failed !!\n\n"; $muka - autoflush1; print $muka "$serius"; print "Sending exploit DONE \n\n"; sleep7; close$muka...

phpMyFamily140.txt

ADZ Security Team =================== Info Program: phpMyFamily Version: 1.4.0 Modules: people.php, track.php, edit.php, document.php, census.php, passthru.php and other.. Bug type: SQL Injection Vendor site: http://www.phpmyfamily.net/ Vendor Informed: Yes =================== Bug Info Basic...

phpbb2012.txt

-------------------------------------------------------------------- Written by [email protected] -------------------------------------------------------------------- -------------------------------------------------------------------- Exploit : 2.0.x = phpbb 2.0.12 :...

projectBB0451.txt

Sorry it's in French but i don't have the time to translate... It has been published on SecurityTracker to for people who can't read French. Logiciel: ProjectBB v0.4.5.1 Auteur: Benjilenoob E-mail: [email protected] !-------------------! ! II. XSS ! !-------------------!...

phpBB 2.0.12 - Session Handling Authentication Bypass

phpBB 2.0.12 - Session Handling Authentication Bypass phpBB 2.0.12 Session Handling Authentication Bypass .. easy to use exploit .. YOU DON'T HAVE TO REGISTER AT THE VICTIM'S FORUM.. 1- Simply VISIT the forum using Mozilla Firefox.. and be sure that the cookie is made : 3- Close the Browser .. 2-...

failles dans ProjectBB v0.4.5.1

Sorry it's in French but i don't have the time to translate... It has been published on SecurityTracker to for people who can't read French. Logiciel: ProjectBB v0.4.5.1 Auteur: Benjilenoob E-mail: [email protected] !-------------------! ! II. XSS ! !-------------------!...

Aztek Forum 4.0 - myadmin.php Database Dumper

Aztek Forum 4.0 - myadmin.php Database Dumper / Changed line 81 - Tested and working /str0ke / / LOTFREE Team presents : Forum-Aztek v4.0 4nd pr0b4bly inf3ri0r Database Dump Xpl0it 0day dUd3 X- ./aztek-sploit 127.0.0.1 admin forum HTTP/1.1 200 OK Date: Sat, 05 Mar 2005 22:18:13 GMT Server:...